$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: T0ghGsbaUdYLBCHsJxQkkquDbyJ+VgseDeJKKzaYvy0= Subject key identifier: BB:7E:A4:BB:33:50:55:39:49:67:15:BA:ED:EE:0D:36:DD:FD:98:E1 Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A3B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A3B Signing time: Sun 10 Aug 2025 15:32:10 +0000 Manifest this update: Sun 10 Aug 2025 15:32:09 +0000 Manifest next update: Sun 17 Aug 2025 15:32:09 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: 1KUcBJhek4zMidwDFtyJcySJyna/X3WjcBQ0sRdqEUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10811 (0x2a3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Aug 10 15:32:09 2025 GMT Not After : Aug 17 15:32:09 2025 GMT Subject: CN=6898bb7a-0a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:97:6d:39:c2:db:ae:2b:d7:76:78:46:7f: 16:4e:55:f3:76:df:69:0f:20:77:8f:fa:5b:35:d8: 6b:3d:b8:0f:01:f7:13:dd:7a:4b:95:97:7f:8b:cc: 7a:81:bf:6f:8c:08:79:9a:d3:ea:45:6e:2a:d5:82: 13:17:5f:21:da:50:54:fa:5b:0c:79:a4:a9:0e:de: d4:fe:27:37:97:9a:0e:e1:da:bb:cc:5a:0a:fc:ff: 97:07:d7:55:41:ec:21:db:6f:5a:61:2e:3b:04:1a: 21:ea:ac:fd:38:4a:96:c3:47:87:99:f4:e4:42:cc: a2:83:fa:3d:f6:cf:94:3e:af:8b:b3:18:55:a7:ec: 94:2f:3a:9f:79:ef:7b:05:35:3c:1e:ec:39:ea:38: 83:63:c2:4a:79:7b:71:bb:ae:2b:df:81:b9:b3:9f: 6c:fc:3d:12:83:09:bc:84:b0:e2:9c:f9:a7:02:26: fa:37:a9:2a:69:84:83:2b:46:84:79:9d:5a:ab:c1: 9f:8d:0b:22:c9:5d:dc:04:3e:6b:94:f7:f7:e6:94: 91:e7:e5:42:89:a6:db:fe:ef:2d:1f:ec:6c:80:ef: 8a:d5:03:2d:4a:e4:42:f0:c6:57:9b:10:10:64:c7: f4:40:fb:b6:4f:5f:56:53:0c:de:9d:c8:52:1a:94: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7E:A4:BB:33:50:55:39:49:67:15:BA:ED:EE:0D:36:DD:FD:98:E1 X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e4:c9:17:55:d4:b3:8f:d3:82:94:c0:e1:ff:d0:40:86:18: f5:aa:a4:d4:ca:ca:08:9e:0f:cb:30:cf:5f:c0:94:07:15:b9: f1:0e:f9:ea:75:ae:ce:c5:26:d5:01:9f:98:42:95:77:f1:cc: 6f:53:1b:5b:d7:a5:63:01:1e:07:20:72:ac:56:26:4f:44:be: 3f:cf:8f:40:a9:ba:8e:0c:74:8a:f5:7d:bd:61:53:50:34:14: 0a:b8:93:13:e3:94:dd:9b:81:61:65:e4:ba:ac:01:9d:b4:93: 86:df:78:ca:6a:fe:e2:a3:98:b9:84:76:d2:e0:b4:d0:9d:14: e1:b2:00:d1:a0:ff:55:af:58:d3:a1:56:5f:ed:4c:6c:06:e7: 0f:c4:12:89:f4:fd:49:97:8d:ed:bb:8b:d1:69:9a:19:fb:8b: 06:18:c4:0a:7b:3c:4f:a1:82:35:09:23:62:06:a3:28:0b:8e: 8b:f2:76:a6:f8:4d:92:99:30:ff:6e:02:1c:54:4b:e7:ef:89: 46:62:9a:d6:4f:af:15:7f:ef:4e:69:05:07:e5:d4:18:4b:2d: f9:fc:7c:12:5e:f9:c2:34:00:83:d7:67:57:1e:c6:0c:52:c8: c5:68:f5:12:59:6a:1e:80:a0:b4:42:12:26:9a:21:6b:86:15: e2:dd:cb:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUwODEwMTUzMjA5WhcNMjUwODE3MTUzMjA5WjAYMRYwFAYD VQQDEw02ODk4YmI3YS0wYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbOXbTnC264r13Z4Rn8WTlXzdt9pDyB3j/pbNdhrPbgPAfcT3XpLlZd/i8x6 gb9vjAh5mtPqRW4q1YITF18h2lBU+lsMeaSpDt7U/ic3l5oO4dq7zFoK/P+XB9dV Qewh229aYS47BBoh6qz9OEqWw0eHmfTkQsyig/o99s+UPq+LsxhVp+yULzqfee97 BTU8Huw56jiDY8JKeXtxu64r34G5s59s/D0Sgwm8hLDinPmnAib6N6kqaYSDK0aE eZ1aq8GfjQsiyV3cBD5rlPf35pSR5+VCiabb/u8tH+xsgO+K1QMtSuRC8MZXmxAQ ZMf0QPu2T19WUwzenchSGpRp8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt+pLsz UFU5SWcVuu3uDTbd/ZjhMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ5MkXVdSzj9OClMDh/9BAhhj1qqTUysoIng/LMM9fwJQHFbnxDvnq da7OxSbVAZ+YQpV38cxvUxtb16VjAR4HIHKsViZPRL4/z49AqbqODHSK9X29YVNQ NBQKuJMT45Tdm4FhZeS6rAGdtJOG33jKav7io5i5hHbS4LTQnRThsgDRoP9Vr1jT oVZf7UxsBucPxBKJ9P1Jl43tu4vRaZoZ+4sGGMQKezxPoYI1CSNiBqMoC46L8nam +E2SmTD/bgIcVEvn74lGYprWT68Vf+9OaQUH5dQYSy35/HwSXvnCNACD12dXHsYM UsjFaPUSWWoegKC0QhImmiFrhhXi3cuD -----END CERTIFICATE-----Generated at Mon Aug 11 12:07:04 2025 by rpki-client