$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft File: uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json) Hash identifier: pSNPI+lGGBz9YCiGooqLAOpu6N7nnJt464s8AdXwfgw= Subject key identifier: 12:42:61:11:82:06:16:1B:EF:64:DE:7A:44:E1:EB:CC:4D:4B:AB:3B Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft Manifest number: 0389 Signing time: Fri 13 Jun 2025 00:25:48 +0000 Manifest this update: Fri 13 Jun 2025 00:25:48 +0000 Manifest next update: Fri 20 Jun 2025 00:25:48 +0000 Files and hashes: 1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: 7caVpY7VXINl5MRPFNsg1GW7XEcS4Et/+3VNzJzTX9E=) 2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: Jun 13 00:25:48 2025 GMT Not After : Jun 20 00:25:48 2025 GMT Subject: CN=684b700c-19ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:5d:ca:38:ce:a9:2f:b4:38:a1:3a:09:a3: d1:3b:2f:37:ef:ae:f5:37:df:0d:76:18:79:af:b6: 63:33:4e:55:90:4c:47:ae:db:24:36:87:87:bd:b8: e6:f3:4b:11:79:ff:74:9e:49:3b:5b:9a:38:19:89: f1:a6:35:a4:2d:ba:64:4f:4a:9c:eb:06:8a:5f:a7: 0a:87:24:03:ff:c3:34:92:c2:f3:b3:93:35:b4:2f: 55:46:ff:8f:e6:d1:d2:c6:cb:5e:a3:f4:f4:43:5d: 03:30:58:ac:6a:88:9b:2a:80:80:0a:78:49:e5:39: 85:06:23:d2:2e:70:ac:c7:e1:c5:12:33:2f:3b:64: e5:7d:98:05:cd:7e:a6:43:49:1a:b7:1c:9f:1a:ab: 35:2e:da:ab:14:ea:ad:f7:40:74:6d:db:e5:67:62: 13:15:00:ca:c3:85:eb:0f:d0:50:3c:52:db:d1:76: 8e:71:05:72:81:6d:ae:65:dc:6d:a8:c0:4d:58:bd: 5e:70:15:94:a0:ff:f4:39:81:0a:35:74:d5:bf:aa: 96:d9:8e:e7:8a:d6:31:aa:57:13:10:e8:1c:37:92: 77:88:6a:62:f5:f2:18:e2:a7:94:62:64:27:29:b6: 05:f5:80:f7:0d:6f:56:e1:2e:68:a1:8c:52:07:3b: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:42:61:11:82:06:16:1B:EF:64:DE:7A:44:E1:EB:CC:4D:4B:AB:3B X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e0:e0:e2:f9:9d:2c:dc:be:24:e5:6a:68:df:ae:c6:28:c4: 92:c9:2f:f1:b0:5b:67:6c:25:63:5b:8b:8b:85:79:d6:26:10: bf:6f:33:f3:76:26:d1:c5:86:c4:05:e9:25:a5:72:ab:d6:2d: cd:f4:7c:90:a3:89:d3:c1:2b:a9:73:16:33:a9:52:0a:ed:66: b3:53:88:15:89:16:54:3e:e0:72:4d:f1:3a:26:a4:be:57:50: f7:8e:48:4d:21:4c:b8:70:07:6e:a9:b0:6e:7a:eb:7d:b0:2d: a8:13:c2:82:ba:07:93:6d:e8:23:3b:f2:a3:5c:28:c3:e9:85: a1:59:bd:1a:34:ca:b8:ab:36:b5:38:85:25:0f:1a:a2:6a:0d: 7f:2b:a4:40:d1:0c:d1:86:77:e2:17:3a:01:96:cf:47:7d:53: 87:b0:32:2e:66:ab:12:e4:32:1b:95:24:83:3d:b1:3b:1f:e4: 7e:85:f5:b6:25:00:cf:88:ef:49:60:8b:30:aa:3d:b6:19:a4: c2:cd:6b:03:bb:61:8a:9b:ee:6e:38:f6:04:64:6b:63:30:3d: 71:9d:52:07:a8:b6:d3:82:99:0e:80:5d:5e:d3:bd:ac:d0:f0: 1f:2d:c9:5e:be:ed:38:29:fc:10:d3:f7:0a:59:12:3a:65:e0: 5d:b2:2a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjUwNjEzMDAyNTQ4WhcNMjUwNjIwMDAyNTQ4WjAYMRYwFAYD VQQDEw02ODRiNzAwYy0xOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09RdyjjOqS+0OKE6CaPROy837671N98Ndhh5r7ZjM05VkExHrtskNoeHvbjm 80sRef90nkk7W5o4GYnxpjWkLbpkT0qc6waKX6cKhyQD/8M0ksLzs5M1tC9VRv+P 5tHSxsteo/T0Q10DMFisaoibKoCACnhJ5TmFBiPSLnCsx+HFEjMvO2TlfZgFzX6m Q0katxyfGqs1LtqrFOqt90B0bdvlZ2ITFQDKw4XrD9BQPFLb0XaOcQVygW2uZdxt qMBNWL1ecBWUoP/0OYEKNXTVv6qW2Y7nitYxqlcTEOgcN5J3iGpi9fIY4qeUYmQn KbYF9YD3DW9W4S5ooYxSBzvyYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJCYRGC BhYb72TeekTh68xNS6s7MB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODZEMi8zOUREQ0NEQ0E5NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0 ZEgtLWxZMUd1dE82a1RHUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ4ODi+Z0s3L4k5Wpo367GKMSSyS/xsFtnbCVjW4uLhXnWJhC/bzPz dibRxYbEBeklpXKr1i3N9HyQo4nTwSupcxYzqVIK7WazU4gViRZUPuByTfE6JqS+ V1D3jkhNIUy4cAduqbBueut9sC2oE8KCugeTbegjO/KjXCjD6YWhWb0aNMq4qza1 OIUlDxqiag1/K6RA0QzRhnfiFzoBls9HfVOHsDIuZqsS5DIblSSDPbE7H+R+hfW2 JQDPiO9JYIswqj22GaTCzWsDu2GKm+5uOPYEZGtjMD1xnVIHqLbTgpkOgF1e072s 0PAfLclevu04KfwQ0/cKWRI6ZeBdsipr -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:13 2025 by rpki-client