$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: K+teO32xw5wjuuwlqJM5cWoMrUgmyjmyoP0nr1kl/xI= Subject key identifier: BE:ED:4E:E4:ED:C9:A8:89:B0:D1:9E:29:08:7D:3D:30:71:61:3F:FA Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: 2E Signing time: Sat 23 Aug 2025 07:56:52 +0000 Manifest this update: Sat 23 Aug 2025 07:56:51 +0000 Manifest next update: Sat 30 Aug 2025 07:56:51 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: +BbaITMiuS9x7w587fSwRjMKeo9V4oXKQuhcYVmP+B4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Aug 23 07:56:51 2025 GMT Not After : Aug 30 07:56:51 2025 GMT Subject: CN=68a97443-dde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:a9:e5:1e:7f:0c:0c:77:8e:ec:11:0d:0b: 82:57:cd:9f:af:d1:61:5c:7c:fb:11:3e:12:4c:f1: e9:4a:2b:23:1a:15:32:c2:0d:b1:98:10:89:5a:34: a3:1a:20:3c:c7:ce:24:3d:b3:a1:bf:f4:3b:28:ad: 94:2f:72:01:55:61:55:3f:16:cb:af:4b:f7:02:68: 34:01:f3:da:84:d3:df:a3:12:3f:d1:18:e3:ee:5c: e8:aa:6a:77:ce:60:55:f5:e3:bf:d5:37:90:69:50: 21:fc:28:e5:ef:f6:e7:04:9b:55:40:5e:f8:39:0b: 13:ad:e2:82:54:50:d6:c7:5f:f6:ed:38:dc:95:31: 78:48:c3:de:ac:9c:2b:c1:1e:f2:09:75:bd:5c:21: 54:31:9a:0a:5f:04:41:f7:d3:71:f8:95:1b:35:61: 93:c9:6e:5a:6d:1f:64:ec:10:aa:82:83:98:46:11: a8:b4:33:b6:e3:77:28:cf:4b:bb:1d:31:20:c2:dd: 96:4c:84:35:4e:3e:db:19:b5:86:ff:dd:ed:89:f1: ea:dd:4b:f1:1c:2e:13:64:1d:17:8a:b3:42:24:02: 60:14:b7:ed:9a:b4:7a:c5:fa:83:23:cd:3b:3e:ec: 6f:17:46:63:af:1c:95:7d:bb:db:26:51:a7:06:8b: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:ED:4E:E4:ED:C9:A8:89:B0:D1:9E:29:08:7D:3D:30:71:61:3F:FA X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0b:a7:2f:d4:95:f6:a7:f2:d3:d7:98:bb:4b:a0:9b:4b:0f: 6c:ee:c4:98:ee:81:14:60:fd:d4:26:b8:96:c0:e2:81:ce:de: 7b:39:32:06:39:fc:98:86:d0:1b:8c:0d:f6:da:a4:c7:c9:54: cb:80:15:60:c4:e6:ea:ef:03:be:15:6d:21:e3:e9:f3:2f:d3: 5c:8b:26:f7:0e:25:42:82:0b:5b:21:aa:c0:c7:43:15:db:31: 40:56:a3:cf:f6:16:9e:fe:b8:a5:a3:97:dd:5c:01:a8:57:14: 6c:dc:70:c9:c8:84:b9:d1:42:e5:dd:0f:1c:00:de:5c:68:a4: 5e:95:99:41:b7:77:e5:c9:40:4d:77:15:7c:f1:71:67:46:60: f7:b5:dd:30:91:9b:bb:ad:67:0d:b1:d7:43:e5:a3:ab:06:a3: ab:e6:5a:75:ee:74:9f:62:e2:6c:28:0c:3c:b9:45:4e:77:99: cc:b4:5b:e3:c0:64:86:c4:6b:fd:0a:4b:a8:9b:b3:b3:3d:88: f8:bd:ff:91:57:ae:e7:ee:d4:a2:0b:29:8c:e0:75:b3:cf:45: 9a:7b:cc:13:86:41:92:c2:04:a2:75:4c:c3:9a:7c:2a:15:78: f9:ce:7b:fd:9d:6e:64:f7:7c:05:86:3f:7a:39:e2:0c:79:43: 3a:8e:7a:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoREVBNjNFMzEwMUJGMTU5OTAyMEE0MDgzRkExQzNEOTY0 QjIxMzBDMDAeFw0yNTA4MjMwNzU2NTFaFw0yNTA4MzAwNzU2NTFaMBgxFjAUBgNV BAMTDTY4YTk3NDQzLWRkZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1I6nlHn8MDHeO7BENC4JXzZ+v0WFcfPsRPhJM8elKKyMaFTLCDbGYEIlaNKMa IDzHziQ9s6G/9DsorZQvcgFVYVU/FsuvS/cCaDQB89qE09+jEj/RGOPuXOiqanfO YFX147/VN5BpUCH8KOXv9ucEm1VAXvg5CxOt4oJUUNbHX/btONyVMXhIw96snCvB HvIJdb1cIVQxmgpfBEH303H4lRs1YZPJblptH2TsEKqCg5hGEai0M7bjdyjPS7sd MSDC3ZZMhDVOPtsZtYb/3e2J8erdS/EcLhNkHReKs0IkAmAUt+2atHrF+oMjzTs+ 7G8XRmOvHJV9u9smUacGiwwtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvu1O5O3J qImw0Z4pCH09MHFhP/owHwYDVR0jBBgwFoAU3qY+MQG/FZkCCkCD+hw9lkshMMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0NCMTRCRjI2M0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1N QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3FZLU1RR19GWmtDQ2tDRC1odzlsa3NoTU1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0NCMTRCRjI2M0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyLzNxWS1NUUdfRlpr Q0NrQ0QtaHc5bGtzaE1NQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABoLpy/Ulfan8tPXmLtLoJtLD2zuxJjugRRg/dQmuJbA4oHO3ns5MgY5 /JiG0BuMDfbapMfJVMuAFWDE5urvA74VbSHj6fMv01yLJvcOJUKCC1shqsDHQxXb MUBWo8/2Fp7+uKWjl91cAahXFGzccMnIhLnRQuXdDxwA3lxopF6VmUG3d+XJQE13 FXzxcWdGYPe13TCRm7utZw2x10Plo6sGo6vmWnXudJ9i4mwoDDy5RU53mcy0W+PA ZIbEa/0KS6ibs7M9iPi9/5FXrufu1KILKYzgdbPPRZp7zBOGQZLCBKJ1TMOafCoV ePnOe/2dbmT3fAWGP3o54gx5QzqOeig= -----END CERTIFICATE-----Generated at Sat Aug 23 18:59:55 2025 by rpki-client