$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: F1PGJSNsmIgiXxsL8dSRN4P2IpwSg8+mrjI1xQ8eatg= Subject key identifier: 51:5F:37:9C:82:52:5B:B4:D2:8B:6C:20:70:2C:18:09:6F:D1:2F:99 Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 055D Signing time: Sat 21 Jun 2025 00:21:42 +0000 Manifest this update: Sat 21 Jun 2025 00:21:42 +0000 Manifest next update: Sat 28 Jun 2025 00:21:42 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: U0lY4liN6RZ7rNNiDW0oBhqMKR45vSsOIgYJ+B9JJmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 00:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Jun 21 00:21:42 2025 GMT Not After : Jun 28 00:21:42 2025 GMT Subject: CN=6855fb16-98ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:28:7e:d5:02:2a:d8:10:a1:be:3f:ee:f7: e8:24:6f:5a:ea:a0:25:ba:70:bc:cf:2a:31:98:46: 15:22:5c:41:7d:5f:89:f8:57:f2:3b:61:4e:8f:85: b9:72:0b:2d:12:72:19:22:4c:0e:b1:b5:97:0e:c7: 3e:cc:ae:96:9d:7e:7e:77:cb:ac:1f:84:62:d5:5b: 53:34:a3:67:2b:6f:0b:7c:f2:ce:29:9b:d7:5f:d4: a4:e4:d0:14:84:b8:b0:cf:41:71:9d:3b:53:24:70: 6f:6d:01:5d:52:fb:b1:a9:33:e6:8e:31:d2:09:e6: 9b:4f:3c:61:e7:7e:93:f7:46:3c:3a:47:42:97:44: 0c:80:49:f3:92:e8:f4:40:b4:26:d4:60:25:54:0b: 71:f8:29:cd:4f:88:6c:93:02:1e:c5:2b:38:3b:c2: fe:fc:1e:18:c8:53:bb:af:74:0b:54:c8:f9:26:bb: fb:23:16:96:df:a5:d5:6f:88:f1:20:3a:a2:43:07: a3:c4:1c:88:35:f8:5a:b6:8d:03:82:d5:a2:bc:6c: a1:c5:d2:84:26:33:14:89:05:e4:ad:97:e4:da:ad: cb:20:8a:ce:95:d8:65:ab:44:b1:10:c4:51:d7:9c: cd:ca:7f:f8:ec:49:9a:40:00:2a:90:b1:9c:bd:a6: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5F:37:9C:82:52:5B:B4:D2:8B:6C:20:70:2C:18:09:6F:D1:2F:99 X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b7:87:19:67:d6:09:21:d7:a3:0b:f9:4a:c3:00:60:ac:a9: e5:71:b8:c0:f6:63:b9:6d:6d:31:4c:ef:65:c8:a2:24:b3:b5: 3f:e9:13:6d:1b:ce:61:31:a9:d7:59:62:aa:22:6d:96:20:fe: a9:86:2e:fc:84:8f:18:67:16:e5:39:c1:c6:7c:a6:35:d1:68: b6:75:a8:b0:85:02:7a:53:b2:5a:62:d7:40:3f:ae:58:5b:4e: 04:2c:66:04:0a:c9:88:72:60:fc:06:ed:68:99:15:10:e5:ed: 66:d5:10:80:2e:35:cb:49:d5:79:95:f3:e8:70:89:ea:81:5c: 4e:6c:c2:e6:ea:89:8b:88:4a:09:b0:25:3c:5e:07:6c:89:ae: ca:c9:29:e5:5e:14:28:2e:37:8c:46:84:25:b1:84:e3:14:fa: 29:b5:79:cc:06:69:cd:12:a0:c5:ae:d5:8b:95:9b:db:76:07: f1:a9:e8:ba:3f:cb:ab:4a:ae:d5:83:66:7c:a7:e8:40:f4:5c: 31:61:09:3a:b2:c7:13:ba:e5:00:da:b5:a0:cf:b2:78:30:58: cc:1b:9c:02:48:35:5b:6d:08:bc:74:9f:4d:8d:b1:fe:3d:71: 11:ba:c0:b0:9f:3c:34:32:ed:84:b5:90:23:58:6f:8a:15:0a: ad:f1:d8:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUwNjIxMDAyMTQyWhcNMjUwNjI4MDAyMTQyWjAYMRYwFAYD VQQDEw02ODU1ZmIxNi05OGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6coftUCKtgQob4/7vfoJG9a6qAlunC8zyoxmEYVIlxBfV+J+FfyO2FOj4W5 cgstEnIZIkwOsbWXDsc+zK6WnX5+d8usH4Ri1VtTNKNnK28LfPLOKZvXX9Sk5NAU hLiwz0FxnTtTJHBvbQFdUvuxqTPmjjHSCeabTzxh536T90Y8OkdCl0QMgEnzkuj0 QLQm1GAlVAtx+CnNT4hskwIexSs4O8L+/B4YyFO7r3QLVMj5Jrv7IxaW36XVb4jx IDqiQwejxByINfhato0DgtWivGyhxdKEJjMUiQXkrZfk2q3LIIrOldhlq0SxEMRR 15zNyn/47EmaQAAqkLGcvabHpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFfN5yC Ulu00otsIHAsGAlv0S+ZMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBct4cZZ9YJIdejC/lKwwBgrKnlcbjA9mO5bW0xTO9lyKIks7U/6RNt G85hManXWWKqIm2WIP6phi78hI8YZxblOcHGfKY10Wi2daiwhQJ6U7JaYtdAP65Y W04ELGYECsmIcmD8Bu1omRUQ5e1m1RCALjXLSdV5lfPocInqgVxObMLm6omLiEoJ sCU8Xgdsia7KySnlXhQoLjeMRoQlsYTjFPoptXnMBmnNEqDFrtWLlZvbdgfxqei6 P8urSq7Vg2Z8p+hA9FwxYQk6sscTuuUA2rWgz7J4MFjMG5wCSDVbbQi8dJ9NjbH+ PXERusCwnzw0Mu2EtZAjWG+KFQqt8dhV -----END CERTIFICATE-----Generated at Sat Jun 21 14:25:42 2025 by rpki-client