$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: KrdflF7dIHqMxRcMdmY8DOJ/Uk9ir+RnsEvwrNRuU4Q= Subject key identifier: 53:CA:53:2D:F1:61:FC:76:86:6B:FB:FA:E6:6B:C1:77:3D:10:C6:51 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 011D Signing time: Sat 23 Aug 2025 04:56:35 +0000 Manifest this update: Sat 23 Aug 2025 04:56:34 +0000 Manifest next update: Sat 30 Aug 2025 04:56:34 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: bnUPWQklwNrpwAPJAgQ+SnCLYdT8o5SqLQGEBMIlmt0=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 1uxD9+JBsmHAELgtODtowZ9H7bGY5PrdUNrrDTftS4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Aug 23 04:56:34 2025 GMT Not After : Aug 30 04:56:34 2025 GMT Subject: CN=68a94a02-787f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:c6:a5:f1:11:ed:ac:ec:7c:2a:62:39:84: 27:ae:1f:74:52:76:0f:71:ba:ad:6e:72:bb:24:2b: 6b:35:f7:7c:41:f7:cd:78:e5:88:36:a5:99:05:d3: 5b:04:95:21:14:59:6a:b5:c5:97:55:c7:19:d6:52: 5a:57:bd:f6:71:b2:7d:d7:d2:08:f9:c1:81:cb:62: f6:d3:5f:c4:a1:3c:9c:5b:fd:11:b4:92:6e:e3:ce: 53:23:01:3b:b0:1d:f5:19:47:5a:7e:d8:dc:19:b1: 0f:6c:02:79:e9:64:02:a5:8b:69:20:99:da:49:23: 31:9d:68:17:a0:c8:05:e6:af:30:9b:2f:f3:cf:3d: a0:c6:ff:bb:1f:6e:bd:03:26:01:a1:88:09:68:bb: 99:63:95:d6:44:39:bc:2a:b4:9f:85:70:3b:fb:61: 3d:97:58:f3:61:f7:df:85:33:b9:85:b2:63:5c:3f: eb:77:f0:ee:4a:f0:96:40:9c:82:a4:b1:71:8d:56: 17:69:1e:62:8c:cd:69:8d:50:1d:68:70:be:be:6d: 7d:57:82:6f:16:90:0f:a9:eb:9b:0d:4a:c4:86:7e: ed:e6:2d:f8:9c:75:f1:22:2b:d9:d8:95:17:2c:5a: e6:b7:33:63:d3:bc:87:c3:a2:5e:e3:bd:65:c5:f7: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CA:53:2D:F1:61:FC:76:86:6B:FB:FA:E6:6B:C1:77:3D:10:C6:51 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cf:66:33:5f:dc:c7:60:30:83:5b:c6:e9:4c:ed:95:aa:78: 6d:fc:38:45:c2:f2:6d:20:19:a1:31:94:7a:f4:66:1f:7f:59: 13:d4:f6:b9:56:a7:4e:f1:56:c4:da:56:8a:11:9a:0c:2b:45: a9:fb:c4:07:4b:23:0b:09:48:be:ae:7a:a7:ce:6f:ea:2f:97: 97:c3:71:0f:62:61:cd:e4:3f:46:3b:f8:9e:98:c8:82:3d:53: 5a:2b:4d:3b:27:3c:30:b0:d3:2a:1f:f8:cd:29:cf:4d:0b:2b: ad:21:20:80:9d:3a:80:af:85:d4:fa:4b:e8:8d:37:fc:35:3a: af:e2:38:42:3d:13:11:f3:1f:cf:8a:fe:99:b8:17:d2:d3:a7: 0c:24:b2:f3:1a:6c:56:b1:70:d6:e8:7b:9d:8f:df:25:46:61: c5:c2:1d:e4:18:52:cc:15:8c:d4:52:6a:a0:9f:ae:c0:af:6c: 3f:73:cc:8b:c1:c9:e1:2d:c9:0b:c3:eb:16:d6:7b:bd:a2:bf: 51:65:36:62:f9:f7:f2:d5:3b:83:89:f8:e9:d2:38:a5:f1:60: 81:96:d7:1a:47:66:8a:a0:fd:d4:a6:84:fa:01:3b:ef:00:6c: 0d:13:51:bc:4f:a7:a0:71:de:52:ef:2a:79:db:d7:d4:ff:32: f9:51:52:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUwODIzMDQ1NjM0WhcNMjUwODMwMDQ1NjM0WjAYMRYwFAYD VQQDEw02OGE5NGEwMi03ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT7GpfER7azsfCpiOYQnrh90UnYPcbqtbnK7JCtrNfd8QffNeOWINqWZBdNb BJUhFFlqtcWXVccZ1lJaV732cbJ919II+cGBy2L201/EoTycW/0RtJJu485TIwE7 sB31GUdaftjcGbEPbAJ56WQCpYtpIJnaSSMxnWgXoMgF5q8wmy/zzz2gxv+7H269 AyYBoYgJaLuZY5XWRDm8KrSfhXA7+2E9l1jzYfffhTO5hbJjXD/rd/DuSvCWQJyC pLFxjVYXaR5ijM1pjVAdaHC+vm19V4JvFpAPqeubDUrEhn7t5i34nHXxIivZ2JUX LFrmtzNj07yHw6Je471lxfcIEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPKUy3x Yfx2hmv7+uZrwXc9EMZRMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBez2YzX9zHYDCDW8bpTO2Vqnht/DhFwvJtIBmhMZR69GYff1kT1Pa5 VqdO8VbE2laKEZoMK0Wp+8QHSyMLCUi+rnqnzm/qL5eXw3EPYmHN5D9GO/iemMiC PVNaK007JzwwsNMqH/jNKc9NCyutISCAnTqAr4XU+kvojTf8NTqv4jhCPRMR8x/P iv6ZuBfS06cMJLLzGmxWsXDW6Hudj98lRmHFwh3kGFLMFYzUUmqgn67Ar2w/c8yL wcnhLckLw+sW1nu9or9RZTZi+ffy1TuDifjp0jil8WCBltcaR2aKoP3UpoT6ATvv AGwNE1G8T6egcd5S7yp529fU/zL5UVK4 -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:21 2025 by rpki-client