$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: wdNFYkmA+L4K9jOQcvQnAPpwXQwBGaufW7MUeDNlbB4= Subject key identifier: C1:D2:20:2A:39:6F:6C:72:3C:20:7A:06:EA:C7:9B:CD:FD:10:B8:BB Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 03E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 0593 Signing time: Wed 13 Aug 2025 01:05:18 +0000 Manifest this update: Wed 13 Aug 2025 01:05:17 +0000 Manifest next update: Wed 20 Aug 2025 01:05:17 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: gyofiGdL8BqX7P084+NTv2uOoqKvmoS2ntX1qum1VGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 01:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Aug 13 01:05:17 2025 GMT Not After : Aug 20 01:05:17 2025 GMT Subject: CN=689be4cd-791a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:0c:14:3e:66:30:b5:3e:b6:c4:14:a1:e7: be:7a:d5:84:bb:41:4d:29:04:c5:1c:6e:27:be:71: 7e:e3:38:79:c2:9f:fa:d6:6f:69:b9:f1:a9:f2:d0: 50:39:10:99:14:7b:4c:9f:1f:ff:64:49:ab:3a:55: a8:67:b0:00:76:8d:c1:a5:fc:a6:fc:2d:88:45:ad: 45:b1:54:0b:dc:90:11:b6:62:60:41:ed:f7:9f:6e: 47:ba:18:85:7c:a2:c3:bd:73:8d:1e:9a:ed:ca:c5: b8:80:bc:6f:f6:22:d8:6b:50:f9:dd:47:a5:61:62: 14:84:8d:81:5f:dd:77:43:de:d4:d5:fd:50:df:39: 73:58:bc:bf:c0:6a:b5:72:50:2f:1c:69:79:09:37: dc:7e:d2:6b:02:4b:ca:9b:f0:0e:94:70:d9:4f:fb: 64:ba:2b:8b:d4:5c:d1:16:e8:ed:ec:9e:13:22:41: b4:2e:d4:66:bd:8a:2e:14:70:6c:a2:89:d4:4b:7e: 7f:fd:65:2c:e1:bc:21:5c:b2:4a:4b:22:25:c5:b8: f1:57:08:63:50:9b:77:ed:a6:5e:78:bc:1b:65:4b: 4b:92:71:bb:7b:81:25:f5:7e:41:d4:4e:36:bb:36: b9:b7:ed:c1:6d:a0:a2:99:c2:21:40:a4:81:28:a2: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D2:20:2A:39:6F:6C:72:3C:20:7A:06:EA:C7:9B:CD:FD:10:B8:BB X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e1:fe:01:a0:59:19:59:6d:18:4d:d8:7d:64:9c:18:77:09: 95:47:a0:9a:9f:4b:26:f9:3f:a1:ac:cf:1b:0e:00:d3:5f:d6: ee:d5:d3:3a:b7:cf:5c:9e:4a:d6:39:7b:50:1b:31:6e:70:1e: b3:60:12:19:61:21:ec:23:66:b8:81:de:f3:a4:f3:d1:a6:11: 67:7f:ff:2c:5c:99:07:d5:75:55:d7:ac:bb:75:8b:27:89:da: b6:19:94:e4:5a:69:7a:25:58:cf:b7:8e:95:c8:86:49:0a:ac: 48:7a:40:41:f1:a4:3e:69:c8:a5:27:1d:e9:75:8d:d1:75:50: 4e:4d:49:d7:93:7b:7b:15:47:a9:98:67:43:b8:69:77:ed:93: 4b:b2:a2:f1:8f:f6:97:ad:16:d0:91:10:90:07:fb:e7:ff:50: 84:f8:21:16:9c:66:3f:c0:ff:55:07:36:cf:09:2c:c4:15:f5: c2:34:d4:aa:d0:b8:fb:0c:e6:7c:f6:2a:57:e7:36:3c:29:f8: d2:a2:b0:7d:e0:9a:80:c4:c9:be:fb:e2:8e:8c:34:58:3c:01: da:65:1c:c5:44:3c:ad:13:69:e0:4b:20:e5:42:e8:dc:d9:59: a0:f2:d8:8a:60:30:65:a7:9d:f8:1e:07:f0:e4:e8:3f:56:cf: c5:c5:10:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUwODEzMDEwNTE3WhcNMjUwODIwMDEwNTE3WjAYMRYwFAYD VQQDEw02ODliZTRjZC03OTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZQMFD5mMLU+tsQUoee+etWEu0FNKQTFHG4nvnF+4zh5wp/61m9pufGp8tBQ ORCZFHtMnx//ZEmrOlWoZ7AAdo3Bpfym/C2IRa1FsVQL3JARtmJgQe33n25HuhiF fKLDvXONHprtysW4gLxv9iLYa1D53UelYWIUhI2BX913Q97U1f1Q3zlzWLy/wGq1 clAvHGl5CTfcftJrAkvKm/AOlHDZT/tkuiuL1FzRFujt7J4TIkG0LtRmvYouFHBs oonUS35//WUs4bwhXLJKSyIlxbjxVwhjUJt37aZeeLwbZUtLknG7e4El9X5B1E42 uza5t+3BbaCimcIhQKSBKKKctQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHSICo5 b2xyPCB6BurHm839ELi7MB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD4f4BoFkZWW0YTdh9ZJwYdwmVR6Can0sm+T+hrM8bDgDTX9bu1dM6 t89cnkrWOXtQGzFucB6zYBIZYSHsI2a4gd7zpPPRphFnf/8sXJkH1XVV16y7dYsn idq2GZTkWml6JVjPt46VyIZJCqxIekBB8aQ+acilJx3pdY3RdVBOTUnXk3t7FUep mGdDuGl37ZNLsqLxj/aXrRbQkRCQB/vn/1CE+CEWnGY/wP9VBzbPCSzEFfXCNNSq 0Lj7DOZ89ipX5zY8KfjSorB94JqAxMm+++KOjDRYPAHaZRzFRDytE2ngSyDlQujc 2Vmg8tiKYDBlp534Hgfw5Og/Vs/FxRBC -----END CERTIFICATE-----Generated at Wed Aug 13 05:34:44 2025 by rpki-client