$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft File: uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json) Hash identifier: CrlMCfwRsepWgex6KIUBHEULTnaKJVgyffdvyztjdfM= Subject key identifier: 2F:24:CF:FE:21:C9:FF:04:44:3E:84:8F:B6:C2:E7:6E:4F:43:C2:4D Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft Manifest number: 0393 Signing time: Thu 03 Jul 2025 01:12:41 +0000 Manifest this update: Thu 03 Jul 2025 01:12:40 +0000 Manifest next update: Thu 10 Jul 2025 01:12:40 +0000 Files and hashes: 1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: HNc9ImDm+g+wb7YUBrRU89fVd6B+o1Q2+lPrTIDER9o=) 2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: Jul 3 01:12:40 2025 GMT Not After : Jul 10 01:12:40 2025 GMT Subject: CN=6865d909-f6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:83:4a:96:c1:1e:38:04:9b:7e:38:eb:4c: f8:96:35:e1:05:e5:d4:f8:38:67:b1:a2:dc:98:ce: 9a:c4:d5:87:d9:ae:8a:f8:87:16:10:1f:61:6e:9b: 66:1d:66:f8:10:13:dd:63:ee:58:f9:fb:8d:02:4b: a4:ef:3e:1f:cc:94:df:b8:4c:69:17:e9:53:d7:7b: b8:47:6f:51:a4:ef:0f:ed:8e:14:30:62:d8:6c:76: ef:ee:a3:53:b0:bf:3b:e4:c3:82:d6:1a:5f:16:2d: fe:dc:52:e0:3f:34:69:03:3c:f7:45:87:f3:4d:a4: 43:57:ab:07:6d:21:dc:f5:b1:6b:a7:34:b4:4d:05: 18:d6:52:e8:df:e2:a3:0d:75:08:18:5b:b3:77:8e: ec:66:d0:22:27:a5:73:a3:dd:9b:e5:4b:c6:dd:c1: 70:4d:05:52:04:fd:05:0d:20:35:8e:6c:78:5a:4c: ab:70:57:70:b7:62:01:06:9c:09:db:71:65:a1:0b: 94:ab:e9:76:b9:a1:1b:a1:c9:b8:2a:da:aa:e6:dc: 85:4a:b3:94:12:3e:6f:86:d0:97:25:17:95:ec:8b: 78:a0:9c:04:64:45:38:c0:ca:e3:6f:9e:4f:6f:77: 93:82:7d:8a:fc:69:24:cd:7f:00:e8:79:2f:7d:aa: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:24:CF:FE:21:C9:FF:04:44:3E:84:8F:B6:C2:E7:6E:4F:43:C2:4D X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d7:44:38:ac:25:42:a3:af:a1:db:28:0d:be:d4:a7:6a:29: 48:82:0c:6b:1e:70:f6:78:a8:e0:99:97:43:8f:b1:76:0f:44: ef:69:93:57:c2:ad:6e:14:00:f6:32:2e:12:37:c5:16:03:76: ed:d4:6f:77:bb:55:52:58:84:ec:6e:be:0f:73:17:22:65:d5: da:ff:0a:fa:39:a0:72:d2:d1:3a:4f:7a:ec:6f:cf:29:8b:76: 34:dc:fc:05:e2:6d:ce:55:78:3d:c3:6c:91:f6:f5:49:c9:01: ab:a1:60:94:4b:0a:9a:c7:41:1c:96:71:ae:e6:0e:11:dd:31: 65:49:e7:7c:96:c7:39:28:e7:bb:a7:57:82:cb:42:80:75:08: b2:82:86:c9:83:69:fe:ae:1f:d4:1c:cc:14:2d:d1:fb:63:0d: 94:7f:3f:76:a9:d4:14:99:34:db:16:90:f3:63:52:a6:af:46: 2c:39:e7:ca:ea:33:9c:c2:01:c7:42:05:e3:9a:95:a3:d8:7f: 22:1d:f5:3d:f0:11:40:20:c1:bf:d9:f4:5f:50:e8:d2:6e:c9: 23:86:22:fc:b1:0a:01:8c:62:ae:cc:00:9d:50:90:be:67:75: b0:5d:45:50:54:b5:98:c8:2f:95:80:d4:cb:de:e9:76:46:31: 34:7e:a1:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjUwNzAzMDExMjQwWhcNMjUwNzEwMDExMjQwWjAYMRYwFAYD VQQDEw02ODY1ZDkwOS1mNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21GDSpbBHjgEm34460z4ljXhBeXU+DhnsaLcmM6axNWH2a6K+IcWEB9hbptm HWb4EBPdY+5Y+fuNAkuk7z4fzJTfuExpF+lT13u4R29RpO8P7Y4UMGLYbHbv7qNT sL875MOC1hpfFi3+3FLgPzRpAzz3RYfzTaRDV6sHbSHc9bFrpzS0TQUY1lLo3+Kj DXUIGFuzd47sZtAiJ6Vzo92b5UvG3cFwTQVSBP0FDSA1jmx4WkyrcFdwt2IBBpwJ 23FloQuUq+l2uaEbocm4Ktqq5tyFSrOUEj5vhtCXJReV7It4oJwEZEU4wMrjb55P b3eTgn2K/GkkzX8A6Hkvfao4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8kz/4h yf8ERD6Ej7bC525PQ8JNMB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODZEMi8zOUREQ0NEQ0E5NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0 ZEgtLWxZMUd1dE82a1RHUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB110Q4rCVCo6+h2ygNvtSnailIggxrHnD2eKjgmZdDj7F2D0TvaZNX wq1uFAD2Mi4SN8UWA3bt1G93u1VSWITsbr4PcxciZdXa/wr6OaBy0tE6T3rsb88p i3Y03PwF4m3OVXg9w2yR9vVJyQGroWCUSwqax0EclnGu5g4R3TFlSed8lsc5KOe7 p1eCy0KAdQiygobJg2n+rh/UHMwULdH7Yw2Ufz92qdQUmTTbFpDzY1Kmr0YsOefK 6jOcwgHHQgXjmpWj2H8iHfU98BFAIMG/2fRfUOjSbskjhiL8sQoBjGKuzACdUJC+ Z3WwXUVQVLWYyC+VgNTL3ul2RjE0fqFM -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:17 2025 by rpki-client