$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: eO5APE9bY8jizP50+H4AqPKziqlAvUrE+IyChMEhLng= Subject key identifier: F2:0F:69:27:AA:73:B0:DB:83:F1:91:B4:3D:0D:EA:07:B6:D1:6B:44 Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 4014 Signing time: Fri 22 Aug 2025 14:50:23 +0000 Manifest this update: Fri 22 Aug 2025 14:50:22 +0000 Manifest next update: Fri 29 Aug 2025 14:50:22 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: cDBcKeRzLQc4+Sw6DaM/PNDMSGJtXNrg66HDSouUZf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: Aug 22 14:50:22 2025 GMT Not After : Aug 29 14:50:22 2025 GMT Subject: CN=68a883ae-81bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:fa:29:3c:e6:d0:cd:fa:cf:1f:50:b9:00: b3:f3:1b:ed:3a:dd:c8:af:78:2c:15:0d:ac:a2:cb: 62:6c:87:d1:cd:4a:76:96:f0:89:f4:aa:76:25:78: 76:e8:92:86:80:6b:9f:35:f1:20:31:5c:bd:af:92: 74:f7:78:dd:52:60:e2:3d:c1:28:bf:74:36:56:f6: 37:84:bf:72:95:6d:83:e0:e3:66:f8:c5:59:05:32: 43:90:ff:27:6b:e6:7e:47:ed:fd:b0:76:80:a1:0e: 32:b0:cb:75:36:db:9c:28:f6:15:52:06:13:ab:43: 3e:09:c3:dd:3e:31:d7:2b:16:5b:42:a7:c5:09:25: bf:2e:93:44:30:92:72:3b:3e:b8:2c:ee:06:b8:9f: 7e:03:0b:0a:b2:1f:5e:81:c4:86:08:db:b1:c0:b0: c0:0c:48:fb:bd:ad:86:16:01:cf:97:cb:1d:0a:3e: fc:92:2d:1a:42:1a:74:c2:7a:38:f3:5b:37:08:82: 79:a2:5b:24:b5:18:10:9f:e0:cc:8b:7c:84:c2:19: d3:16:e0:aa:5f:14:28:2b:0e:cc:9b:79:93:e9:53: b5:f1:bc:ea:71:da:8b:cb:55:df:2b:5b:93:69:f1: 4d:4b:f3:a4:dc:e6:b1:ce:29:d9:2d:03:9a:fe:93: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0F:69:27:AA:73:B0:DB:83:F1:91:B4:3D:0D:EA:07:B6:D1:6B:44 X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:9f:a2:22:ab:18:fd:85:d6:78:eb:6e:2c:1d:f4:5e:27:81: cb:5b:64:ae:5c:95:96:d4:12:bb:fb:3a:08:d9:5a:30:34:72: 19:4a:8d:61:8c:cb:ed:19:74:aa:41:0b:40:75:74:44:48:87: 6e:b1:c9:84:7d:22:1a:84:ac:f0:00:2a:c1:82:c4:99:ef:8d: 05:36:33:3b:6a:7d:c3:0b:e0:d2:c4:d3:bd:dd:0e:3f:d1:9f: ce:f1:6f:4d:91:e6:af:71:07:97:3e:e4:c2:65:08:46:20:0d: ea:71:d1:f3:bb:eb:b0:bd:19:0c:22:96:90:b0:92:af:3f:7c: 20:9f:54:10:7b:47:67:9d:b6:3f:22:49:c5:38:4f:9c:aa:25: a1:0f:28:58:bb:c5:15:45:3c:25:32:99:9b:4c:8e:da:64:18: 09:91:99:c4:b3:3e:82:f3:12:60:d7:41:bc:46:a9:af:ea:86: 86:a9:39:71:8a:f4:a4:7e:84:b4:2e:3f:96:eb:33:7c:dc:b7: 0a:d6:fe:d5:5d:f5:8d:32:52:11:b4:a2:05:9c:e0:11:2d:24: 3a:8f:f9:2d:02:a7:6b:4c:39:10:30:2a:49:7c:8e:09:ff:e2: 0b:9c:25:96:24:bf:a8:e9:81:b0:fa:0b:d5:c7:dc:68:a3:20: 1d:42:7a:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjUwODIyMTQ1MDIyWhcNMjUwODI5MTQ1MDIyWjAYMRYwFAYD VQQDEw02OGE4ODNhZS04MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49v6KTzm0M36zx9QuQCz8xvtOt3Ir3gsFQ2sostibIfRzUp2lvCJ9Kp2JXh2 6JKGgGufNfEgMVy9r5J093jdUmDiPcEov3Q2VvY3hL9ylW2D4ONm+MVZBTJDkP8n a+Z+R+39sHaAoQ4ysMt1NtucKPYVUgYTq0M+CcPdPjHXKxZbQqfFCSW/LpNEMJJy Oz64LO4GuJ9+AwsKsh9egcSGCNuxwLDADEj7va2GFgHPl8sdCj78ki0aQhp0wno4 81s3CIJ5olsktRgQn+DMi3yEwhnTFuCqXxQoKw7Mm3mT6VO18bzqcdqLy1XfK1uT afFNS/Ok3OaxzinZLQOa/pNBDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIPaSeq c7Dbg/GRtD0N6ge20WtEMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0n6Iiqxj9hdZ4624sHfReJ4HLW2SuXJWW1BK7+zoI2VowNHIZSo1h jMvtGXSqQQtAdXRESIduscmEfSIahKzwACrBgsSZ740FNjM7an3DC+DSxNO93Q4/ 0Z/O8W9NkeavcQeXPuTCZQhGIA3qcdHzu+uwvRkMIpaQsJKvP3wgn1QQe0dnnbY/ IknFOE+cqiWhDyhYu8UVRTwlMpmbTI7aZBgJkZnEsz6C8xJg10G8Rqmv6oaGqTlx ivSkfoS0Lj+W6zN83LcK1v7VXfWNMlIRtKIFnOARLSQ6j/ktAqdrTDkQMCpJfI4J /+ILnCWWJL+o6YGw+gvVx9xooyAdQnq/ -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:54 2025 by rpki-client