$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: AscDn9l8JzBSr7K0Ba18jUITIbITdEIgH3owP6RGKAg= Subject key identifier: 42:6E:CE:CC:58:44:9B:F0:02:16:4C:D8:E6:CB:CF:71:87:9E:D7:34 Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: A3 Signing time: Sat 23 Aug 2025 06:28:21 +0000 Manifest this update: Sat 23 Aug 2025 06:28:20 +0000 Manifest next update: Sat 30 Aug 2025 06:28:20 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: neyjtpxxsFiFPuaK6gcC/EhRyXAcytjUmdRZDgt1/+M=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: jpoA3nOwURms9S72GBWIhr5w5HiTb8jNg/HLvSF6ab8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Aug 23 06:28:20 2025 GMT Not After : Aug 30 06:28:20 2025 GMT Subject: CN=68a95f84-5f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:37:21:23:b8:b2:3c:b8:ae:21:b3:f6:82: 9f:db:33:b7:29:bf:ac:69:2c:27:79:d0:b6:3b:5c: 74:3d:24:e0:15:d4:49:ce:03:0d:5c:df:95:5a:7e: 6e:22:bb:9d:1c:6a:db:31:3f:b2:6e:5d:51:b7:a4: 35:d2:17:26:f7:87:4b:3a:e7:52:37:c3:e5:40:1d: e4:48:e2:3f:f5:d0:27:48:33:6c:aa:4c:d5:b1:67: 88:09:a3:7e:3a:0d:e9:2d:ca:a1:34:e3:bb:55:b0: b9:4f:f0:78:99:b7:ba:5d:e5:5f:99:07:00:b7:ca: c2:0a:f1:22:6b:ed:b0:39:f0:74:df:76:53:7e:ac: db:5b:31:06:2f:ed:9a:dc:46:25:c9:60:f5:ed:6d: f9:3e:5b:80:21:95:f1:4b:04:f7:bd:df:d6:78:2e: b2:56:2d:7f:0a:08:a0:a5:76:d7:78:1d:4a:43:26: 36:cd:1c:53:15:64:d5:b2:74:40:66:14:c6:99:3b: 64:80:5c:b3:59:99:7d:f4:87:53:29:3b:57:48:8a: 59:5f:32:fe:3b:6f:f3:2e:91:1d:4c:25:f2:06:f3: c4:ff:f5:6e:ac:5d:56:f9:4b:e4:1b:35:52:e8:ce: 5e:76:8b:c9:0f:b1:d7:14:e4:ca:e9:8d:d3:6a:c1: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:CE:CC:58:44:9B:F0:02:16:4C:D8:E6:CB:CF:71:87:9E:D7:34 X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f8:9b:db:cc:5b:af:ae:59:58:f7:bd:8f:2f:b2:d5:2e:b3: e9:6e:b7:04:3e:3f:6d:52:15:f9:d5:a1:67:95:4c:f9:31:4c: 03:09:c5:16:85:6e:a4:c1:4f:12:b7:42:a9:9b:ce:ec:9d:67: fd:9b:85:92:31:cf:c4:f3:58:41:b7:77:56:f8:9b:2c:ec:0f: 26:09:93:ac:65:d9:07:43:60:ae:54:f0:e4:27:40:92:7f:54: b8:ab:3d:41:cc:17:23:cf:6d:f6:ee:1a:86:ca:7c:31:c4:b2: e0:cc:0e:9f:00:ad:5b:cd:79:8e:8c:63:a2:81:b1:f2:5e:64: 05:bb:54:e0:28:0e:ec:19:e2:04:7a:45:3c:97:e3:75:18:ea: 74:c1:7d:c9:85:9b:f7:a6:28:f8:c7:5f:c9:10:40:8f:fe:62: 86:b2:6a:e8:a6:67:e7:d7:dc:3e:a2:56:c6:de:c7:69:77:3c: 48:54:25:f1:a7:2c:da:0c:23:d2:a7:41:24:74:da:61:23:72: bd:d4:66:dd:83:d6:4f:9a:26:15:9f:f9:f5:42:33:61:08:45: af:e0:20:3d:78:0a:a8:7f:30:49:d4:5d:e8:8b:80:1a:d7:66: 9b:ea:ee:fc:81:59:cd:9f:83:eb:ed:ed:8d:dd:ee:0f:d3:2e: 27:4e:c3:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4 RTkyRDI1MjQwHhcNMjUwODIzMDYyODIwWhcNMjUwODMwMDYyODIwWjAYMRYwFAYD VQQDEw02OGE5NWY4NC01ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPk3ISO4sjy4riGz9oKf2zO3Kb+saSwnedC2O1x0PSTgFdRJzgMNXN+VWn5u IrudHGrbMT+ybl1Rt6Q10hcm94dLOudSN8PlQB3kSOI/9dAnSDNsqkzVsWeICaN+ Og3pLcqhNOO7VbC5T/B4mbe6XeVfmQcAt8rCCvEia+2wOfB033ZTfqzbWzEGL+2a 3EYlyWD17W35PluAIZXxSwT3vd/WeC6yVi1/CgigpXbXeB1KQyY2zRxTFWTVsnRA ZhTGmTtkgFyzWZl99IdTKTtXSIpZXzL+O2/zLpEdTCXyBvPE//VurF1W+UvkGzVS 6M5edovJD7HXFOTK6Y3TasGunwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJuzsxY RJvwAhZM2ObLz3GHntc0MB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5 RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr TmxTOUlKTm9JRmVPa3RKU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ+JvbzFuvrllY972PL7LVLrPpbrcEPj9tUhX51aFnlUz5MUwDCcUW hW6kwU8St0Kpm87snWf9m4WSMc/E81hBt3dW+Jss7A8mCZOsZdkHQ2CuVPDkJ0CS f1S4qz1BzBcjz2327hqGynwxxLLgzA6fAK1bzXmOjGOigbHyXmQFu1TgKA7sGeIE ekU8l+N1GOp0wX3JhZv3pij4x1/JEECP/mKGsmropmfn19w+olbG3sdpdzxIVCXx pyzaDCPSp0EkdNphI3K91Gbdg9ZPmiYVn/n1QjNhCEWv4CA9eAqofzBJ1F3oi4Aa 12ab6u78gVnNn4Pr7e2N3e4P0y4nTsNV -----END CERTIFICATE-----Generated at Sat Aug 23 14:29:32 2025 by rpki-client