$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json) Hash identifier: WLHwJa9lgh4NT0kW1qeokYI0vl/Kun/9HZ5N9f9KpYY= Subject key identifier: 26:4E:85:61:2C:43:8D:BB:44:36:B3:F1:FE:DA:DB:F7:67:FF:14:9F Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft Manifest number: 78 Signing time: Sat 23 Aug 2025 07:01:49 +0000 Manifest this update: Sat 23 Aug 2025 07:01:49 +0000 Manifest next update: Sat 30 Aug 2025 07:01:49 +0000 Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: l31x0EE2ZSAQSs+AyoEoelmjuJFWzU6x4CqTm8o42hY=) 2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Validity Not Before: Aug 23 07:01:49 2025 GMT Not After : Aug 30 07:01:49 2025 GMT Subject: CN=68a9675d-31d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:14:dc:84:c1:a1:50:e3:57:b6:47:c6:41: a1:53:ee:9e:8a:5e:6b:81:a5:58:01:0d:f0:c4:47: 7e:5b:20:00:5c:bd:6d:62:f0:5b:94:b3:c5:8e:cd: 6f:76:e4:38:07:3b:d6:cc:74:9e:ee:07:bb:41:cf: 2e:9c:1b:68:42:36:c6:50:b3:d2:f9:c0:4e:50:18: c6:a8:a8:1f:15:96:2e:5d:b1:b6:36:bc:85:a8:5a: 7a:10:78:0d:36:5f:c4:a7:1a:14:c8:1c:5e:a4:8d: 7e:b4:7a:ff:a8:d2:dc:26:8f:db:55:e9:71:39:51: 30:4e:5b:3c:8f:e1:00:fb:8d:f4:2c:1b:d8:c6:ff: f6:34:14:00:b3:a4:4e:df:4c:e8:2c:51:c4:2b:99: ef:c2:2e:9c:0c:fd:15:dc:c7:ec:41:b8:67:5d:c6: 98:e6:d1:f5:59:54:6e:7a:e0:1a:59:e2:49:dc:85: 63:2e:ae:31:c6:cc:5b:fb:d7:dd:68:25:01:33:35: 4e:36:f5:eb:e1:99:4b:e4:30:c8:5e:38:ac:02:4e: ea:9f:24:8d:39:46:0c:5c:fd:23:25:1b:87:b2:b7: c4:fc:22:00:46:8b:8e:83:df:cd:f4:b6:b3:c3:36: d6:34:39:f4:fd:31:23:15:62:96:97:c8:2a:75:23: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4E:85:61:2C:43:8D:BB:44:36:B3:F1:FE:DA:DB:F7:67:FF:14:9F X509v3 Authority Key Identifier: keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:79:4e:78:8e:f0:10:a2:91:2e:1b:50:ff:85:23:f0:f5:d9: 2f:37:e3:0f:3b:41:b3:b3:9d:0e:60:5e:9e:b4:c0:75:a7:98: 16:04:b6:df:cd:98:41:df:71:3e:b5:63:e8:e3:ad:78:f2:1c: d8:a2:0d:8e:0e:8c:b4:4e:70:30:63:92:40:40:fb:18:f0:0b: b3:f9:b2:74:71:9e:84:2c:fa:9d:66:47:11:86:1d:c2:d5:fe: f9:65:ee:94:7a:4b:2d:43:ab:29:28:fd:52:ca:3b:52:9b:1a: 7a:7f:03:68:b1:da:f2:1c:9d:29:36:ea:f7:49:12:e4:f6:26: 85:78:72:71:79:72:d8:a6:e0:13:22:0b:32:1d:08:72:25:45: 27:71:3f:4d:ad:79:33:37:5f:41:15:92:80:a1:27:3f:1e:07: 26:93:d2:8e:29:38:94:ae:ee:0f:62:67:84:c3:5a:e9:d7:25: fe:de:0b:54:3c:f3:20:d2:c1:8c:5c:cf:8d:6e:e0:d1:79:cf: b9:25:28:0b:84:a2:d7:1a:71:3c:9f:c2:98:4c:c8:5d:5c:c1: f1:ba:1a:43:d2:f3:7d:75:68:5b:fc:06:75:31:68:86:04:35: a8:a6:15:1f:34:68:34:fd:51:f9:ca:d4:96:a5:7d:62:5e:8c: f9:6a:8c:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDEyNTExMC8GA1UEBRMoNkY3N0MxOUYxMUQzMkFBQUE0MkUyNjkxNkY3NDgyRUZC OEY5N0ExQzAeFw0yNTA4MjMwNzAxNDlaFw0yNTA4MzAwNzAxNDlaMBgxFjAUBgNV BAMTDTY4YTk2NzVkLTMxZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7GxTchMGhUONXtkfGQaFT7p6KXmuBpVgBDfDER35bIABcvW1i8FuUs8WOzW92 5DgHO9bMdJ7uB7tBzy6cG2hCNsZQs9L5wE5QGMaoqB8Vli5dsbY2vIWoWnoQeA02 X8SnGhTIHF6kjX60ev+o0twmj9tV6XE5UTBOWzyP4QD7jfQsG9jG//Y0FACzpE7f TOgsUcQrme/CLpwM/RXcx+xBuGddxpjm0fVZVG564BpZ4knchWMurjHGzFv7191o JQEzNU429evhmUvkMMheOKwCTuqfJI05Rgxc/SMlG4eyt8T8IgBGi46D3830trPD NtY0OfT9MSMVYpaXyCp1I4NrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJk6FYSxD jbtENrPx/trb92f/FJ8wHwYDVR0jBBgwFoAUb3fBnxHTKqqkLiaRb3SC77j5ehww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMTI1L0Y1Rjc4NzhBQ0Mx MDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fxa0xpYVJiM1NDNzdqNWVo dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjNmQm54SFRLcXFrTGlhUmIzU0M3N2o1ZWh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MTI1L0Y1Rjc4NzhBQ0MxMDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fx a0xpYVJiM1NDNzdqNWVody5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD15TniO8BCikS4bUP+FI/D12S834w87QbOznQ5gXp60wHWnmBYEtt/N mEHfcT61Y+jjrXjyHNiiDY4OjLROcDBjkkBA+xjwC7P5snRxnoQs+p1mRxGGHcLV /vll7pR6Sy1Dqyko/VLKO1KbGnp/A2ix2vIcnSk26vdJEuT2JoV4cnF5ctim4BMi CzIdCHIlRSdxP02teTM3X0EVkoChJz8eByaT0o4pOJSu7g9iZ4TDWunXJf7eC1Q8 8yDSwYxcz41u4NF5z7klKAuEotcacTyfwphMyF1cwfG6GkPS8311aFv8BnUxaIYE NaimFR80aDT9UfnK1JalfWJejPlqjN8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:02 2025 by rpki-client