$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json) Hash identifier: GP7H3cg5v3VBUoVAOR0zEx1Y3pxYPo0iYTTBM7cmQn8= Subject key identifier: EB:B9:0F:7A:CB:BA:F7:B1:0A:13:3E:93:BA:65:07:5A:A7:30:5E:2D Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft Manifest number: 069E Signing time: Fri 22 Aug 2025 22:28:41 +0000 Manifest this update: Fri 22 Aug 2025 22:28:40 +0000 Manifest next update: Fri 29 Aug 2025 22:28:40 +0000 Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: DKesHQzwWzNz4VuYqj7iFb7vmRyvDJyHb1a/kFznZX8=) 2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: FOS9hpfhSMJ/5W+e+NFkrecUhC86TAOPH0uxsIPYP4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Validity Not Before: Aug 22 22:28:40 2025 GMT Not After : Aug 29 22:28:40 2025 GMT Subject: CN=68a8ef18-33d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:f0:6d:fc:72:31:47:ac:42:69:fe:19:8c: 69:8d:9d:b3:cf:9e:a3:24:b9:a3:dd:27:5c:95:2c: f7:8e:eb:66:a9:30:f2:d1:89:61:a2:b6:51:45:38: 46:57:15:b0:e7:af:41:2e:ee:22:72:72:1d:6a:10: 62:ce:d3:24:2f:e2:a7:ec:8e:73:87:97:e5:ee:f2: a6:a3:a8:07:6c:6e:97:48:55:4b:cc:33:48:d2:41: e4:a1:2b:42:2e:72:4f:c1:3c:29:ed:91:66:46:c6: 5a:0c:87:90:4b:39:81:58:fa:2b:9c:02:df:7c:f2: 5c:5b:18:5d:9d:72:0c:ec:5a:92:44:6f:b7:82:10: 1c:c6:e4:d9:5b:bf:dc:9e:e4:2e:3f:a5:57:5a:f0: b7:10:92:8b:f4:25:95:09:40:84:38:be:e6:52:06: eb:3f:28:65:c9:06:48:e6:e5:e2:fe:9b:e7:d6:d1: b9:b2:41:6c:41:ab:88:78:8f:c4:43:19:07:c2:a0: 74:87:24:c7:91:f7:98:a9:b4:48:71:d8:c9:6f:8f: 57:0b:39:33:0f:07:da:1c:69:11:f9:d9:46:ae:e6: 7e:95:86:12:53:90:d2:ad:7d:97:ce:b9:80:71:16: c7:37:73:9b:4e:77:4a:3d:80:0e:c4:f9:85:83:2a: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B9:0F:7A:CB:BA:F7:B1:0A:13:3E:93:BA:65:07:5A:A7:30:5E:2D X509v3 Authority Key Identifier: keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:5f:d0:a2:6f:9b:8d:e4:d8:29:8d:b2:0b:1d:1b:64:27:19: 4d:76:8f:97:38:4b:ca:c9:84:24:c2:ec:7c:fb:9a:6c:6e:07: 47:cb:4b:23:d9:bf:7c:b6:a9:68:44:82:25:fe:3c:68:db:3e: ea:18:36:0a:67:bb:d3:a3:fe:17:9f:e3:57:d2:59:65:37:6e: f5:de:a7:bb:95:34:53:57:68:34:8e:16:ad:b9:0f:6e:7d:0b: 94:b4:9d:2d:c7:7e:a9:cf:63:ed:1a:76:ae:fd:cc:8a:64:80: 27:ff:e4:d2:56:85:57:2a:32:c2:b5:c6:67:37:a9:d1:84:7b: 74:0c:fc:5c:01:7b:65:c3:1c:ca:6b:14:ea:3e:80:63:89:61: fe:34:5d:ae:73:76:04:86:f9:15:89:1f:7c:61:79:7b:a7:8f: 47:a7:f4:dc:d5:1b:08:27:2a:91:ab:8a:46:26:a9:9b:7d:55: 30:d2:54:67:d5:e5:51:e0:79:a6:01:52:67:ce:36:bb:aa:01: 9a:08:66:01:26:3f:c9:60:65:f0:09:5e:b5:dc:40:d3:d6:43: 49:ef:56:01:00:3a:81:1a:c6:e3:57:e1:d1:cb:e2:7f:d0:6f: dd:68:73:9b:8c:93:40:39:c4:af:61:55:4d:27:6b:ca:66:0b: 29:7e:36:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5 NTZBN0Q5RTMwHhcNMjUwODIyMjIyODQwWhcNMjUwODI5MjIyODQwWjAYMRYwFAYD VQQDEw02OGE4ZWYxOC0zM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RnwbfxyMUesQmn+GYxpjZ2zz56jJLmj3SdclSz3jutmqTDy0YlhorZRRThG VxWw569BLu4icnIdahBiztMkL+Kn7I5zh5fl7vKmo6gHbG6XSFVLzDNI0kHkoStC LnJPwTwp7ZFmRsZaDIeQSzmBWPornALffPJcWxhdnXIM7FqSRG+3ghAcxuTZW7/c nuQuP6VXWvC3EJKL9CWVCUCEOL7mUgbrPyhlyQZI5uXi/pvn1tG5skFsQauIeI/E QxkHwqB0hyTHkfeYqbRIcdjJb49XCzkzDwfaHGkR+dlGruZ+lYYSU5DSrX2XzrmA cRbHN3ObTndKPYAOxPmFgyrn1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOu5D3rL uvexChM+k7plB1qnMF4tMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1 dkg3UFo1czdMVHlWYW4yZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlX9Cib5uN5NgpjbILHRtkJxlNdo+XOEvKyYQkwux8+5psbgdHy0sj 2b98tqloRIIl/jxo2z7qGDYKZ7vTo/4Xn+NX0lllN2713qe7lTRTV2g0jhatuQ9u fQuUtJ0tx36pz2PtGnau/cyKZIAn/+TSVoVXKjLCtcZnN6nRhHt0DPxcAXtlwxzK axTqPoBjiWH+NF2uc3YEhvkViR98YXl7p49Hp/Tc1RsIJyqRq4pGJqmbfVUw0lRn 1eVR4HmmAVJnzja7qgGaCGYBJj/JYGXwCV613EDT1kNJ71YBADqBGsbjV+HRy+J/ 0G/daHObjJNAOcSvYVVNJ2vKZgspfja8 -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:09 2025 by rpki-client