$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: 3tUKVOVGb1WNotW63cPKzXB3mRL0lM2GG/dusS62Tb8= Subject key identifier: 4F:D2:9F:F7:DA:B4:EB:92:94:C6:B3:6D:52:DE:E0:48:7F:35:76:E3 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 018C Signing time: Sat 23 Aug 2025 03:38:41 +0000 Manifest this update: Sat 23 Aug 2025 03:38:41 +0000 Manifest next update: Sat 30 Aug 2025 03:38:41 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: eyznhDISrPWjPf0GZa51GbVc/RgHitAnATmtZWoCgfQ=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: 9qj5nS2jHu6HnjeglTS9hUbn0VPzT6niooBC/rePBvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Aug 23 03:38:41 2025 GMT Not After : Aug 30 03:38:41 2025 GMT Subject: CN=68a937c1-5c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:03:1f:ae:40:dc:c1:e4:79:91:28:df:9c: f5:76:9b:22:d2:71:29:27:99:9c:16:bd:eb:69:94: 26:d1:ce:b0:e0:df:e4:59:35:e3:2f:73:6a:f5:a5: 2e:00:57:41:38:15:4e:3d:57:a8:98:65:9c:fd:3d: e6:a1:b1:0e:ae:88:1d:36:e3:47:bf:05:4e:f2:a7: 22:ae:57:b9:e2:eb:08:c2:23:db:9e:9b:08:ca:8e: 31:47:37:4b:40:95:ec:07:03:e5:7a:66:1b:66:48: 89:9d:c1:28:e0:63:ed:c5:53:3e:2c:85:30:16:65: 4e:6a:aa:d3:66:29:95:cc:dc:a7:f6:8d:29:c5:7e: c3:a8:e9:ac:96:06:98:ef:36:5e:e2:6f:8b:0d:aa: b4:ec:6d:e7:d4:fe:f0:3d:50:e8:3a:55:4f:40:73: 6b:a4:70:ea:d2:9b:41:9d:16:b3:f5:7a:be:d0:b0: 7b:33:a3:fb:c8:cc:2a:dc:14:fa:b3:b4:da:f7:fe: 61:af:1b:21:31:3b:8e:63:82:26:1f:da:3b:59:1b: a0:bb:d0:47:ed:0a:bb:ba:22:b1:40:96:3c:f7:38: ff:92:71:f4:ea:23:e0:48:b8:30:54:83:e0:04:90: 4e:f8:61:06:b7:3e:08:21:af:d3:ab:ec:c5:6c:73: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D2:9F:F7:DA:B4:EB:92:94:C6:B3:6D:52:DE:E0:48:7F:35:76:E3 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:19:55:42:99:2b:64:1d:78:6b:ae:15:d5:49:4c:21:86:91: 5f:fe:ee:88:1d:2b:1b:4c:c4:22:3d:b5:7a:32:96:4e:ab:2f: b8:e7:c1:1a:0c:94:e7:84:82:eb:da:85:f2:5c:f8:fc:d8:9d: fc:0c:75:94:d2:3a:e4:04:1b:99:9a:39:a1:37:1b:31:3b:53: 22:c6:0a:73:72:a1:fe:f6:e7:6a:c7:2f:cd:ca:d8:c7:33:2b: df:6e:fb:c1:35:1c:16:7b:8e:5b:2f:93:9c:92:dd:68:6b:03: 30:f1:ad:93:02:0d:ae:8f:8c:1a:06:2e:d1:55:78:b1:cd:fb: fa:f1:97:c2:e9:3e:d4:16:fd:0d:a0:17:02:c5:c0:f8:8c:c5: 8a:72:60:22:87:45:19:ea:7a:31:6b:52:94:39:f8:e4:9d:7b: f6:61:f8:aa:37:58:66:bf:18:fe:9f:29:79:9d:54:ed:cc:09: 8c:53:84:69:03:7d:4d:37:9f:c0:73:4c:5a:d5:83:e3:12:a3: 06:0b:4f:c1:d9:e9:b4:55:25:e3:12:b4:7f:a9:21:86:67:ee: c6:0f:ba:98:88:57:91:f2:db:2f:86:82:b6:b7:3d:be:63:6a: 28:16:93:15:d5:8c:e8:77:6b:ab:a4:2e:08:48:ce:d7:31:ba: 08:67:d6:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUwODIzMDMzODQxWhcNMjUwODMwMDMzODQxWjAYMRYwFAYD VQQDEw02OGE5MzdjMS01YzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNsDH65A3MHkeZEo35z1dpsi0nEpJ5mcFr3raZQm0c6w4N/kWTXjL3Nq9aUu AFdBOBVOPVeomGWc/T3mobEOrogdNuNHvwVO8qcirle54usIwiPbnpsIyo4xRzdL QJXsBwPlemYbZkiJncEo4GPtxVM+LIUwFmVOaqrTZimVzNyn9o0pxX7DqOmslgaY 7zZe4m+LDaq07G3n1P7wPVDoOlVPQHNrpHDq0ptBnRaz9Xq+0LB7M6P7yMwq3BT6 s7Ta9/5hrxshMTuOY4ImH9o7WRugu9BH7Qq7uiKxQJY89zj/knH06iPgSLgwVIPg BJBO+GEGtz4IIa/Tq+zFbHOGowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/Sn/fa tOuSlMazbVLe4Eh/NXbjMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoGVVCmStkHXhrrhXVSUwhhpFf/u6IHSsbTMQiPbV6MpZOqy+458Ea DJTnhILr2oXyXPj82J38DHWU0jrkBBuZmjmhNxsxO1MixgpzcqH+9udqxy/NytjH MyvfbvvBNRwWe45bL5Ockt1oawMw8a2TAg2uj4waBi7RVXixzfv68ZfC6T7UFv0N oBcCxcD4jMWKcmAih0UZ6noxa1KUOfjknXv2YfiqN1hmvxj+nyl5nVTtzAmMU4Rp A31NN5/Ac0xa1YPjEqMGC0/B2em0VSXjErR/qSGGZ+7GD7qYiFeR8tsvhoK2tz2+ Y2ooFpMV1Yzod2urpC4ISM7XMboIZ9Zv -----END CERTIFICATE-----Generated at Sat Aug 23 16:13:19 2025 by rpki-client