$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft File: f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json) Hash identifier: mmF9xALGopOlpF5yMFqllGf1EBMI9MJMPiZTpxkq6Fc= Subject key identifier: 47:31:89:B0:B1:C4:E6:79:3D:EE:5E:56:52:4C:29:FB:80:FD:E8:85 Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 Certificate issuer: /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Certificate serial: 2E30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft Manifest number: 2E30 Signing time: Fri 08 Aug 2025 15:32:48 +0000 Manifest this update: Fri 08 Aug 2025 15:32:48 +0000 Manifest next update: Fri 15 Aug 2025 15:32:48 +0000 Files and hashes: 1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: UoeEdLWhKpbIiV0CprgGvq8No+ST3aoqj3q1WEtiEs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11824 (0x2e30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A840E, serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Validity Not Before: Aug 8 15:32:48 2025 GMT Not After : Aug 15 15:32:48 2025 GMT Subject: CN=689618a0-bd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:60:5b:ba:38:fc:31:19:9f:f4:c9:4d:15: bd:83:47:9d:c5:85:8d:94:ef:6b:2a:b0:b7:12:94: a1:d2:34:56:dc:c0:7c:a7:fc:d7:d9:0f:e2:40:3b: 1b:6f:3e:e1:3d:a7:1b:8e:fb:8b:09:9f:b6:3b:6d: eb:2a:89:a7:c6:31:d1:86:46:8d:ba:26:b5:45:46: 76:4c:b6:bf:01:6e:5e:24:a4:d8:56:8e:d9:bd:ae: c2:af:70:dd:f9:5b:ad:30:cb:03:19:58:8e:9e:11: 88:82:a5:25:ad:24:0f:f0:98:91:30:95:29:36:58: ac:3a:bc:67:8b:8d:69:52:0b:ed:22:3b:06:78:00: 79:5f:23:f6:ae:1a:20:b5:66:43:91:04:74:e5:d1: 1a:3b:3c:2a:50:d0:4e:94:41:8a:9e:76:76:96:33: f5:1a:88:34:63:27:c2:64:62:37:6a:2a:a6:cb:40: 7b:7b:12:4f:b2:fb:ba:74:c4:90:bc:40:a3:6d:1b: 75:89:68:8a:a3:6e:cb:a6:30:31:f9:81:a5:06:ce: 8c:7a:ba:c3:b8:e0:b8:a0:32:e0:ad:1a:f1:af:77: 7f:11:8f:32:a3:ec:e3:40:44:56:c4:88:04:04:e9: ba:a2:47:7e:71:5e:e5:b6:22:06:5a:81:1d:16:17: 2a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:89:B0:B1:C4:E6:79:3D:EE:5E:56:52:4C:29:FB:80:FD:E8:85 X509v3 Authority Key Identifier: keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:8f:f7:1a:b9:1e:f2:9f:bc:ba:5b:6b:28:d2:02:ac:fa:46: 68:21:60:5a:a9:68:69:d1:9a:57:e0:1a:55:f9:03:57:2b:c3: 39:01:a5:55:4d:6e:44:20:43:09:d1:6c:8b:ca:0d:8f:bc:2a: 82:25:38:e6:0e:b1:e0:e9:3e:bd:d2:b3:14:a0:e4:24:17:77: 3b:dd:8f:94:d5:a9:d2:5a:1f:be:21:c7:42:67:83:e3:a0:c0: e1:bd:09:c6:57:54:47:7d:d1:ba:28:4d:e7:9e:66:e5:c1:ae: 3e:42:e7:e6:22:2a:f8:45:f6:9c:e9:f4:eb:13:ca:c2:fb:0f: 61:07:e0:b0:fa:4a:34:38:7c:3a:e8:1a:52:f8:0c:f9:a3:b5: ad:02:91:a6:12:64:3f:d0:00:0d:11:f6:20:48:df:75:70:84: f6:b0:50:f7:be:63:5c:31:bc:79:29:69:e0:ea:a0:49:f0:57: 8b:40:a5:22:33:8d:90:d9:44:6a:17:7f:aa:4d:d1:8a:c3:8d: 77:f6:65:5d:7d:b1:e0:12:16:4a:31:6e:1b:df:17:f4:1d:b9: 8b:31:65:fc:f3:c7:31:df:57:78:77:1b:ca:b0:07:e1:29:96: e7:71:dd:91:7b:8a:d4:a0:88:56:64:81:51:84:b8:3a:47:02: 64:3c:97:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MEUxMTAvBgNVBAUTKDdGNzUwMEYxOTQ2MjA3MDc3NERDOEIzQjRCOTZBRjRF MUI5QkI1NDUwHhcNMjUwODA4MTUzMjQ4WhcNMjUwODE1MTUzMjQ4WjAYMRYwFAYD VQQDEw02ODk2MThhMC1iZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaRgW7o4/DEZn/TJTRW9g0edxYWNlO9rKrC3EpSh0jRW3MB8p/zX2Q/iQDsb bz7hPacbjvuLCZ+2O23rKomnxjHRhkaNuia1RUZ2TLa/AW5eJKTYVo7Zva7Cr3Dd +VutMMsDGViOnhGIgqUlrSQP8JiRMJUpNlisOrxni41pUgvtIjsGeAB5XyP2rhog tWZDkQR05dEaOzwqUNBOlEGKnnZ2ljP1Gog0YyfCZGI3aiqmy0B7exJPsvu6dMSQ vECjbRt1iWiKo27LpjAx+YGlBs6MerrDuOC4oDLgrRrxr3d/EY8yo+zjQERWxIgE BOm6okd+cV7ltiIGWoEdFhcqOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcxibCx xOZ5Pe5eVlJMKfuA/eiFMB8GA1UdIwQYMBaAFH91APGUYgcHdNyLO0uWr04bm7VF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwRS9EQTEwRkY2NjYy RUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3ZDAzSXM3UzVhdlRodWJ0 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzVUE4WlJpQndkMDNJczdTNWF2VGh1YnRVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwRS9EQTEwRkY2NjYyRUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3 ZDAzSXM3UzVhdlRodWJ0VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpj/cauR7yn7y6W2so0gKs+kZoIWBaqWhp0ZpX4BpV+QNXK8M5AaVV TW5EIEMJ0WyLyg2PvCqCJTjmDrHg6T690rMUoOQkF3c73Y+U1anSWh++IcdCZ4Pj oMDhvQnGV1RHfdG6KE3nnmblwa4+QufmIir4Rfac6fTrE8rC+w9hB+Cw+ko0OHw6 6BpS+Az5o7WtApGmEmQ/0AANEfYgSN91cIT2sFD3vmNcMbx5KWng6qBJ8FeLQKUi M42Q2URqF3+qTdGKw4139mVdfbHgEhZKMW4b3xf0HbmLMWX888cx31d4dxvKsAfh KZbncd2Re4rUoIhWZIFRhLg6RwJkPJdk -----END CERTIFICATE-----Generated at Sun Aug 10 16:14:32 2025 by rpki-client