$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft File: 38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json) Hash identifier: Xt+viFbreomRhC5MXzlsSO/NWjWgNGryeayX2wWUw30= Subject key identifier: 8E:4F:B4:E2:18:E8:EB:23:53:B7:F0:62:5B:E6:83:59:6A:4C:F0:50 Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft Manifest number: 96 Signing time: Sat 09 Aug 2025 06:50:44 +0000 Manifest this update: Sat 09 Aug 2025 06:50:44 +0000 Manifest next update: Sat 16 Aug 2025 06:50:44 +0000 Files and hashes: 1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: fQDLxOCPjIhQd6o/gCMKNQHb9zfVtyBu8jAKR4dp+Zc=) 2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: kYva9N1B9q6x51z8ic6e8oPHZgI7EM6Un1P8CXMlwJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D Validity Not Before: Aug 9 06:50:44 2025 GMT Not After : Aug 16 06:50:44 2025 GMT Subject: CN=6896efc4-ef1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:ab:3c:9b:fe:f2:52:6a:6e:56:4d:fa:04: 42:ad:8a:ee:df:66:ea:ef:12:88:a3:f1:51:29:bf: 26:35:14:9f:f2:af:1c:78:14:70:a2:cf:06:38:ef: 20:4a:3e:34:a3:37:63:97:c4:8b:ec:35:42:43:1d: d5:82:36:8a:39:81:a9:53:cb:1e:dd:e1:0f:88:74: ec:55:02:0c:26:90:f9:65:00:5a:25:40:71:46:a3: ce:f1:07:fd:58:5b:6d:4f:71:cc:d7:ff:ff:9d:ac: 5e:89:2b:7b:21:5a:be:18:51:bb:22:8d:45:5f:87: 33:c2:12:6b:1b:a6:dc:ef:ea:5d:99:ca:0f:09:68: 82:98:ca:30:ca:2b:29:01:43:ba:1f:30:7c:fb:dc: 75:f3:37:e5:9d:09:1c:98:7e:fa:9e:db:b8:33:0f: 2e:60:66:53:ec:f6:8b:55:bc:9e:7c:96:54:00:c0: 58:5f:d0:d7:92:7d:a1:b3:24:14:6f:8d:f7:9c:a3: b9:4a:78:08:6f:7a:cc:04:33:9a:86:85:50:44:e8: fd:ff:2f:2d:fc:0b:ef:81:d0:2d:b2:47:2b:1b:16: 31:fc:4a:8e:eb:45:80:e3:93:7c:92:87:49:dd:37: 80:22:d3:65:68:47:ed:18:7c:30:48:a4:bb:5d:81: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4F:B4:E2:18:E8:EB:23:53:B7:F0:62:5B:E6:83:59:6A:4C:F0:50 X509v3 Authority Key Identifier: keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:be:78:26:b2:f7:ae:b8:87:3d:a6:f3:bc:fa:ca:95:65:39: 8c:ca:2a:0e:a0:29:98:91:5d:96:7c:7a:71:c5:e8:ef:c9:8d: 75:f8:dc:16:df:71:21:ff:b8:22:df:80:18:4a:91:06:8d:cb: a7:ed:58:1b:52:4d:b3:70:22:dc:29:7c:fc:9f:27:82:df:37: 27:99:c5:80:d9:17:b0:02:70:e9:d8:13:62:45:5d:49:6b:4a: 5e:3a:db:5d:8a:61:21:5b:cd:7e:b2:7f:4a:2f:9c:6d:bf:27: 86:1a:ac:44:0e:74:e8:84:c3:b2:f6:15:15:d1:ed:ca:1f:75: e8:38:69:f8:b1:23:fb:b2:47:72:51:84:e0:a4:49:9e:44:6c: 7e:ae:c3:37:e4:7e:98:ad:2d:38:75:da:b9:e8:7a:3d:81:9d: f6:85:71:c7:76:66:1b:5c:78:bf:d4:2a:6b:91:07:74:8c:38: 70:d6:b5:6a:ab:57:13:51:b6:39:02:31:1b:2f:46:22:6c:ca: 1c:e2:63:9e:ca:78:91:83:48:d4:fb:0c:3d:99:15:2c:a0:78: 5c:40:99:32:65:c0:9f:12:69:88:be:ae:0c:a6:c4:58:1b:87: 89:fc:a9:9f:f5:24:48:ba:6a:94:cd:b6:53:a1:f1:eb:c0:40: 18:28:4c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBM0IxMTAvBgNVBAUTKERGQzUyOENGMDAwNkUzNDE0QUZCN0ZFODZEMUZERUFG NjQ4QjVDOUQwHhcNMjUwODA5MDY1MDQ0WhcNMjUwODE2MDY1MDQ0WjAYMRYwFAYD VQQDEw02ODk2ZWZjNC1lZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VurPJv+8lJqblZN+gRCrYru32bq7xKIo/FRKb8mNRSf8q8ceBRwos8GOO8g Sj40ozdjl8SL7DVCQx3VgjaKOYGpU8se3eEPiHTsVQIMJpD5ZQBaJUBxRqPO8Qf9 WFttT3HM1///naxeiSt7IVq+GFG7Io1FX4czwhJrG6bc7+pdmcoPCWiCmMowyisp AUO6HzB8+9x18zflnQkcmH76ntu4Mw8uYGZT7PaLVbyefJZUAMBYX9DXkn2hsyQU b433nKO5SngIb3rMBDOahoVQROj9/y8t/AvvgdAtskcrGxYx/EqO60WA45N8kodJ 3TeAItNlaEftGHwwSKS7XYFiZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5PtOIY 6OsjU7fwYlvmg1lqTPBQMB8GA1UdIwQYMBaAFN/FKM8ABuNBSvt/6G0f3q9ki1yd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEzQi8yMjcwMTlEQTkw MTExMUVGOUI4NUM5NkFDNEY5QUUwMi8zOFVvendBRzQwRkstM19vYlJfZXIyU0xY SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4VW96d0FHNDBGSy0zX29iUl9lcjJTTFhKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEzQi8yMjcwMTlEQTkwMTExMUVGOUI4NUM5NkFDNEY5QUUwMi8zOFVvendBRzQw RkstM19vYlJfZXIyU0xYSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8vngmsveuuIc9pvO8+sqVZTmMyioOoCmYkV2WfHpxxejvyY11+NwW 33Eh/7gi34AYSpEGjcun7VgbUk2zcCLcKXz8nyeC3zcnmcWA2RewAnDp2BNiRV1J a0peOttdimEhW81+sn9KL5xtvyeGGqxEDnTohMOy9hUV0e3KH3XoOGn4sSP7skdy UYTgpEmeRGx+rsM35H6YrS04ddq56Ho9gZ32hXHHdmYbXHi/1CprkQd0jDhw1rVq q1cTUbY5AjEbL0YibMoc4mOeyniRg0jU+ww9mRUsoHhcQJkyZcCfEmmIvq4MpsRY G4eJ/Kmf9SRIumqUzbZTofHrwEAYKEyl -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:59 2025 by rpki-client