$ rpki-client -vvf rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft File: 3JGEsEpTx6Fy980mJV612APjRwU.mft (raw, json) Hash identifier: 2arUdT4NVqFGUG/DOS4wJFUm44kh66nlJGaM4KZWKNo= Subject key identifier: AC:FE:02:67:C8:AE:2E:EA:EC:29:6A:4D:E1:DC:92:8B:62:41:55:64 Authority key identifier: DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05 Certificate issuer: /CN=A919910B/serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705 Certificate serial: 06D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft Manifest number: 06C7 Signing time: Fri 22 Aug 2025 22:15:30 +0000 Manifest this update: Fri 22 Aug 2025 22:15:30 +0000 Manifest next update: Fri 29 Aug 2025 22:15:30 +0000 Files and hashes: 1: 3JGEsEpTx6Fy980mJV612APjRwU.crl (hash: yRF6nYjqxc5Vk/em0+3HyBumkvQG2p4Ge4seO+KoaAY=) 2: BB199EBC6F8711EB9E412A2BC4F9AE02.roa (hash: CN//aPXI7Vd/gecvzpNyd6NzvBQ86Pd0fnZS1wzYkqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919910B, serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705 Validity Not Before: Aug 22 22:15:30 2025 GMT Not After : Aug 29 22:15:30 2025 GMT Subject: CN=68a8ec02-c058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:36:78:f5:40:b8:c5:c8:f0:f0:38:1e:d8: 40:5c:0b:28:2a:fd:0d:60:3b:9a:e7:b4:fc:a4:f4: 99:e0:b5:e2:68:21:10:36:17:ba:0b:c1:e1:95:8b: cd:a3:be:1b:b5:07:94:27:29:2d:4a:56:8f:0d:c6: 48:d7:74:ab:1c:8a:52:5d:17:4e:21:95:ba:6b:2d: ec:3d:34:48:7b:00:16:60:1b:5c:5b:02:ab:d7:48: 7a:85:9b:ea:ba:27:51:89:42:ac:a7:81:0f:59:fc: 91:5d:b3:84:80:d4:24:31:13:4b:c3:82:2b:e1:15: 69:b0:96:96:32:b0:93:03:12:02:ea:c6:81:86:b0: 75:57:2c:69:fa:9f:24:c2:7f:23:38:40:ad:f2:a1: 67:09:82:15:14:0f:54:01:e8:8b:e2:c1:c5:65:9a: 09:d4:49:6e:5e:27:fa:ec:65:ae:9d:cd:09:09:1f: c1:39:f4:b5:8f:6a:32:e5:32:a7:60:71:8e:b1:67: 26:49:4e:7b:8b:d7:bf:0a:36:f5:ab:22:7b:be:b5: 61:af:b2:5c:ce:d2:9b:5b:39:fc:bc:0c:a5:ef:e9: f2:44:a6:7f:8f:5e:5d:a6:e7:02:00:5a:b5:48:fd: 2c:99:6f:6d:91:2a:2e:a9:f6:80:48:7e:80:e6:62: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FE:02:67:C8:AE:2E:EA:EC:29:6A:4D:E1:DC:92:8B:62:41:55:64 X509v3 Authority Key Identifier: keyid:DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b5:37:9e:7f:b8:3d:b1:c3:e3:2c:6d:01:44:34:87:c9:81: 24:5d:7e:8b:23:91:0f:fb:5c:10:57:12:ea:ce:80:09:5e:13: df:fd:c8:2b:f3:82:90:64:2b:d8:91:34:bb:1e:3c:01:6a:a1: 49:a2:c9:4d:f4:e4:ea:6d:23:b4:50:fa:18:79:05:ec:f1:37: c4:3e:c0:25:ad:cc:ad:9a:c3:b0:49:18:35:7d:18:b1:2a:cf: 13:81:c5:05:22:ce:ac:6b:6a:8d:5b:9c:f8:88:8c:22:3d:df: f5:88:ba:7e:c5:a6:a3:53:98:bb:b3:5d:e1:7c:4e:2e:c6:8b: bf:cd:d5:5f:f7:ff:1c:2d:0b:e7:b3:60:d2:99:03:15:84:8e: ff:c4:dc:e0:57:9d:6e:fe:95:a4:7c:57:1a:92:70:e7:7e:24: 65:4b:6a:e0:a9:c8:3a:ee:3c:64:27:bb:f6:76:29:a2:4a:fa: fe:ee:21:24:44:24:c4:f7:97:39:9f:62:1a:97:3f:73:ed:8b: 05:66:f2:d2:db:8e:f4:a5:fa:d5:85:d4:ab:85:d6:fc:46:83: 3d:78:99:66:39:c4:bd:da:2f:9a:72:56:9b:1d:c7:a2:c2:cc: 4d:97:a7:04:22:b0:2f:ae:d4:79:5a:02:aa:1c:48:96:5e:83: 4b:eb:e3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxMEIxMTAvBgNVBAUTKERDOTE4NEIwNEE1M0M3QTE3MkY3Q0QyNjI1NUVCNUQ4 MDNFMzQ3MDUwHhcNMjUwODIyMjIxNTMwWhcNMjUwODI5MjIxNTMwWjAYMRYwFAYD VQQDEw02OGE4ZWMwMi1jMDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4I2ePVAuMXI8PA4HthAXAsoKv0NYDua57T8pPSZ4LXiaCEQNhe6C8HhlYvN o74btQeUJyktSlaPDcZI13SrHIpSXRdOIZW6ay3sPTRIewAWYBtcWwKr10h6hZvq uidRiUKsp4EPWfyRXbOEgNQkMRNLw4Ir4RVpsJaWMrCTAxIC6saBhrB1Vyxp+p8k wn8jOECt8qFnCYIVFA9UAeiL4sHFZZoJ1EluXif67GWunc0JCR/BOfS1j2oy5TKn YHGOsWcmSU57i9e/Cjb1qyJ7vrVhr7JcztKbWzn8vAyl7+nyRKZ/j15dpucCAFq1 SP0smW9tkSouqfaASH6A5mI+CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz+AmfI ri7q7ClqTeHckotiQVVkMB8GA1UdIwQYMBaAFNyRhLBKU8ehcvfNJiVetdgD40cF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTEwQi82MjNEMUUwNjZG ODUxMUVCQUM1QUM5NkNDNEY5QUUwMi8zSkdFc0VwVHg2Rnk5ODBtSlY2MTJBUGpS d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKR0VzRXBUeDZGeTk4MG1KVjYxMkFQalJ3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTEwQi82MjNEMUUwNjZGODUxMUVCQUM1QUM5NkNDNEY5QUUwMi8zSkdFc0VwVHg2 Rnk5ODBtSlY2MTJBUGpSd1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMtTeef7g9scPjLG0BRDSHyYEkXX6LI5EP+1wQVxLqzoAJXhPf/cgr 84KQZCvYkTS7HjwBaqFJoslN9OTqbSO0UPoYeQXs8TfEPsAlrcytmsOwSRg1fRix Ks8TgcUFIs6sa2qNW5z4iIwiPd/1iLp+xaajU5i7s13hfE4uxou/zdVf9/8cLQvn s2DSmQMVhI7/xNzgV51u/pWkfFcaknDnfiRlS2rgqcg67jxkJ7v2dimiSvr+7iEk RCTE95c5n2Ialz9z7YsFZvLS2470pfrVhdSrhdb8RoM9eJlmOcS92i+aclabHcei wsxNl6cEIrAvrtR5WgKqHEiWXoNL6+NY -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:44 2025 by rpki-client