$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft File: uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json) Hash identifier: Ehg3bUrMqlFGuU/RuTEOu0YpZJ81xb0pd7/vtEEP/Vc= Subject key identifier: F7:C3:8D:86:6C:EC:5C:64:C6:8F:41:A0:28:7B:68:EE:DC:57:5F:54 Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft Manifest number: 03AD Signing time: Sat 23 Aug 2025 01:00:41 +0000 Manifest this update: Sat 23 Aug 2025 01:00:41 +0000 Manifest next update: Sat 30 Aug 2025 01:00:41 +0000 Files and hashes: 1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: joyOsCn0ME41mALVxIg71ulSYCzvWqroAbWIPbx7bFI=) 2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: Aug 23 01:00:41 2025 GMT Not After : Aug 30 01:00:41 2025 GMT Subject: CN=68a912b9-265c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:6e:8c:98:81:81:8b:48:18:bd:b5:95:7c: a6:ae:0f:ff:aa:77:4e:0f:dd:36:46:6e:70:b1:ca: 4c:4f:89:98:a6:29:48:4f:f7:f3:cb:2a:8a:a5:a2: 54:b6:b3:15:57:2b:66:dd:98:bb:07:a1:88:f4:89: 96:4a:ba:89:26:2d:77:c1:d3:04:08:8d:0b:f8:26: 36:b0:31:ec:53:1d:c8:60:11:3f:dd:c0:9a:65:73: a6:de:55:85:53:8d:86:2c:07:df:39:13:3c:ee:d8: 50:da:bc:83:f5:8b:91:ef:da:fa:08:9e:56:9a:ed: 3c:63:f7:b2:20:e6:9b:13:f8:4c:ec:8e:e6:5e:e3: 77:62:c0:7f:37:54:2b:c0:c3:c5:8f:9d:14:53:a9: 98:22:c9:be:74:53:58:84:7c:ce:12:a2:49:b2:df: 8f:50:2e:cf:5d:a5:2b:61:13:3a:99:cb:0f:4e:f3: 04:24:8d:0a:58:0c:26:51:fb:65:a2:47:2f:0f:7e: 29:4e:17:88:32:39:c8:ef:af:8d:9e:a6:57:73:87: ce:fa:52:2d:07:82:1c:2f:a4:33:21:f3:ef:37:5b: b8:d2:61:30:08:ff:19:e3:86:0b:88:22:76:c5:2a: 5e:7d:6c:ff:7e:e5:c8:60:9b:56:27:f7:78:23:8e: fe:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C3:8D:86:6C:EC:5C:64:C6:8F:41:A0:28:7B:68:EE:DC:57:5F:54 X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:df:b0:61:65:99:cf:e6:9a:4c:c8:fe:b4:96:e5:d2:b9:50: 51:96:e8:ce:54:1c:a3:0f:d0:a7:36:c8:35:10:c9:bd:4d:aa: 57:f5:a9:c6:1d:db:a3:15:c5:f0:46:62:38:81:08:40:14:80: ad:01:bf:37:a9:0c:74:93:4a:d7:c5:e4:01:59:2e:99:0c:70: 06:24:72:c6:7b:c0:58:ca:e7:71:ba:3f:48:fa:32:f7:4f:73: 40:c8:85:05:be:7e:61:41:3f:a7:bd:c8:78:b8:cd:d9:a2:9c: d2:3e:d1:52:4a:c6:9b:a6:2a:7a:ed:81:e1:33:d6:d1:28:1d: 41:ed:ab:17:1c:f4:48:59:44:c4:f4:22:dd:06:17:fa:4e:81: 84:28:51:19:e6:ed:da:07:9e:08:12:03:61:a9:35:7a:f8:b9: d0:79:c8:7c:dc:c1:68:bc:4b:80:86:bd:e5:4f:a8:06:6b:30: 2b:a7:4e:8e:f3:54:4c:42:89:a4:3a:36:31:52:c2:ef:7d:61: f8:3e:4a:da:2f:22:16:39:90:22:2b:c1:4e:78:71:32:fd:5c: e7:48:30:ec:02:97:11:3b:2d:ff:b6:26:1a:ad:f5:76:c4:83: e2:db:3b:e6:e9:de:18:3f:29:22:89:5f:93:0c:ac:85:67:e1: d4:c7:d9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjUwODIzMDEwMDQxWhcNMjUwODMwMDEwMDQxWjAYMRYwFAYD VQQDEw02OGE5MTJiOS0yNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniBujJiBgYtIGL21lXymrg//qndOD902Rm5wscpMT4mYpilIT/fzyyqKpaJU trMVVytm3Zi7B6GI9ImWSrqJJi13wdMECI0L+CY2sDHsUx3IYBE/3cCaZXOm3lWF U42GLAffORM87thQ2ryD9YuR79r6CJ5Wmu08Y/eyIOabE/hM7I7mXuN3YsB/N1Qr wMPFj50UU6mYIsm+dFNYhHzOEqJJst+PUC7PXaUrYRM6mcsPTvMEJI0KWAwmUftl okcvD34pTheIMjnI76+NnqZXc4fO+lItB4IcL6QzIfPvN1u40mEwCP8Z44YLiCJ2 xSpefWz/fuXIYJtWJ/d4I47+wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfDjYZs 7Fxkxo9BoCh7aO7cV19UMB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODZEMi8zOUREQ0NEQ0E5NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0 ZEgtLWxZMUd1dE82a1RHUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV37BhZZnP5ppMyP60luXSuVBRlujOVByjD9CnNsg1EMm9TapX9anG HdujFcXwRmI4gQhAFICtAb83qQx0k0rXxeQBWS6ZDHAGJHLGe8BYyudxuj9I+jL3 T3NAyIUFvn5hQT+nvch4uM3ZopzSPtFSSsabpip67YHhM9bRKB1B7asXHPRIWUTE 9CLdBhf6ToGEKFEZ5u3aB54IEgNhqTV6+LnQech83MFovEuAhr3lT6gGazArp06O 81RMQomkOjYxUsLvfWH4PkraLyIWOZAiK8FOeHEy/VznSDDsApcROy3/tiYarfV2 xIPi2zvm6d4YPykiiV+TDKyFZ+HUx9m0 -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:22 2025 by rpki-client