$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: EXn66KT8uQDUS6uWLMeMfTbHLObCkmgcTBEDa+GAaOw= Subject key identifier: 50:60:AB:6B:D9:44:FD:31:E8:04:2D:71:65:3D:30:F2:5B:5B:71:AD Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 0457 Signing time: Thu 12 Jun 2025 23:46:44 +0000 Manifest this update: Thu 12 Jun 2025 23:46:44 +0000 Manifest next update: Thu 19 Jun 2025 23:46:44 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: 5aJ45jhsCu4C98YC7ITEXopTmgfDdxtxAQXbrLY1ZR4=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: XOYLtUkvxxhHrcsvmr5WB+I6ZV608DvzcypTgdpZOb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Jun 12 23:46:44 2025 GMT Not After : Jun 19 23:46:44 2025 GMT Subject: CN=684b66e4-3b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:89:f6:bb:5f:15:02:b4:e4:53:26:86:77: 43:c9:40:07:cc:48:d1:c8:34:f6:27:8f:fb:f7:7e: 88:15:37:e3:ae:16:9b:6c:de:8c:c0:12:7e:aa:9f: 4c:4c:8c:3b:44:29:e7:bf:e3:ac:f0:f3:50:25:f9: 83:cd:62:06:4e:7f:93:fd:a5:8b:3c:9f:8a:c6:29: 74:53:59:3d:7f:94:cb:b2:f3:e3:7d:90:90:ee:f8: e8:70:bc:68:ff:1f:bc:da:5d:84:6c:5e:6e:af:17: 35:d2:53:22:40:88:d8:d1:8f:e1:37:c8:75:50:8a: 71:a5:a7:6b:73:6b:ab:22:3c:0e:72:ed:dc:4a:2b: 0f:89:a7:6a:70:de:1d:85:da:92:41:a4:3f:ea:ff: 27:5b:26:ff:6a:17:fd:97:4d:1c:d3:ab:ce:1a:97: 00:00:72:09:57:3e:59:26:a9:37:5b:5a:5a:2c:73: c4:2a:12:09:0d:62:3c:8f:2c:b3:6d:f2:1f:b9:a6: a9:fd:8d:80:a4:57:03:fb:96:bb:1a:e6:17:6c:80: c6:88:89:c1:07:62:d1:5e:ba:a1:3e:9e:7f:f4:3c: b0:0d:1a:02:93:07:dc:b2:9d:9f:44:73:92:3d:a0: d3:f4:f5:81:56:d5:d9:f5:f7:75:9c:46:4e:ca:6a: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:60:AB:6B:D9:44:FD:31:E8:04:2D:71:65:3D:30:F2:5B:5B:71:AD X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f7:3f:22:47:4a:8a:b9:24:92:7e:a8:e1:bc:3b:30:47:fc: 26:35:6d:82:1e:94:2f:fd:2e:7b:c0:b8:e9:a9:21:06:8a:fa: 06:68:bf:70:ea:86:7d:11:a7:60:6e:9b:e5:e1:28:fb:cb:27: 89:f5:54:12:20:a5:53:b6:e4:da:b6:28:39:6d:3e:63:aa:87: 26:57:ad:6b:da:2a:7c:ab:db:e5:3f:e4:d9:90:ef:d4:70:43: 1c:88:fc:5a:7e:fb:72:91:26:98:f3:30:c1:b3:01:0e:61:e0: c4:d5:e6:cd:1a:3a:8d:85:6e:2c:af:8f:2c:04:d2:7c:96:d0: 8c:61:ba:36:bc:96:d3:29:9d:6c:4f:d6:b5:b6:d9:34:d7:c3: 5c:4e:16:bd:aa:9d:97:e9:f6:ea:bd:11:5f:3f:39:90:63:64: 5d:ce:64:8a:59:95:35:87:5d:03:9f:d3:d2:55:c1:4c:18:1f: 32:d3:b1:4d:ec:85:1e:fe:6f:41:a9:a9:97:68:ae:7a:4c:60: 0c:64:6b:a0:3e:ef:8a:ba:b4:61:d4:2d:a7:59:f1:70:67:71: de:c5:cf:82:11:d5:a5:d5:32:a0:ba:3b:18:b0:84:eb:6b:76: ab:af:8e:35:35:ba:9d:36:cf:11:9c:29:ff:8e:47:85:47:6e: 60:71:95:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjUwNjEyMjM0NjQ0WhcNMjUwNjE5MjM0NjQ0WjAYMRYwFAYD VQQDEw02ODRiNjZlNC0zYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBmJ9rtfFQK05FMmhndDyUAHzEjRyDT2J4/7936IFTfjrhabbN6MwBJ+qp9M TIw7RCnnv+Os8PNQJfmDzWIGTn+T/aWLPJ+Kxil0U1k9f5TLsvPjfZCQ7vjocLxo /x+82l2EbF5urxc10lMiQIjY0Y/hN8h1UIpxpadrc2urIjwOcu3cSisPiadqcN4d hdqSQaQ/6v8nWyb/ahf9l00c06vOGpcAAHIJVz5ZJqk3W1paLHPEKhIJDWI8jyyz bfIfuaap/Y2ApFcD+5a7GuYXbIDGiInBB2LRXrqhPp5/9DywDRoCkwfcsp2fRHOS PaDT9PWBVtXZ9fd1nEZOymrLRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBgq2vZ RP0x6AQtcWU9MPJbW3GtMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo9z8iR0qKuSSSfqjhvDswR/wmNW2CHpQv/S57wLjpqSEGivoGaL9w 6oZ9Eadgbpvl4Sj7yyeJ9VQSIKVTtuTatig5bT5jqocmV61r2ip8q9vlP+TZkO/U cEMciPxafvtykSaY8zDBswEOYeDE1ebNGjqNhW4sr48sBNJ8ltCMYbo2vJbTKZ1s T9a1ttk018NcTha9qp2X6fbqvRFfPzmQY2RdzmSKWZU1h10Dn9PSVcFMGB8y07FN 7IUe/m9BqamXaK56TGAMZGugPu+KurRh1C2nWfFwZ3Hexc+CEdWl1TKgujsYsITr a3arr441NbqdNs8RnCn/jkeFR25gcZXV -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:57 2025 by rpki-client