$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: l2UpMRq7STF9s03kEoPUAW4ts2tI3zodP6cCmoXHjN4= Subject key identifier: 16:F0:A0:9A:D4:F4:DA:84:3B:11:77:1B:9F:B1:06:DC:00:76:72:DA Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 2C0B Signing time: Fri 22 Aug 2025 16:54:52 +0000 Manifest this update: Fri 22 Aug 2025 16:54:51 +0000 Manifest next update: Fri 29 Aug 2025 16:54:51 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: NOBnKvHYwn6PWr3osV3WL9928QMLfbxRAV3YC0JOOnA=) 2: A20F3364D9CD11EF93ACA765C4F9AE02.roa (hash: GlYsHzeq/9zAsgZDgmAiaFOhydbYqGstJVX7MNbtJFs=) 3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: zPBNAdtnIGt+ra2FI390H36UQCaUhQl2E2/fPAphoFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Aug 22 16:54:51 2025 GMT Not After : Aug 29 16:54:51 2025 GMT Subject: CN=68a8a0db-1949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:97:16:d6:f4:fb:43:20:49:1a:8c:52:77: 3c:1e:de:29:bb:b8:47:8d:2f:b1:d2:7e:a8:7a:1a: b9:1b:23:14:30:98:c3:96:ac:7f:a6:0c:82:20:66: 2d:7f:07:52:b6:c2:63:e5:00:2a:46:ef:f9:b9:42: 3a:65:d2:40:d4:dd:63:df:90:d1:e0:e7:eb:15:f0: 52:2a:45:23:72:d2:2c:de:1d:28:c3:86:82:b2:24: 7a:5d:b5:d9:ad:cd:74:91:3c:5f:69:4d:fb:97:c9: 90:48:00:c9:0e:d9:bf:6a:91:d5:8a:5a:b0:df:45: 99:45:67:16:e3:d3:2a:cb:12:6d:86:53:fa:dc:80: d1:d9:d4:7c:04:f2:ce:01:e1:49:f2:51:fd:f7:02: 88:8d:c1:19:9a:89:4a:b7:a1:e5:05:96:cd:2b:06: c7:54:e9:e6:b2:01:51:d8:81:94:86:4e:f7:39:55: e0:14:95:65:16:c3:e4:36:74:8d:31:fa:8e:0a:c1: 84:a8:91:1a:b1:a1:29:d6:53:84:0f:bf:c6:b9:34: 74:41:2c:69:da:ae:46:3f:48:dc:11:d4:ba:1c:50: f4:d6:5c:1f:9b:1d:fa:87:1f:30:75:b0:76:cf:d9: 13:aa:40:c8:66:16:d1:70:c2:53:0f:44:61:f0:d7: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:A0:9A:D4:F4:DA:84:3B:11:77:1B:9F:B1:06:DC:00:76:72:DA X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ca:97:46:6b:05:48:28:b4:cd:79:ca:bd:54:95:c5:39:25: fd:2e:8d:4d:9c:4c:95:79:79:19:63:a2:d4:48:15:8d:18:f7: e1:ec:2e:9f:5f:2b:f6:55:95:46:64:2c:f4:a9:c2:bd:bc:b0: c4:79:51:c3:f0:fb:5d:e1:a0:b6:fa:32:38:5b:1d:09:28:1b: a5:81:04:fc:83:0f:4d:89:5f:23:00:aa:71:c2:10:68:f0:9a: a4:7f:76:4b:ae:78:2b:ef:f6:56:82:c9:8a:21:88:c1:c5:32: e3:f1:1a:eb:fd:dc:91:44:8a:3a:23:08:e5:e8:e5:cb:31:91: 1e:d2:96:98:2d:c7:75:9b:94:f6:9f:dc:06:98:59:a8:4b:9a: 7d:1c:06:1c:ca:be:e1:74:56:f7:cf:65:43:58:a8:c8:bd:ea: 7a:60:5e:fe:ee:1f:0f:ea:b2:38:5a:ee:b4:69:5a:c4:2a:ce: e3:0c:60:4f:04:b4:61:8b:45:ea:15:4d:69:bd:ab:27:bb:9b: 1e:d6:31:88:91:04:a5:d1:72:35:4a:f1:37:56:a3:b4:a6:0a: 65:55:68:62:3b:38:73:cc:3b:62:91:aa:77:6a:26:db:34:89: e0:7c:ae:e5:05:2a:bf:61:f2:f9:91:48:a8:6f:98:65:3c:ef: 3f:28:c2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjUwODIyMTY1NDUxWhcNMjUwODI5MTY1NDUxWjAYMRYwFAYD VQQDEw02OGE4YTBkYi0xOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yuXFtb0+0MgSRqMUnc8Ht4pu7hHjS+x0n6oehq5GyMUMJjDlqx/pgyCIGYt fwdStsJj5QAqRu/5uUI6ZdJA1N1j35DR4OfrFfBSKkUjctIs3h0ow4aCsiR6XbXZ rc10kTxfaU37l8mQSADJDtm/apHVilqw30WZRWcW49MqyxJthlP63IDR2dR8BPLO AeFJ8lH99wKIjcEZmolKt6HlBZbNKwbHVOnmsgFR2IGUhk73OVXgFJVlFsPkNnSN MfqOCsGEqJEasaEp1lOED7/GuTR0QSxp2q5GP0jcEdS6HFD01lwfmx36hx8wdbB2 z9kTqkDIZhbRcMJTD0Rh8Ne0TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbwoJrU 9NqEOxF3G5+xBtwAdnLaMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkypdGawVIKLTNecq9VJXFOSX9Lo1NnEyVeXkZY6LUSBWNGPfh7C6f Xyv2VZVGZCz0qcK9vLDEeVHD8Ptd4aC2+jI4Wx0JKBulgQT8gw9NiV8jAKpxwhBo 8Jqkf3ZLrngr7/ZWgsmKIYjBxTLj8Rrr/dyRRIo6Iwjl6OXLMZEe0paYLcd1m5T2 n9wGmFmoS5p9HAYcyr7hdFb3z2VDWKjIvep6YF7+7h8P6rI4Wu60aVrEKs7jDGBP BLRhi0XqFU1pvasnu5se1jGIkQSl0XI1SvE3VqO0pgplVWhiOzhzzDtikap3aibb NIngfK7lBSq/YfL5kUiob5hlPO8/KMKH -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:48 2025 by rpki-client