$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: seFWCcAuK6D25bPzEZ4HpmIWwz8kd3wXJFMtsjHQr5Q= Subject key identifier: C0:39:FB:FE:72:E3:AE:5E:D6:67:8F:A7:F8:10:AC:50:AE:78:43:BF Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1BF9 Signing time: Fri 22 Aug 2025 16:17:36 +0000 Manifest this update: Fri 22 Aug 2025 16:17:35 +0000 Manifest next update: Fri 29 Aug 2025 16:17:35 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: mxzOfDaHoU0GDGcCsTKgi4z9yvSvbVpcMeB9iMAYSMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7161 (0x1bf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Aug 22 16:17:35 2025 GMT Not After : Aug 29 16:17:35 2025 GMT Subject: CN=68a8981f-79e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:34:16:3e:58:39:96:dc:b8:60:54:26:25: fb:a4:c0:89:bf:01:c1:a8:e6:ab:68:05:d8:f7:9b: 0b:55:6f:98:78:f8:f4:db:8c:ed:f3:0e:6e:11:55: 0e:08:c1:43:fe:28:85:d3:36:1e:11:3e:1b:39:1f: e8:cc:3d:5e:69:61:2f:81:04:9b:0a:19:da:58:d0: 4c:ac:2c:fb:a8:d3:bf:86:24:75:43:11:ee:a4:e7: 63:f7:54:14:2f:c0:c8:88:0f:df:e8:97:d3:cf:1a: 4e:26:a1:c6:a4:80:e4:a7:20:19:39:dc:03:7c:a2: d8:de:6c:d1:8c:99:ff:11:e7:51:c8:fd:11:7d:84: 79:bd:a1:f0:b5:11:bc:2d:cc:0b:10:c7:bb:4a:60: 10:44:92:b1:d0:4e:01:1e:9f:2d:e1:60:2b:18:f9: d4:4d:ae:a6:8f:f9:6f:ef:d9:4b:82:8b:92:9f:1f: 84:d9:13:91:ae:02:63:f9:53:32:92:45:6a:1d:21: f1:97:18:91:4e:ae:f0:04:c6:83:6f:cf:bc:ad:dd: de:26:77:5d:85:a8:b3:91:a9:30:74:4f:64:8d:b7: a5:a9:a7:14:c2:ca:2e:03:2b:a3:77:be:91:95:27: aa:ba:8d:57:21:97:3f:fa:b0:e0:68:61:59:26:4a: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:39:FB:FE:72:E3:AE:5E:D6:67:8F:A7:F8:10:AC:50:AE:78:43:BF X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:43:f3:91:e1:6f:c1:dc:a4:e6:fb:76:90:47:c9:8b:3e:3b: 70:cf:20:79:da:35:11:de:ca:07:3e:2d:2b:bf:08:a8:6d:e0: 92:57:94:9d:32:d5:1e:a7:99:84:8f:af:f2:93:35:03:7c:d1: db:a5:76:65:51:dc:4b:77:02:f5:a2:3b:52:a8:ed:18:2b:96: 56:3f:0f:11:8d:6b:1e:4e:5e:74:66:26:38:b4:5c:66:fc:b0: 07:26:86:e6:59:55:57:94:4b:bc:49:f9:f9:b4:76:c5:fa:8b: 00:4f:55:0a:c8:ea:d3:9c:20:6b:83:ad:1d:11:08:4e:4b:ff: 34:1d:60:45:af:86:70:50:0b:82:da:1d:5c:39:38:89:e6:0c: 4b:00:05:51:c5:f2:18:8c:62:41:e0:fc:20:7a:31:f6:92:db: dd:23:b5:6e:b8:32:a4:c1:83:99:67:41:22:07:5e:b7:51:b5: 51:51:87:2d:be:85:40:b4:ac:cd:00:5a:62:f4:c2:f0:95:39: 53:b0:68:f0:d2:d7:f7:91:20:d2:00:a5:d2:06:fb:6d:d7:d3: 0f:ec:cd:e8:8d:ef:30:e7:c4:8d:1c:90:c9:61:1c:6f:d0:63: 1f:14:f3:f8:c9:d5:20:f5:89:71:07:f6:2c:36:94:d6:bc:cb: 81:8c:fc:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUwODIyMTYxNzM1WhcNMjUwODI5MTYxNzM1WjAYMRYwFAYD VQQDEw02OGE4OTgxZi03OWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXY0Fj5YOZbcuGBUJiX7pMCJvwHBqOaraAXY95sLVW+YePj024zt8w5uEVUO CMFD/iiF0zYeET4bOR/ozD1eaWEvgQSbChnaWNBMrCz7qNO/hiR1QxHupOdj91QU L8DIiA/f6JfTzxpOJqHGpIDkpyAZOdwDfKLY3mzRjJn/EedRyP0RfYR5vaHwtRG8 LcwLEMe7SmAQRJKx0E4BHp8t4WArGPnUTa6mj/lv79lLgouSnx+E2RORrgJj+VMy kkVqHSHxlxiRTq7wBMaDb8+8rd3eJnddhaizkakwdE9kjbelqacUwsouAyujd76R lSequo1XIZc/+rDgaGFZJkoAawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA5+/5y 465e1mePp/gQrFCueEO/MB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHQ/OR4W/B3KTm+3aQR8mLPjtwzyB52jUR3soHPi0rvwiobeCSV5Sd MtUep5mEj6/ykzUDfNHbpXZlUdxLdwL1ojtSqO0YK5ZWPw8RjWseTl50ZiY4tFxm /LAHJobmWVVXlEu8Sfn5tHbF+osAT1UKyOrTnCBrg60dEQhOS/80HWBFr4ZwUAuC 2h1cOTiJ5gxLAAVRxfIYjGJB4PwgejH2ktvdI7VuuDKkwYOZZ0EiB163UbVRUYct voVAtKzNAFpi9MLwlTlTsGjw0tf3kSDSAKXSBvtt19MP7M3oje8w58SNHJDJYRxv 0GMfFPP4ydUg9YlxB/YsNpTWvMuBjPzc -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:19 2025 by rpki-client