$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json) Hash identifier: gxThWXvfhPC8JOaMD9eXwIEpzdPWuFiVjLf1qj7qdqQ= Subject key identifier: CC:DA:07:22:C6:FA:F0:C3:5F:76:EA:21:72:F8:8C:1A:A0:AB:AB:2C Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39 Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339 Certificate serial: 100C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft Manifest number: 1005 Signing time: Fri 22 Aug 2025 15:46:24 +0000 Manifest this update: Fri 22 Aug 2025 15:46:24 +0000 Manifest next update: Fri 29 Aug 2025 15:46:24 +0000 Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: w6va+KUqnkr0588HFIxqao8LVKuG7sFfPgOCBHs/DqY=) 2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: OwotHwrsvHfL9c2xwdii3HVlS9hQiSq8fqoBsWtp67U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4108 (0x100c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339 Validity Not Before: Aug 22 15:46:24 2025 GMT Not After : Aug 29 15:46:24 2025 GMT Subject: CN=68a890d0-3dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:3e:db:87:8d:3e:47:4c:79:3b:c3:e2:dd: 06:17:78:af:2a:54:9a:6a:ce:01:34:c7:07:c4:65: 69:85:c6:8f:c4:1d:fb:7c:1d:de:90:01:51:23:1b: 26:b9:f0:60:9a:c8:77:45:f1:31:f3:0b:a6:86:b0: 97:be:77:a8:68:e9:1e:6c:7e:bf:c3:76:a7:e8:b4: dc:fa:e9:c2:84:28:22:89:d0:f3:85:73:46:9c:00: be:fd:a4:6c:8c:09:d1:0e:b2:dd:0f:30:a1:19:6c: 34:1d:30:87:7e:d0:93:83:15:e6:4e:d0:7e:65:91: fc:26:d1:21:10:69:38:37:9f:e5:8c:a2:d4:aa:20: 87:3b:71:bd:cd:7a:93:af:40:69:e1:71:60:a6:65: ed:ae:68:c1:a6:06:2b:86:cc:b2:40:ee:69:c6:81: 21:93:af:84:96:10:10:c1:4d:ea:0d:71:a6:67:ac: 89:be:89:d4:21:d2:8c:b0:ad:86:e0:c4:68:66:6a: 69:82:b8:6a:ce:50:14:ac:e9:5b:8d:c1:2b:b5:67: 6c:7d:f6:c6:01:f5:3d:17:bb:0e:89:4e:40:f2:fe: f2:af:c1:d1:67:35:9a:f4:54:3e:13:cc:0b:b0:93: 64:aa:27:47:d5:f7:ce:16:79:4c:06:62:2e:a7:19: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DA:07:22:C6:FA:F0:C3:5F:76:EA:21:72:F8:8C:1A:A0:AB:AB:2C X509v3 Authority Key Identifier: keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:4a:8b:b2:e2:6a:50:25:81:71:57:4e:bf:0e:4a:31:cb:a4: 96:da:91:dd:e5:32:22:61:25:99:7a:12:62:ce:01:47:20:da: e8:07:61:60:85:83:7f:da:44:29:0b:2d:76:6b:9f:98:f5:7f: 75:59:16:ea:f9:19:d2:33:44:2b:63:56:17:69:5e:b1:0c:63: c5:80:86:80:f9:0b:5c:9b:3a:c8:d6:e2:45:16:04:f2:c8:ca: c8:d1:bb:bd:c4:8c:f3:20:49:21:91:9f:c6:25:50:a2:06:e3: 8b:35:91:23:f6:bf:3d:23:45:b5:eb:4b:43:33:4d:bb:61:9d: 27:8b:eb:02:60:2e:d6:86:4b:7e:1b:42:3d:84:10:f1:45:43: cc:95:75:36:b1:2d:a9:f3:b4:e2:4c:82:c7:e8:e8:0c:94:df: 27:26:0f:ce:a1:1d:b7:fd:1f:f9:43:ca:1a:7c:16:21:c1:2f: 07:b5:13:a2:11:f2:de:7e:f1:25:e1:29:9e:f7:4d:f4:05:f7: 81:62:96:1a:8f:81:87:d2:a6:f9:48:b7:be:a3:e3:42:ba:94: 49:0c:26:c2:f5:7e:82:5e:eb:9d:4e:8c:b8:ab:6e:3a:73:be: ea:9c:77:4f:e5:ce:91:c0:cd:05:48:8a:2a:15:4b:16:56:98: e9:ec:b9:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDUxM0REMzA4Q0Q3NTE0MjI3QUY1MUQ4MDVFNTU0MEE2 QTlGNUQzMzkwHhcNMjUwODIyMTU0NjI0WhcNMjUwODI5MTU0NjI0WjAYMRYwFAYD VQQDEw02OGE4OTBkMC0zZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnM+24eNPkdMeTvD4t0GF3ivKlSaas4BNMcHxGVphcaPxB37fB3ekAFRIxsm ufBgmsh3RfEx8wumhrCXvneoaOkebH6/w3an6LTc+unChCgiidDzhXNGnAC+/aRs jAnRDrLdDzChGWw0HTCHftCTgxXmTtB+ZZH8JtEhEGk4N5/ljKLUqiCHO3G9zXqT r0Bp4XFgpmXtrmjBpgYrhsyyQO5pxoEhk6+ElhAQwU3qDXGmZ6yJvonUIdKMsK2G 4MRoZmppgrhqzlAUrOlbjcErtWdsffbGAfU9F7sOiU5A8v7yr8HRZzWa9FQ+E8wL sJNkqidH1ffOFnlMBmIupxkttwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzaByLG +vDDX3bqIXL4jBqgq6ssMB8GA1UdIwQYMBaAFFE90wjNdRQievUdgF5VQKap9dM5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS80RTJEN0EzODUx NDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZDSjY5UjJBWGxWQXBxbjEw emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VUM1RDTTExRkNKNjlSMkFYbFZBcHFuMTB6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS80RTJEN0EzODUxNDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZD SjY5UjJBWGxWQXBxbjEwemsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkSouy4mpQJYFxV06/Dkoxy6SW2pHd5TIiYSWZehJizgFHINroB2Fg hYN/2kQpCy12a5+Y9X91WRbq+RnSM0QrY1YXaV6xDGPFgIaA+QtcmzrI1uJFFgTy yMrI0bu9xIzzIEkhkZ/GJVCiBuOLNZEj9r89I0W160tDM027YZ0ni+sCYC7Whkt+ G0I9hBDxRUPMlXU2sS2p87TiTILH6OgMlN8nJg/OoR23/R/5Q8oafBYhwS8HtROi EfLefvEl4Sme9030BfeBYpYaj4GH0qb5SLe+o+NCupRJDCbC9X6CXuudToy4q246 c77qnHdP5c6RwM0FSIoqFUsWVpjp7Lk/ -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:56 2025 by rpki-client