$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: sP/I9xHQDoy6uVP7oNBlI5EQJsgiM2awKblA0R98Qr8= Subject key identifier: 00:C6:20:FC:AC:82:B1:9D:45:4C:5A:E6:0D:06:B9:65:E0:76:63:38 Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 0569 Signing time: Thu 03 Jul 2025 00:58:41 +0000 Manifest this update: Thu 03 Jul 2025 00:58:40 +0000 Manifest next update: Thu 10 Jul 2025 00:58:40 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: NNqECpqah9fivrXuFCG+iF1LlMYWYAI6dbEV6avAcss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Jul 3 00:58:40 2025 GMT Not After : Jul 10 00:58:40 2025 GMT Subject: CN=6865d5c1-10e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:4e:da:bc:17:e5:ff:d1:e5:fa:c1:f3:28: da:71:2c:1a:44:97:75:be:df:6c:e6:2e:73:df:6a: da:10:52:f0:d6:70:32:bb:5d:c8:d4:02:ca:6c:da: 4f:8c:62:17:65:cf:e9:33:fb:d9:47:16:fc:a9:6a: 66:27:f8:ca:d4:e0:fb:96:ca:b3:44:d3:62:c4:d5: 8d:3f:37:25:9e:77:2b:93:69:fd:f4:8c:0d:8b:e9: f1:6d:af:74:41:22:23:d2:38:78:69:4e:3c:5c:42: 5b:59:5d:67:c8:1e:14:02:86:e9:ec:65:76:05:91: 4a:db:16:ac:3b:51:27:63:08:53:72:5d:87:1b:c4: 51:e7:d3:d6:69:6a:2e:93:a0:73:be:c0:7f:20:a2: dc:8e:9c:44:7c:ae:72:be:aa:06:b3:ed:68:1b:6d: 42:ee:3d:31:01:60:97:ca:a1:7f:0b:bb:09:a1:fe: bf:ca:62:26:a5:a8:df:cb:38:a3:91:b0:97:11:b3: b8:46:08:45:a6:6b:45:79:6d:06:96:22:fa:40:10: 9b:9b:56:b9:ec:29:34:34:59:e2:16:70:6c:3d:e5: bb:73:70:7f:82:84:94:2f:80:78:a3:2f:6e:e3:e5: 55:18:4c:2e:78:c6:c5:14:23:bf:d9:07:3f:42:4f: 29:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:20:FC:AC:82:B1:9D:45:4C:5A:E6:0D:06:B9:65:E0:76:63:38 X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:1e:35:b4:d1:b5:76:26:75:62:7f:8d:b2:17:40:f1:50:e3: 43:e6:c9:5a:bb:55:47:97:6b:4c:be:c1:12:6d:f9:4a:b1:f3: 5b:0c:a1:69:5d:0f:c8:94:ae:9b:dd:54:31:8a:1f:cb:42:42: 0e:74:d3:c9:23:10:ac:84:43:15:21:b2:d6:1c:f5:ec:5b:3e: 38:32:5c:14:2b:63:f0:de:ab:a3:fa:e9:5a:2f:8a:3b:32:31: a1:88:b2:90:4e:85:54:4c:c4:4d:dc:e4:e5:3a:bd:83:08:de: 13:64:61:05:b0:09:1b:83:08:ec:a2:52:94:2a:45:2a:75:0d: b2:b8:8a:e8:63:81:25:52:50:63:2c:ef:14:a5:08:30:75:86: 06:42:99:71:c8:96:32:b7:af:6c:2c:fc:db:3c:c0:58:09:69: 87:98:0d:0b:69:8b:3c:fc:c5:b1:28:fa:21:f8:90:5a:a0:92: fa:10:bb:5a:eb:1a:7e:d2:db:1c:d1:c5:7f:97:25:46:6d:70: ad:6b:a7:b6:c8:f9:db:47:8c:73:cc:9a:18:b5:e0:ce:db:fc: 56:06:dd:6a:48:88:46:e8:f4:df:e6:e7:49:5a:ee:62:6c:20: 4e:0b:3a:77:2d:86:f2:08:11:a4:79:78:3f:ca:91:6f:5a:7c: 17:4e:ea:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUwNzAzMDA1ODQwWhcNMjUwNzEwMDA1ODQwWjAYMRYwFAYD VQQDEw02ODY1ZDVjMS0xMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNhO2rwX5f/R5frB8yjacSwaRJd1vt9s5i5z32raEFLw1nAyu13I1ALKbNpP jGIXZc/pM/vZRxb8qWpmJ/jK1OD7lsqzRNNixNWNPzclnncrk2n99IwNi+nxba90 QSIj0jh4aU48XEJbWV1nyB4UAobp7GV2BZFK2xasO1EnYwhTcl2HG8RR59PWaWou k6BzvsB/IKLcjpxEfK5yvqoGs+1oG21C7j0xAWCXyqF/C7sJof6/ymImpajfyzij kbCXEbO4RghFpmtFeW0GliL6QBCbm1a57Ck0NFniFnBsPeW7c3B/goSUL4B4oy9u 4+VVGEwueMbFFCO/2Qc/Qk8pYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADGIPys grGdRUxa5g0GuWXgdmM4MB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/HjW00bV2JnVif42yF0DxUOND5slau1VHl2tMvsESbflKsfNbDKFp XQ/IlK6b3VQxih/LQkIOdNPJIxCshEMVIbLWHPXsWz44MlwUK2Pw3quj+ulaL4o7 MjGhiLKQToVUTMRN3OTlOr2DCN4TZGEFsAkbgwjsolKUKkUqdQ2yuIroY4ElUlBj LO8UpQgwdYYGQplxyJYyt69sLPzbPMBYCWmHmA0LaYs8/MWxKPoh+JBaoJL6ELta 6xp+0tsc0cV/lyVGbXCta6e2yPnbR4xzzJoYteDO2/xWBt1qSIhG6PTf5udJWu5i bCBOCzp3LYbyCBGkeXg/ypFvWnwXTuqm -----END CERTIFICATE-----Generated at Thu Jul 3 11:33:04 2025 by rpki-client