$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: 3VMfqccjZC2tYb4cR1UgorUf5rkj4tJ1vu41N1gijaI= Subject key identifier: F5:C0:57:6A:45:3F:4D:9D:7D:1B:CE:29:2A:1C:FE:D9:C8:8F:45:C4 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 10B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 1971 Signing time: Fri 22 Aug 2025 17:27:45 +0000 Manifest this update: Fri 22 Aug 2025 17:27:45 +0000 Manifest next update: Fri 29 Aug 2025 17:27:45 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: LbgKSNckXeHyv54iDk1b+geXVGXwVa6ka8ri/0YPS0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4275 (0x10b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Aug 22 17:27:45 2025 GMT Not After : Aug 29 17:27:45 2025 GMT Subject: CN=68a8a891-d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:e5:cb:21:55:39:a5:d9:e0:6c:33:d0:a2: f4:a5:70:df:6d:eb:dd:27:b9:52:9f:59:fa:b9:d7: 21:77:a4:39:9f:5c:52:30:bd:73:be:76:eb:99:6f: 69:32:73:fe:17:63:48:a2:a3:1d:84:40:c5:7a:89: 38:9b:d8:b7:50:1d:0d:92:b0:ca:d0:1e:60:93:7a: e6:dd:24:43:6b:56:d7:a9:b3:3f:2f:8b:fa:63:71: b0:39:3b:34:c0:40:60:32:1e:ec:13:3a:9f:92:70: d4:63:2f:62:18:9f:90:b3:4d:dc:1f:f4:e5:82:99: aa:c3:84:ff:70:48:b2:d5:61:fa:ca:e3:74:1c:83: a2:4e:41:fc:76:63:8f:d9:1b:55:08:f2:5e:6d:78: 9f:16:f8:0e:56:ab:20:18:0e:db:3f:ad:b4:8c:52: c0:de:97:b8:ee:c5:95:41:c4:be:0b:93:b0:9a:45: b0:da:4c:34:3e:10:c2:18:c8:90:70:79:44:8f:ce: ef:b0:08:26:16:4b:7d:e0:bf:b4:a2:b5:4b:c9:2b: cc:a6:9f:39:86:b0:d4:9a:8a:a7:60:06:90:bf:79: 8e:9b:bc:f9:07:a7:8d:ef:70:50:1f:5c:12:3f:ae: 5f:6d:fb:6f:18:58:b6:0a:2a:c1:6e:62:c7:1a:1c: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C0:57:6A:45:3F:4D:9D:7D:1B:CE:29:2A:1C:FE:D9:C8:8F:45:C4 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f3:e5:f2:29:fb:6f:08:9c:34:4b:44:63:c2:d9:6f:54:19: 80:b6:71:45:ab:f9:6a:3a:f7:40:91:d6:a8:3f:1a:64:36:28: aa:27:6f:6e:d4:41:d6:4b:86:eb:5a:c6:a4:f4:e5:dc:23:5c: 10:ba:06:43:98:0b:49:a3:62:44:69:b7:95:dd:e4:27:4a:93: bc:7b:56:46:89:d8:c5:4d:0e:73:1a:28:8c:43:03:e3:30:13: d8:e7:8b:fe:ba:39:32:12:cf:0b:3f:64:f2:50:58:94:5a:24: 47:b3:fc:12:78:44:76:11:26:71:c6:5d:3b:cb:79:f2:64:61: 9d:8f:12:ab:26:0b:8e:e1:21:c7:af:9f:f9:96:03:db:10:50: 60:f7:bc:96:eb:8d:22:c6:81:77:50:6e:07:d4:f2:9f:e5:48: de:10:bf:4b:d9:65:af:ea:10:1e:67:a1:05:01:98:69:c8:c7: da:83:0b:d2:a3:7b:9d:98:4f:e9:9e:aa:e2:82:5b:5b:c8:5f: a4:c3:4f:cf:99:d4:4d:26:61:e7:00:75:5c:63:de:f8:52:f3: a5:9b:74:ef:05:19:d6:58:90:a5:42:05:9f:dc:52:20:97:38: b3:9f:3f:6a:11:5a:10:a6:ec:8b:8e:71:78:dd:2d:93:fb:26: c1:23:d8:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjUwODIyMTcyNzQ1WhcNMjUwODI5MTcyNzQ1WjAYMRYwFAYD VQQDEw02OGE4YTg5MS1kNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM/lyyFVOaXZ4Gwz0KL0pXDfbevdJ7lSn1n6udchd6Q5n1xSML1zvnbrmW9p MnP+F2NIoqMdhEDFeok4m9i3UB0NkrDK0B5gk3rm3SRDa1bXqbM/L4v6Y3GwOTs0 wEBgMh7sEzqfknDUYy9iGJ+Qs03cH/Tlgpmqw4T/cEiy1WH6yuN0HIOiTkH8dmOP 2RtVCPJebXifFvgOVqsgGA7bP620jFLA3pe47sWVQcS+C5OwmkWw2kw0PhDCGMiQ cHlEj87vsAgmFkt94L+0orVLySvMpp85hrDUmoqnYAaQv3mOm7z5B6eN73BQH1wS P65fbftvGFi2CirBbmLHGhzkuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXAV2pF P02dfRvOKSoc/tnIj0XEMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB8+XyKftvCJw0S0RjwtlvVBmAtnFFq/lqOvdAkdaoPxpkNiiqJ29u 1EHWS4brWsak9OXcI1wQugZDmAtJo2JEabeV3eQnSpO8e1ZGidjFTQ5zGiiMQwPj MBPY54v+ujkyEs8LP2TyUFiUWiRHs/wSeER2ESZxxl07y3nyZGGdjxKrJguO4SHH r5/5lgPbEFBg97yW640ixoF3UG4H1PKf5UjeEL9L2WWv6hAeZ6EFAZhpyMfagwvS o3udmE/pnqrigltbyF+kw0/PmdRNJmHnAHVcY974UvOlm3TvBRnWWJClQgWf3FIg lziznz9qEVoQpuyLjnF43S2T+ybBI9jK -----END CERTIFICATE-----Generated at Sat Aug 23 22:38:16 2025 by rpki-client