$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: r+p4mCm/yiAjz5OQSTFHwB52djP9roZevyvLp9yJq7w= Subject key identifier: 7C:C6:A7:B5:C8:F2:E8:F9:E5:FA:19:F8:27:28:37:7D:74:9E:62:47 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 1086 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 1078 Signing time: Fri 22 Aug 2025 17:30:36 +0000 Manifest this update: Fri 22 Aug 2025 17:30:36 +0000 Manifest next update: Fri 29 Aug 2025 17:30:36 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: XiXPebIsCJzKqKUlQS9eTg6+77VhNMVafTruGQQ8g18=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: 0OKa5D8R5tqflMwj5WNvymkXFrzQXgwFV3RUnRL3aD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4230 (0x1086) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Aug 22 17:30:36 2025 GMT Not After : Aug 29 17:30:36 2025 GMT Subject: CN=68a8a93c-d0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:1c:3c:b3:72:25:02:72:71:fd:4b:9a:c2: 89:fb:58:16:e8:1f:29:96:e3:0f:80:35:47:80:cd: 7e:a6:b3:dd:0e:cc:3b:97:3e:e2:1a:76:c1:26:e2: 01:5c:4b:00:97:b3:b7:ca:72:4e:42:2d:c3:b0:37: 73:8c:4b:40:27:a3:78:4d:88:ee:ad:f7:45:6b:2f: 57:67:43:80:12:cd:ea:cc:6c:7b:17:0d:fb:a0:8d: 34:8b:a7:78:ca:8d:8f:16:21:4c:98:db:e6:ac:43: 6c:2d:49:4d:c8:46:be:69:97:46:2c:af:70:e4:70: fb:a0:5d:ce:35:2f:19:f3:7c:39:44:a6:e2:66:6b: eb:00:eb:b3:94:9d:42:ae:fb:2c:37:d9:74:4c:46: 46:df:0f:5c:03:28:7f:ee:83:f3:d6:e6:d9:ab:84: e2:39:7a:3e:c8:d1:00:8e:88:cb:2f:e1:44:a0:e6: fb:9d:bc:d3:ae:78:30:11:4a:5f:e1:10:08:d8:0c: cb:49:fd:cd:a7:8d:f1:a4:cd:0d:f7:af:17:58:ac: c3:35:96:a2:0d:95:0d:5a:f5:dc:0e:f7:fe:ff:cb: 65:af:14:35:8b:5a:00:a9:7a:db:bf:a0:8b:e3:2f: f2:11:58:db:4d:48:33:c6:1a:86:bf:8c:6c:fc:f7: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C6:A7:B5:C8:F2:E8:F9:E5:FA:19:F8:27:28:37:7D:74:9E:62:47 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:bb:a7:89:d5:50:86:b5:23:15:86:63:db:74:1a:5d:01:38: 95:e9:27:a7:f3:34:b0:91:72:eb:28:15:a3:76:67:d7:d2:66: 6f:62:03:30:9f:6b:3c:cd:ea:20:96:52:8a:33:b9:fd:cf:83: 1d:e5:2d:9d:2b:7c:b6:e0:e7:7a:7b:32:78:f2:ab:be:8f:c2: cd:65:4d:96:92:de:2e:00:aa:a6:8c:7b:b2:cd:3f:c3:4d:71: b5:18:67:ef:96:eb:cb:b4:63:bc:c1:de:8d:00:22:5b:87:50: 21:43:85:d1:5a:bd:10:1c:4d:23:fd:51:5e:ec:9c:61:b2:16: e6:95:f0:e8:ee:45:f0:4f:f7:f3:59:81:b3:6e:c1:d8:0a:a5: b0:be:f3:2b:5e:e1:55:23:9d:75:6b:4f:d0:ae:fa:e3:77:5c: d7:f5:0f:5c:b3:1c:ef:8b:62:b9:64:20:bd:9e:44:ed:30:44: 1f:b2:3f:01:84:28:62:3a:7e:58:b5:be:c1:fa:5b:fb:1b:ce: c7:f9:5c:a9:09:ab:9d:e3:70:f7:a1:f4:c6:8f:40:dd:82:76: 47:03:7b:6d:60:90:32:e4:c8:12:8c:28:e0:fe:84:71:3c:6b: 61:2e:e4:88:70:68:80:91:88:d1:cd:2f:45:40:fb:02:ed:18: c3:47:47:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUwODIyMTczMDM2WhcNMjUwODI5MTczMDM2WjAYMRYwFAYD VQQDEw02OGE4YTkzYy1kMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6ocPLNyJQJycf1LmsKJ+1gW6B8pluMPgDVHgM1+prPdDsw7lz7iGnbBJuIB XEsAl7O3ynJOQi3DsDdzjEtAJ6N4TYjurfdFay9XZ0OAEs3qzGx7Fw37oI00i6d4 yo2PFiFMmNvmrENsLUlNyEa+aZdGLK9w5HD7oF3ONS8Z83w5RKbiZmvrAOuzlJ1C rvssN9l0TEZG3w9cAyh/7oPz1ubZq4TiOXo+yNEAjojLL+FEoOb7nbzTrngwEUpf 4RAI2AzLSf3Np43xpM0N968XWKzDNZaiDZUNWvXcDvf+/8tlrxQ1i1oAqXrbv6CL 4y/yEVjbTUgzxhqGv4xs/PcIqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzGp7XI 8uj55foZ+CcoN310nmJHMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOu6eJ1VCGtSMVhmPbdBpdATiV6Sen8zSwkXLrKBWjdmfX0mZvYgMw n2s8zeogllKKM7n9z4Md5S2dK3y24Od6ezJ48qu+j8LNZU2Wkt4uAKqmjHuyzT/D TXG1GGfvluvLtGO8wd6NACJbh1AhQ4XRWr0QHE0j/VFe7JxhshbmlfDo7kXwT/fz WYGzbsHYCqWwvvMrXuFVI511a0/Qrvrjd1zX9Q9csxzvi2K5ZCC9nkTtMEQfsj8B hChiOn5Ytb7B+lv7G87H+VypCaud43D3ofTGj0DdgnZHA3ttYJAy5MgSjCjg/oRx PGthLuSIcGiAkYjRzS9FQPsC7RjDR0et -----END CERTIFICATE-----Generated at Sat Aug 23 11:03:47 2025 by rpki-client