$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft File: f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json) Hash identifier: c5SXtNBtp7CxUjuyVRKzm1cMUeui5TDHAROpbAc/L/Y= Subject key identifier: 6E:E5:74:B7:42:16:2F:CD:AC:FF:54:48:60:8A:55:93:9F:2F:B6:78 Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 Certificate issuer: /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Certificate serial: 2E14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft Manifest number: 2E14 Signing time: Sat 14 Jun 2025 15:28:29 +0000 Manifest this update: Sat 14 Jun 2025 15:28:29 +0000 Manifest next update: Sat 21 Jun 2025 15:28:29 +0000 Files and hashes: 1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: LvIUJjhTPKnbDTceIaRPTnfLsfyPizF5sYqjgDFpthI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11796 (0x2e14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A840E, serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Validity Not Before: Jun 14 15:28:29 2025 GMT Not After : Jun 21 15:28:29 2025 GMT Subject: CN=684d951d-dd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:a6:40:86:b3:9a:b2:8f:f4:f4:c4:80:f4: 38:dd:4b:e0:9d:e4:73:1b:6e:0a:7e:41:51:25:8e: 26:ba:70:21:85:9a:4e:a9:92:48:89:03:ef:4e:2f: 15:46:83:ba:f8:76:35:2b:c1:f1:24:fd:1f:5c:2f: a4:95:93:24:35:b7:f5:b7:f3:1c:cc:bb:bb:31:98: 43:88:2d:30:36:13:f7:e4:7c:14:0c:f1:1c:b5:83: c0:59:44:88:98:6e:6b:2e:80:c2:e7:ef:4c:ee:73: d9:a9:bb:e1:62:b9:d4:ba:37:60:69:4f:5b:c4:01: 76:66:bd:f6:00:48:8b:03:81:02:42:57:d5:bd:79: 80:ce:39:14:ff:bf:bd:67:ed:7f:6e:ba:23:ec:93: c3:95:66:bc:94:2f:5b:88:a6:bb:d0:69:42:7f:a8: 59:bd:ad:d6:5d:77:96:ce:a4:d8:d7:4f:8c:36:44: c2:f6:d7:c8:19:25:5f:49:3c:48:d5:ab:0c:2d:43: 47:0b:de:e3:20:b6:bb:89:c8:a5:83:3e:9a:3e:57: 61:fc:c7:c6:1f:a3:2b:c5:41:e6:eb:fb:98:23:b5: 90:eb:15:c5:1b:eb:7f:42:84:e6:a3:14:44:39:1e: 72:16:5e:14:cd:5c:43:12:e0:8f:1f:0b:b6:71:66: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E5:74:B7:42:16:2F:CD:AC:FF:54:48:60:8A:55:93:9F:2F:B6:78 X509v3 Authority Key Identifier: keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:17:45:32:a3:a5:41:6a:33:0d:5d:16:14:bd:5e:ff:34:c1: a4:07:61:56:34:ae:89:43:b0:fe:eb:24:2d:2c:44:5b:19:55: c2:8c:7c:0e:01:2e:f8:45:7c:8f:e9:f8:d7:45:d3:eb:30:e5: 2e:85:4b:cb:9c:0c:b8:ab:ec:ed:6b:35:cf:8e:f3:82:54:b0: f0:2f:8a:5c:ce:98:2c:9d:95:31:94:96:af:ed:75:76:89:cc: e5:fc:43:2f:34:77:b6:81:6d:cf:57:00:75:80:c4:45:62:74: 98:63:49:af:db:85:ea:58:5e:c2:b8:09:48:3e:3f:0c:fe:c1: eb:79:4b:59:76:67:2b:50:3e:2e:d4:c7:96:21:9b:5d:76:6b: 83:03:39:7f:fb:14:13:fe:f0:95:80:c4:3f:c1:df:59:42:6e: 6b:62:24:13:28:97:9a:b0:16:9e:e8:8f:ce:20:d2:13:04:ac: 2a:01:54:15:41:cb:b9:1f:25:72:c5:7b:b4:af:af:e1:b6:17: 87:92:c0:49:0e:9a:94:68:8f:37:bd:d1:82:da:ea:df:a2:41: 1f:21:3a:06:19:52:3a:82:5f:e0:4e:15:cc:f9:0f:c6:d3:d4: 0d:cd:b1:ea:52:a2:80:73:26:e8:30:98:14:74:74:fa:35:38: 8c:17:b1:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MEUxMTAvBgNVBAUTKDdGNzUwMEYxOTQ2MjA3MDc3NERDOEIzQjRCOTZBRjRF MUI5QkI1NDUwHhcNMjUwNjE0MTUyODI5WhcNMjUwNjIxMTUyODI5WjAYMRYwFAYD VQQDEw02ODRkOTUxZC1kZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF6mQIazmrKP9PTEgPQ43UvgneRzG24KfkFRJY4munAhhZpOqZJIiQPvTi8V RoO6+HY1K8HxJP0fXC+klZMkNbf1t/MczLu7MZhDiC0wNhP35HwUDPEctYPAWUSI mG5rLoDC5+9M7nPZqbvhYrnUujdgaU9bxAF2Zr32AEiLA4ECQlfVvXmAzjkU/7+9 Z+1/broj7JPDlWa8lC9biKa70GlCf6hZva3WXXeWzqTY10+MNkTC9tfIGSVfSTxI 1asMLUNHC97jILa7icilgz6aPldh/MfGH6MrxUHm6/uYI7WQ6xXFG+t/QoTmoxRE OR5yFl4UzVxDEuCPHwu2cWa8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7ldLdC Fi/NrP9USGCKVZOfL7Z4MB8GA1UdIwQYMBaAFH91APGUYgcHdNyLO0uWr04bm7VF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwRS9EQTEwRkY2NjYy RUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3ZDAzSXM3UzVhdlRodWJ0 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzVUE4WlJpQndkMDNJczdTNWF2VGh1YnRVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwRS9EQTEwRkY2NjYyRUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3 ZDAzSXM3UzVhdlRodWJ0VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOF0Uyo6VBajMNXRYUvV7/NMGkB2FWNK6JQ7D+6yQtLERbGVXCjHwO AS74RXyP6fjXRdPrMOUuhUvLnAy4q+ztazXPjvOCVLDwL4pczpgsnZUxlJav7XV2 iczl/EMvNHe2gW3PVwB1gMRFYnSYY0mv24XqWF7CuAlIPj8M/sHreUtZdmcrUD4u 1MeWIZtddmuDAzl/+xQT/vCVgMQ/wd9ZQm5rYiQTKJeasBae6I/OINITBKwqAVQV Qcu5HyVyxXu0r6/htheHksBJDpqUaI83vdGC2urfokEfIToGGVI6gl/gThXM+Q/G 09QNzbHqUqKAcyboMJgUdHT6NTiMF7Gg -----END CERTIFICATE-----Generated at Sun Jun 15 09:46:59 2025 by rpki-client