$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: Zo1TdV94VylqQOQMFrGC2WUrpPJ++CUhMRzXoaNlcO0= Subject key identifier: F5:D6:BD:10:2C:F3:B5:E5:3B:C2:7A:B6:EE:8A:77:F8:92:B3:19:B6 Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 2563 Signing time: Fri 22 Aug 2025 16:24:59 +0000 Manifest this update: Fri 22 Aug 2025 16:24:58 +0000 Manifest next update: Fri 29 Aug 2025 16:24:58 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: kiJcnwCGu5GMvYrT+3S6wckHkRxBSUAZYCem4NpKwng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Aug 22 16:24:58 2025 GMT Not After : Aug 29 16:24:58 2025 GMT Subject: CN=68a899db-95ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:e3:09:71:75:68:f3:65:7f:52:34:39:d1: 5f:80:e6:e5:94:ef:e0:30:44:68:02:a0:4d:8b:14: 92:62:b5:aa:55:8f:21:1f:02:f8:7c:51:2c:8b:da: 89:56:a5:5f:e1:93:8a:5b:7e:bc:da:6e:90:e9:91: 4d:59:fc:07:b1:f9:f3:e8:c8:c5:21:19:cd:6d:90: ad:7a:2e:94:30:7e:0e:25:f2:59:23:2b:9a:03:b4: aa:50:a9:cc:3d:17:be:d7:3e:b9:93:f5:51:a7:be: e2:e7:58:0f:3d:f9:6f:9f:96:ba:ab:70:ed:44:72: 4b:ca:e5:38:d8:2b:cc:67:ec:a6:79:51:56:57:98: 59:fb:6b:11:98:1a:bd:d0:d4:75:03:81:dd:29:56: 1d:98:e0:ef:5f:53:59:2b:02:45:86:9b:fc:e8:ef: 00:cb:fc:af:5f:0a:60:c3:5f:22:0c:75:41:d8:8a: 52:98:bd:f5:c0:15:38:94:a1:c4:a9:e0:a4:18:30: 1b:8d:47:80:38:a7:95:15:f2:13:cf:c2:c0:61:de: 22:fd:e1:c7:f5:97:23:61:f5:54:7a:60:de:ce:3b: d3:9c:74:bd:e2:fa:ec:3b:0f:3e:61:a6:70:a7:90: c1:79:77:40:9e:d4:cb:c9:58:7c:e5:1e:c6:c1:27: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D6:BD:10:2C:F3:B5:E5:3B:C2:7A:B6:EE:8A:77:F8:92:B3:19:B6 X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:38:b5:19:3c:d3:61:65:ca:04:03:54:6e:8b:fc:68:f9:8f: ed:5c:20:5c:a5:fe:2e:f8:42:75:4b:e5:95:2d:20:5d:4f:23: 3f:61:b6:6b:5f:1a:59:7e:c5:b5:77:03:9d:ba:fc:ce:df:3e: 11:63:5b:c2:d3:2e:fe:e8:99:4f:12:21:20:e9:3d:a8:07:e4: 94:31:3d:4e:d7:d8:dd:0a:0c:db:c9:16:5b:5b:36:dc:a7:7d: 33:ec:f6:40:d7:92:27:aa:31:a4:95:0c:7a:66:f1:cc:ac:42: b3:23:e9:e3:da:d9:8f:39:3b:40:5c:ca:f1:14:58:aa:3f:6b: 6e:6b:60:b0:ac:a6:75:9f:6a:ce:06:56:d3:b2:f8:65:26:3f: 64:7a:36:fa:72:a6:02:ad:da:8d:54:70:86:24:29:56:95:cc: ef:67:0b:a2:d9:02:e5:7e:13:82:f0:53:0e:8b:e5:c7:de:76: 93:3e:7f:d2:ca:c8:4a:24:49:49:50:97:da:fe:18:fb:fc:6a: fa:89:77:c0:02:4b:70:d4:18:d2:ca:3d:10:f5:1c:56:4e:64: 68:c5:8d:a5:f7:69:f6:25:3b:78:61:f1:0e:d4:1a:5f:2c:04: ea:47:46:a6:57:2d:16:d5:d8:bc:0c:68:1b:38:f9:6d:44:20: a2:1d:ab:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUwODIyMTYyNDU4WhcNMjUwODI5MTYyNDU4WjAYMRYwFAYD VQQDEw02OGE4OTlkYi05NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgjjCXF1aPNlf1I0OdFfgObllO/gMERoAqBNixSSYrWqVY8hHwL4fFEsi9qJ VqVf4ZOKW3682m6Q6ZFNWfwHsfnz6MjFIRnNbZCtei6UMH4OJfJZIyuaA7SqUKnM PRe+1z65k/VRp77i51gPPflvn5a6q3DtRHJLyuU42CvMZ+ymeVFWV5hZ+2sRmBq9 0NR1A4HdKVYdmODvX1NZKwJFhpv86O8Ay/yvXwpgw18iDHVB2IpSmL31wBU4lKHE qeCkGDAbjUeAOKeVFfITz8LAYd4i/eHH9ZcjYfVUemDezjvTnHS94vrsOw8+YaZw p5DBeXdAntTLyVh85R7GwScdjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXWvRAs 87XlO8J6tu6Kd/iSsxm2MB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsOLUZPNNhZcoEA1Rui/xo+Y/tXCBcpf4u+EJ1S+WVLSBdTyM/YbZr XxpZfsW1dwOduvzO3z4RY1vC0y7+6JlPEiEg6T2oB+SUMT1O19jdCgzbyRZbWzbc p30z7PZA15InqjGklQx6ZvHMrEKzI+nj2tmPOTtAXMrxFFiqP2tua2CwrKZ1n2rO BlbTsvhlJj9kejb6cqYCrdqNVHCGJClWlczvZwui2QLlfhOC8FMOi+XH3naTPn/S yshKJElJUJfa/hj7/Gr6iXfAAktw1BjSyj0Q9RxWTmRoxY2l92n2JTt4YfEO1Bpf LATqR0amVy0W1di8DGgbOPltRCCiHauu -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:00 2025 by rpki-client