$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: tuYNNiGWxhlOCt4U9qt94nXW0igi7ke0EeU5SJKmssg= Subject key identifier: 01:C2:A0:02:C2:D0:3C:CF:5E:61:95:7E:01:69:B0:54:C2:F0:86:B8 Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 05A0 Signing time: Sat 23 Aug 2025 00:46:44 +0000 Manifest this update: Sat 23 Aug 2025 00:46:43 +0000 Manifest next update: Sat 30 Aug 2025 00:46:43 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: 1JnwEFHcyRrNaeHoJubGZqPNxAR1aoUzwqZn6y19xKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Aug 23 00:46:43 2025 GMT Not After : Aug 30 00:46:43 2025 GMT Subject: CN=68a90f73-dfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c5:70:a5:ca:b3:f5:e7:62:cf:d0:74:a6:6e: 83:6b:88:76:0c:e4:b7:83:eb:d1:13:48:e1:8d:39: 84:2c:ea:d7:90:e2:83:cc:80:cd:ec:db:01:1f:16: 13:14:6a:4b:85:0c:00:4b:af:df:d3:3c:d0:85:a5: 46:90:d4:a8:bd:67:a3:0b:5a:2f:3a:df:af:ca:ee: c3:4c:0f:c7:cd:af:c0:e1:b1:b7:e1:01:24:80:57: 6d:84:a9:8f:f4:3c:a0:d0:ec:a8:4a:52:95:8f:a7: 6b:15:dd:5b:a3:dd:1f:e0:23:d3:54:21:6f:ce:73: 74:2f:c6:ef:cb:6b:82:14:ec:d4:00:b5:7e:b3:3a: 3a:90:a6:9e:98:96:88:8e:73:ce:b7:d2:9f:3a:7c: 37:35:2d:f5:46:31:f0:c5:71:15:3e:c9:6f:92:5a: b5:de:fc:f4:fa:50:23:ed:58:c0:6d:98:f6:fb:eb: 7b:31:9d:ca:83:0a:fe:a0:ce:67:2e:7f:ea:80:80: e3:e2:df:05:2f:e2:03:d8:a9:dc:52:ef:ba:da:5d: 45:81:1f:59:b5:46:4f:d4:57:bb:ea:2f:25:76:d3: b9:94:a2:0d:09:f2:99:76:e0:b6:88:58:e8:46:4b: 57:ac:ad:e8:23:08:8f:67:0c:93:9f:5c:12:a7:0f: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C2:A0:02:C2:D0:3C:CF:5E:61:95:7E:01:69:B0:54:C2:F0:86:B8 X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8b:27:44:bd:e2:9f:0f:0a:9b:35:8a:2e:cb:f4:ba:b9:05: c3:f3:a1:85:c5:db:94:ee:25:54:ae:22:a3:e9:4e:c8:16:6c: 1d:d8:5e:ea:81:ae:49:e0:29:e5:77:0b:9d:6a:b3:4a:59:fa: a4:f5:4a:1f:ff:c7:aa:7e:22:53:28:7a:1c:e3:06:e3:dc:37: 86:76:06:d6:d5:36:de:63:74:36:33:c4:90:6b:55:b3:00:0f: 04:a1:ca:5f:a4:93:6c:f7:58:6a:ee:4a:b4:00:e4:19:2e:00: 1d:d9:2a:e7:b3:13:37:12:2b:68:40:a4:60:1b:3a:bf:27:51: 1d:b1:7b:fb:f0:0f:70:5f:45:3a:c3:ea:ca:de:11:7a:e2:4f: 4a:2c:39:ac:04:7f:73:7f:0b:ea:90:5d:ea:0f:55:03:1c:4b: 12:42:95:a3:d0:96:b2:9e:27:51:7c:fd:53:59:62:ad:d4:f7: 08:da:83:b8:6f:b6:a6:4b:0e:50:f7:96:bd:51:0e:36:40:32: a6:85:27:2d:18:3b:f9:c7:e7:11:2e:a3:08:7b:98:c2:55:7f: 2e:f7:da:ac:33:13:ec:49:5b:1d:fb:c6:82:16:a9:43:65:9a: f8:27:3e:83:72:e6:69:54:5f:f5:ef:ee:6b:73:1e:6f:77:19: 3f:92:45:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUwODIzMDA0NjQzWhcNMjUwODMwMDA0NjQzWjAYMRYwFAYD VQQDEw02OGE5MGY3My1kZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cVwpcqz9ediz9B0pm6Da4h2DOS3g+vRE0jhjTmELOrXkOKDzIDN7NsBHxYT FGpLhQwAS6/f0zzQhaVGkNSovWejC1ovOt+vyu7DTA/Hza/A4bG34QEkgFdthKmP 9Dyg0OyoSlKVj6drFd1bo90f4CPTVCFvznN0L8bvy2uCFOzUALV+szo6kKaemJaI jnPOt9KfOnw3NS31RjHwxXEVPslvklq13vz0+lAj7VjAbZj2++t7MZ3Kgwr+oM5n Ln/qgIDj4t8FL+ID2KncUu+62l1FgR9ZtUZP1Fe76i8ldtO5lKINCfKZduC2iFjo RktXrK3oIwiPZwyTn1wSpw9D4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHCoALC 0DzPXmGVfgFpsFTC8Ia4MB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEiydEveKfDwqbNYouy/S6uQXD86GFxduU7iVUriKj6U7IFmwd2F7q ga5J4CnldwudarNKWfqk9Uof/8eqfiJTKHoc4wbj3DeGdgbW1TbeY3Q2M8SQa1Wz AA8EocpfpJNs91hq7kq0AOQZLgAd2SrnsxM3EitoQKRgGzq/J1EdsXv78A9wX0U6 w+rK3hF64k9KLDmsBH9zfwvqkF3qD1UDHEsSQpWj0JaynidRfP1TWWKt1PcI2oO4 b7amSw5Q95a9UQ42QDKmhSctGDv5x+cRLqMIe5jCVX8u99qsMxPsSVsd+8aCFqlD ZZr4Jz6DcuZpVF/17+5rcx5vdxk/kkWN -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:39 2025 by rpki-client