$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: FFqSPfs1JidyN6kzppxUwujnnOAjNMudF5UCTIenyuM= Subject key identifier: 81:A3:9B:BF:0E:68:88:26:C3:2B:90:E4:EF:A8:C1:03:36:4F:A4:93 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 0478 Signing time: Wed 13 Aug 2025 00:36:21 +0000 Manifest this update: Wed 13 Aug 2025 00:36:21 +0000 Manifest next update: Wed 20 Aug 2025 00:36:21 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: FnXcRCSuxRmjksEdL5tJLps5BFkAh54VSiXlD2ykVgI=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: 7OgpQvkBU6+tUiHR/xeuBjYzt4Evz4MreUzB4Ql4bWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Aug 13 00:36:21 2025 GMT Not After : Aug 20 00:36:21 2025 GMT Subject: CN=689bde05-b131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:18:cb:be:71:15:95:ad:8d:42:b5:c1:91: f3:6b:44:18:6f:5d:fd:62:99:4e:5d:56:f0:eb:91: 5a:0c:b3:1a:2b:f2:25:0c:7d:2e:d1:73:32:16:c4: fa:5e:75:9f:ab:c4:7b:cc:a6:fc:1d:9d:3e:f2:94: 42:15:c9:35:ff:43:72:a9:94:e9:5e:f9:e0:ce:49: 77:5f:98:67:1f:51:36:90:44:b9:49:7e:98:ed:c4: d0:44:29:c1:dc:82:ff:84:44:e4:69:af:72:45:cb: bd:c0:db:e7:a4:cf:ac:6b:a6:72:b4:d0:d6:70:1c: d3:3c:ac:e9:60:d4:41:7b:9c:50:4c:1a:84:58:30: 1b:ea:e3:dc:66:43:29:2b:19:fb:4f:86:a8:ff:3a: 1e:8b:86:27:4b:05:c1:94:e6:0e:7d:4c:5e:32:c1: 61:97:2b:a5:ab:e7:a0:49:67:dc:e7:b5:dc:e5:c4: 86:61:e9:f7:5e:4b:85:be:e0:76:97:68:ad:20:0c: 7d:c5:7d:b8:6e:1d:38:6a:8e:00:d1:a7:4c:f4:5a: a4:66:46:4a:44:10:e6:a3:d3:4b:f7:f6:de:60:7b: 95:d7:77:04:75:eb:89:18:b7:53:35:d6:94:4f:5d: bb:67:35:41:79:dc:50:07:d8:c4:72:33:38:86:f1: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:9B:BF:0E:68:88:26:C3:2B:90:E4:EF:A8:C1:03:36:4F:A4:93 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:48:cf:85:4b:ed:3e:50:ae:0d:2d:5b:6d:70:80:8c:71:1b: 2e:11:18:1a:7d:4e:17:a5:95:e5:92:da:53:bb:9d:41:71:83: c8:b1:53:27:1c:ea:97:54:28:3b:db:08:7a:47:b4:86:ea:41: 1a:7a:57:df:03:7e:3d:47:77:63:d8:6c:70:f0:9f:33:66:48: d2:3c:77:ab:39:a2:cd:21:47:ce:5d:51:00:e1:19:b1:5f:0b: 7a:38:33:dc:2b:2b:be:8f:17:15:86:b8:aa:d1:0f:52:e6:1d: cc:d2:a9:24:64:ba:87:d8:a9:45:a7:f1:6c:d5:69:8c:9e:26: 27:ee:ce:9a:3f:92:92:ed:d8:7b:0f:12:28:22:e8:4f:88:98: dd:dd:db:ae:c5:58:c9:c0:d4:cc:d5:16:c3:ec:ea:9c:a5:55: 5d:d0:49:b2:22:67:e0:5c:99:20:73:33:ee:ca:ae:e5:df:ea: 23:a1:fa:6e:71:ea:ed:8c:57:f0:b8:9a:cb:be:63:5a:14:0d: 8b:b2:a4:ba:b1:a1:c7:79:05:c6:e1:e3:be:9d:4a:31:78:ae: cf:f6:97:ac:c5:05:86:a8:c9:b0:8d:8e:36:40:dc:c7:2d:6f: e6:a4:70:48:35:31:f8:68:3e:89:b3:9d:8e:87:71:63:c3:09: 78:ab:fe:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjUwODEzMDAzNjIxWhcNMjUwODIwMDAzNjIxWjAYMRYwFAYD VQQDEw02ODliZGUwNS1iMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk8Yy75xFZWtjUK1wZHza0QYb139YplOXVbw65FaDLMaK/IlDH0u0XMyFsT6 XnWfq8R7zKb8HZ0+8pRCFck1/0NyqZTpXvngzkl3X5hnH1E2kES5SX6Y7cTQRCnB 3IL/hETkaa9yRcu9wNvnpM+sa6ZytNDWcBzTPKzpYNRBe5xQTBqEWDAb6uPcZkMp Kxn7T4ao/zoei4YnSwXBlOYOfUxeMsFhlyulq+egSWfc57Xc5cSGYen3XkuFvuB2 l2itIAx9xX24bh04ao4A0adM9FqkZkZKRBDmo9NL9/beYHuV13cEdeuJGLdTNdaU T127ZzVBedxQB9jEcjM4hvH4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGjm78O aIgmwyuQ5O+owQM2T6STMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJSM+FS+0+UK4NLVttcICMcRsuERgafU4XpZXlktpTu51BcYPIsVMn HOqXVCg72wh6R7SG6kEaelffA349R3dj2Gxw8J8zZkjSPHerOaLNIUfOXVEA4Rmx Xwt6ODPcKyu+jxcVhriq0Q9S5h3M0qkkZLqH2KlFp/Fs1WmMniYn7s6aP5KS7dh7 DxIoIuhPiJjd3duuxVjJwNTM1RbD7OqcpVVd0EmyImfgXJkgczPuyq7l3+ojofpu certjFfwuJrLvmNaFA2LsqS6saHHeQXG4eO+nUoxeK7P9pesxQWGqMmwjY42QNzH LW/mpHBINTH4aD6Js52Oh3Fjwwl4q/5s -----END CERTIFICATE-----Generated at Wed Aug 13 02:47:29 2025 by rpki-client