$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: GM3pLnTznx5K7NRvNYMumv4xmsjDO0zF5lUUw2zt0QU= Subject key identifier: DA:A4:E5:DA:52:F4:F6:70:B8:4B:BA:84:52:6B:25:C0:64:54:86:74 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: AB Signing time: Sat 23 Aug 2025 06:19:41 +0000 Manifest this update: Sat 23 Aug 2025 06:19:40 +0000 Manifest next update: Sat 30 Aug 2025 06:19:40 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: 8S3AFXOwovgtwuohn0BGwFDX4/eSXLjWXLE5jE8slBI=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Aug 23 06:19:40 2025 GMT Not After : Aug 30 06:19:40 2025 GMT Subject: CN=68a95d7d-40ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:85:6f:4e:bc:4d:d5:94:25:10:f7:3a:2b: 5f:29:60:ef:b3:7f:77:19:0b:af:f7:ba:a7:40:de: 9e:2e:11:20:d4:0d:a8:1a:85:17:1c:ff:bc:9e:11: b0:31:b8:a6:9b:a1:bd:6e:b9:35:0a:26:a7:19:ec: b5:79:19:5b:89:ae:3d:b4:24:ab:a8:94:d3:d0:1e: d6:75:bf:e2:cc:f4:4a:2a:77:55:8b:9b:13:8d:c4: b5:11:0c:f8:e1:a2:f9:88:f0:1a:49:2f:70:c5:4e: 4e:0b:0d:6b:0b:1b:79:d9:fd:f0:6b:cc:fe:5d:d0: 4e:14:6a:8d:cd:6c:ca:39:67:be:3b:38:af:34:02: 48:18:e1:4f:1d:16:31:83:e7:5f:01:aa:d5:0e:ea: 30:5a:da:5d:c2:fd:d2:4c:cc:d6:7d:36:45:87:e2: a4:9d:33:f6:8f:fe:d5:98:0e:88:a3:b8:7f:2a:5b: b2:42:0d:54:29:93:64:ed:ac:f3:7b:c8:6b:85:2d: 7c:81:2b:c1:a6:b3:6c:e4:cc:74:21:fb:f7:43:ed: ab:e2:06:18:53:69:1b:7a:04:1e:30:9d:4d:16:47: 78:59:7f:7d:e6:68:1b:f3:71:84:7a:58:ba:10:df: 18:6e:11:58:34:d4:ed:00:f8:f7:fb:b6:14:5e:be: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A4:E5:DA:52:F4:F6:70:B8:4B:BA:84:52:6B:25:C0:64:54:86:74 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:16:ca:48:c8:18:a8:dc:a3:3b:43:4a:c8:c5:30:05:f7:22: 89:aa:26:3a:29:5c:56:ff:7e:78:c9:d6:39:5a:c9:70:a0:f1: da:7a:ea:10:bc:49:a5:da:25:a9:f0:15:f2:30:60:16:f9:ed: 98:b7:d3:c6:ce:4b:e1:fc:f1:47:cd:ba:0b:0b:0b:88:27:3c: 5c:38:ba:92:cf:43:d7:aa:c2:29:5b:af:d8:e0:ce:1b:98:92: b1:a4:49:dc:cd:7c:02:85:d3:74:22:0d:69:d9:ed:de:18:c7: 15:2f:c9:81:c7:56:a7:d2:41:50:22:20:2f:c1:28:8a:ca:67: ba:14:60:f2:67:f9:4f:43:37:25:d4:b0:82:df:39:5c:55:49: 94:98:7a:47:bc:23:60:66:39:40:f3:02:01:d1:1e:b0:a9:9b: bd:03:f4:0c:f9:be:25:84:5f:f3:00:81:2b:23:41:a1:f6:7e: d0:98:0a:a3:41:0e:df:02:87:11:7f:43:bd:4e:7d:46:16:f6: 08:64:e7:72:c9:f3:20:fd:bd:01:ed:e6:58:b2:40:77:02:03: ea:05:78:26:21:3a:9b:73:7f:2b:15:25:c7:fe:ad:57:6b:ee: d0:b8:f2:e3:4a:4a:4e:12:8b:80:eb:e0:3a:0c:ec:e5:36:11: 22:d8:44:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjUwODIzMDYxOTQwWhcNMjUwODMwMDYxOTQwWjAYMRYwFAYD VQQDEw02OGE5NWQ3ZC00MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/aFb068TdWUJRD3OitfKWDvs393GQuv97qnQN6eLhEg1A2oGoUXHP+8nhGw Mbimm6G9brk1CianGey1eRlbia49tCSrqJTT0B7Wdb/izPRKKndVi5sTjcS1EQz4 4aL5iPAaSS9wxU5OCw1rCxt52f3wa8z+XdBOFGqNzWzKOWe+OzivNAJIGOFPHRYx g+dfAarVDuowWtpdwv3STMzWfTZFh+KknTP2j/7VmA6Io7h/KluyQg1UKZNk7azz e8hrhS18gSvBprNs5Mx0Ifv3Q+2r4gYYU2kbegQeMJ1NFkd4WX995mgb83GEeli6 EN8YbhFYNNTtAPj3+7YUXr4EOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqk5dpS 9PZwuEu6hFJrJcBkVIZ0MB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqFspIyBio3KM7Q0rIxTAF9yKJqiY6KVxW/354ydY5WslwoPHaeuoQ vEml2iWp8BXyMGAW+e2Yt9PGzkvh/PFHzboLCwuIJzxcOLqSz0PXqsIpW6/Y4M4b mJKxpEnczXwChdN0Ig1p2e3eGMcVL8mBx1an0kFQIiAvwSiKyme6FGDyZ/lPQzcl 1LCC3zlcVUmUmHpHvCNgZjlA8wIB0R6wqZu9A/QM+b4lhF/zAIErI0Gh9n7QmAqj QQ7fAocRf0O9Tn1GFvYIZOdyyfMg/b0B7eZYskB3AgPqBXgmITqbc38rFSXH/q1X a+7QuPLjSkpOEouA6+A6DOzlNhEi2ET+ -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:18 2025 by rpki-client