$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: nWo1iPQm/S0gPg1KPEOIuYdQ8xccczuXBTQbk5edcFE= Subject key identifier: 3F:FE:78:FD:A5:13:18:A3:0A:A8:8A:0E:98:F9:61:E8:EE:54:5D:89 Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 07BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 07B9 Signing time: Fri 22 Aug 2025 21:22:16 +0000 Manifest this update: Fri 22 Aug 2025 21:22:15 +0000 Manifest next update: Fri 29 Aug 2025 21:22:15 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: H3S3ZXELhN56OKWkUwQtYX35ZzAL3TCrgp9B+yg8qEY=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Aug 22 21:22:15 2025 GMT Not After : Aug 29 21:22:15 2025 GMT Subject: CN=68a8df87-c1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:c0:8b:3c:2f:cb:ea:62:1f:6f:39:1b:83: 15:04:eb:29:75:38:0a:d0:07:27:78:8a:f6:a3:20: 8e:c2:2c:8d:77:c1:73:1d:ad:24:c2:e1:f2:de:18: f6:50:f4:02:60:82:63:7e:5b:99:93:ef:9d:b8:78: de:93:42:d5:f4:ea:e7:5e:31:6d:93:62:62:42:ec: 4b:ce:a9:59:49:45:c6:88:6f:6d:e4:3c:91:18:ab: 88:ae:dc:5c:ae:cd:c2:6e:e4:c6:fc:41:32:22:d5: 80:95:0e:92:cb:a4:81:33:64:b8:a5:2c:e0:d8:24: 4d:a7:f7:23:41:d2:ee:1e:6c:76:2e:34:5a:c0:f3: 6d:eb:74:33:99:65:2b:ef:82:b3:7b:46:ce:17:65: 00:57:da:fa:5d:ef:1a:35:78:c8:8d:73:6b:ee:4e: dd:0c:fd:c0:4b:12:03:02:32:c0:60:76:66:5e:1c: 83:fa:f1:e7:03:57:e1:77:83:31:b1:9d:26:8f:92: 87:4d:eb:3b:0d:4d:0c:c3:d9:11:07:bc:a7:f9:65: 95:65:37:11:6b:eb:8c:a9:a3:a5:db:71:12:60:4e: 0c:1e:b2:a1:d7:65:c1:e3:28:3c:b6:a5:ad:6d:77: 11:24:e1:b8:b1:fe:f1:13:72:fb:94:7d:4e:db:bc: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:78:FD:A5:13:18:A3:0A:A8:8A:0E:98:F9:61:E8:EE:54:5D:89 X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:99:6d:ea:9c:38:0c:7d:a1:22:89:b0:3b:f3:41:64:5c:8e: b0:2e:3b:83:26:37:64:c7:d0:df:eb:fa:04:e2:05:87:73:ce: e3:1b:4d:43:03:4f:bd:b8:37:58:cf:bd:67:d3:a8:0c:fa:67: 48:b0:26:fc:62:ff:80:8f:23:91:4a:82:48:d8:79:be:97:bf: 82:41:79:96:84:91:f6:5b:2b:89:75:c7:58:bb:2a:dd:41:2c: 65:e2:e5:4f:ec:6f:ee:48:f8:46:5f:a5:e3:a1:39:56:df:67: aa:bd:88:9f:cc:ef:63:ce:e9:3c:95:c6:f9:f7:b7:5a:19:3d: 22:02:34:53:b4:ab:5a:43:73:3f:8f:94:74:47:d7:aa:7a:c5: a7:0d:ca:94:86:98:55:23:62:6c:e5:0b:c4:94:70:8b:19:d7: d4:71:a3:cb:0a:7d:30:63:9f:9d:8f:a8:a8:62:90:10:b2:99: ab:5e:1e:f3:1a:2e:b3:d6:42:78:f4:f9:6b:58:31:e3:cd:74: 1b:8d:bd:3c:bf:b2:53:d1:0d:d9:98:5a:20:f9:f7:70:95:9c: 2a:a8:e1:25:c0:dc:f1:e9:2f:2b:da:4e:38:c5:97:85:f0:48: ab:43:d7:4a:27:98:1f:28:d1:8b:bb:87:33:73:cb:9b:95:28: af:4e:2a:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUwODIyMjEyMjE1WhcNMjUwODI5MjEyMjE1WjAYMRYwFAYD VQQDEw02OGE4ZGY4Ny1jMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pLAizwvy+piH285G4MVBOspdTgK0AcneIr2oyCOwiyNd8FzHa0kwuHy3hj2 UPQCYIJjfluZk++duHjek0LV9OrnXjFtk2JiQuxLzqlZSUXGiG9t5DyRGKuIrtxc rs3CbuTG/EEyItWAlQ6Sy6SBM2S4pSzg2CRNp/cjQdLuHmx2LjRawPNt63QzmWUr 74Kze0bOF2UAV9r6Xe8aNXjIjXNr7k7dDP3ASxIDAjLAYHZmXhyD+vHnA1fhd4Mx sZ0mj5KHTes7DU0Mw9kRB7yn+WWVZTcRa+uMqaOl23ESYE4MHrKh12XB4yg8tqWt bXcRJOG4sf7xE3L7lH1O27zoHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/+eP2l ExijCqiKDpj5YejuVF2JMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCimW3qnDgMfaEiibA780FkXI6wLjuDJjdkx9Df6/oE4gWHc87jG01D A0+9uDdYz71n06gM+mdIsCb8Yv+AjyORSoJI2Hm+l7+CQXmWhJH2WyuJdcdYuyrd QSxl4uVP7G/uSPhGX6XjoTlW32eqvYifzO9jzuk8lcb597daGT0iAjRTtKtaQ3M/ j5R0R9eqesWnDcqUhphVI2Js5QvElHCLGdfUcaPLCn0wY5+dj6ioYpAQspmrXh7z Gi6z1kJ49PlrWDHjzXQbjb08v7JT0Q3ZmFog+fdwlZwqqOElwNzx6S8r2k44xZeF 8EirQ9dKJ5gfKNGLu4czc8ublSivTiq1 -----END CERTIFICATE-----Generated at Sun Aug 24 03:05:52 2025 by rpki-client