$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json) Hash identifier: xWcs2tVqs/Fa+DhStFfePkTVxEmffWQC9tMK/iMFsx4= Subject key identifier: 49:51:62:0B:74:4A:05:E6:CC:C6:15:E1:9B:5F:BD:D6:79:94:EF:C4 Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft Manifest number: 21 Signing time: Sat 23 Aug 2025 08:15:54 +0000 Manifest this update: Sat 23 Aug 2025 08:15:53 +0000 Manifest next update: Sat 30 Aug 2025 08:15:53 +0000 Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: E76rYtPTX9mkCoVdbvpjfN9Y8nFop8TytJ5WCiIaHms=) 2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: CSetpI3z0nRywdagrYhbtYI0LFEAfY7qgb1M0CIYRF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Aug 23 08:15:53 2025 GMT Not After : Aug 30 08:15:53 2025 GMT Subject: CN=68a978b9-4dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:2f:2f:b5:fb:43:fc:ef:03:12:71:3c:e9: a9:58:74:6c:8e:c1:77:9a:51:93:68:58:8b:5d:86: 81:7c:e8:3f:fe:2d:3e:a1:e2:59:c0:77:bf:33:19: b0:11:0d:53:51:e8:89:0b:cc:fb:21:40:e1:d5:b7: 5e:2e:cd:f5:b6:66:48:33:a6:98:22:17:3f:8a:0a: 23:0c:ec:06:9e:05:62:1c:a0:cc:99:7a:2c:62:a3: 8d:26:c8:c5:4b:22:9f:0e:1e:46:1f:86:60:f3:7f: 40:3a:d9:7c:43:89:60:98:66:23:e1:27:18:cd:42: 79:9b:76:92:e1:7f:27:85:3e:87:e5:8a:40:37:74: 96:73:2f:8f:c8:03:9c:8b:d6:e0:52:4e:84:89:98: b3:1e:54:ac:53:be:27:6f:84:e5:d7:1d:6f:32:6c: aa:25:5c:74:c2:c3:77:8a:45:51:53:3e:9f:ec:90: 6b:59:85:0b:82:e9:90:47:08:19:ed:98:aa:34:bd: ee:22:a8:4b:4d:0d:34:a4:6b:cd:af:5d:0e:60:a1: 23:37:16:cc:be:0b:06:18:53:ac:16:24:d1:f7:ea: ac:50:5b:be:56:19:ed:c1:ad:09:1f:18:6f:d7:09: bf:82:2d:c7:d9:13:47:e4:f7:4e:38:dc:03:b5:ab: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:62:0B:74:4A:05:E6:CC:C6:15:E1:9B:5F:BD:D6:79:94:EF:C4 X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:92:8e:e1:28:f4:5d:69:fa:79:29:6e:20:54:c0:d5:21:ac: b9:1a:61:6b:1c:3f:e9:a2:ab:6e:88:ed:89:ad:55:b9:48:82: ee:7c:20:ab:8f:f5:ef:14:b8:f1:43:24:37:68:3f:74:6e:8e: 62:67:1a:b2:c6:9e:e6:0c:9d:17:94:4d:10:9b:e8:75:12:6d: 5e:4a:82:4b:e2:67:24:f9:c7:14:c0:5c:e9:d5:4d:f8:f8:9d: 5b:58:b7:8b:cc:c1:49:10:6d:cb:25:68:f1:a1:86:4b:6a:26: eb:0f:10:ad:84:2a:87:2c:04:15:37:c1:38:47:d6:1f:5c:73: 04:9d:0e:56:b1:cc:b8:e6:f7:20:65:b8:de:c5:05:75:79:93: 11:28:79:83:ae:ff:58:d5:b7:a0:b1:62:f3:02:4c:d8:13:a9: 00:a5:2b:d9:b0:94:e6:ab:93:6a:5b:7d:cd:be:88:89:86:df: dd:64:ef:76:11:9b:4b:74:2f:d7:62:73:e0:fe:15:34:3e:75: c9:ee:d7:c0:6e:bf:dd:98:77:fc:23:79:32:c7:42:9c:0b:d7: 26:1c:d0:81:6d:6c:b0:a5:52:d0:6d:da:50:4a:37:45:e0:7b: 98:70:fd:ac:67:b7:1f:cf:5d:4b:4a:d0:24:c3:d9:d1:59:46: e5:d8:ef:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRBNjExMC8GA1UEBRMoNzM3NTgyRUM0RThGRTM5REY0MkMwREMyMjlCQTM3RDFC NkIzODY1QTAeFw0yNTA4MjMwODE1NTNaFw0yNTA4MzAwODE1NTNaMBgxFjAUBgNV BAMTDTY4YTk3OGI5LTRkYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC17S8vtftD/O8DEnE86alYdGyOwXeaUZNoWItdhoF86D/+LT6h4lnAd78zGbAR DVNR6IkLzPshQOHVt14uzfW2ZkgzppgiFz+KCiMM7AaeBWIcoMyZeixio40myMVL Ip8OHkYfhmDzf0A62XxDiWCYZiPhJxjNQnmbdpLhfyeFPoflikA3dJZzL4/IA5yL 1uBSToSJmLMeVKxTvidvhOXXHW8ybKolXHTCw3eKRVFTPp/skGtZhQuC6ZBHCBnt mKo0ve4iqEtNDTSka82vXQ5goSM3Fsy+CwYYU6wWJNH36qxQW75WGe3BrQkfGG/X Cb+CLcfZE0fk90443AO1q7pPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSVFiC3RK BebMxhXhm1+91nmU78QwHwYDVR0jBBgwFoAUc3WC7E6P4530LA3CKbo30bazhlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEE2LzNCNjdBRDhFNjNC NzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzNXQzdFNlA0NTMwTEEzQ0tibzMwYmF6aGxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NEE2LzNCNjdBRDhFNjNCNzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUz MExBM0NLYm8zMGJhemhsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH6SjuEo9F1p+nkpbiBUwNUhrLkaYWscP+miq26I7YmtVblIgu58IKuP 9e8UuPFDJDdoP3RujmJnGrLGnuYMnReUTRCb6HUSbV5KgkviZyT5xxTAXOnVTfj4 nVtYt4vMwUkQbcslaPGhhktqJusPEK2EKocsBBU3wThH1h9ccwSdDlaxzLjm9yBl uN7FBXV5kxEoeYOu/1jVt6CxYvMCTNgTqQClK9mwlOark2pbfc2+iImG391k73YR m0t0L9dic+D+FTQ+dcnu18Buv92Yd/wjeTLHQpwL1yYc0IFtbLClUtBt2lBKN0Xg e5hw/axntx/PXUtK0CTD2dFZRuXY76A= -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:51 2025 by rpki-client