$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: uIc5h1BVH3uTpGBKxg99Z8G+2C0H5m+OyLVej43Zq4w= Subject key identifier: 96:11:ED:58:0F:5D:C7:4C:E4:93:74:00:7B:F1:20:5B:F2:7E:59:10 Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 016A Signing time: Sat 23 Aug 2025 03:58:38 +0000 Manifest this update: Sat 23 Aug 2025 03:58:37 +0000 Manifest next update: Sat 30 Aug 2025 03:58:37 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: B7Zj6dzJePQkXDCrpea3rbYQzXPf4K0lhGaVpIYUKGo=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: Aug 23 03:58:37 2025 GMT Not After : Aug 30 03:58:37 2025 GMT Subject: CN=68a93c6e-18cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:ec:11:63:e1:1b:3d:90:cd:54:11:39:e6: 76:e3:fc:2c:68:0e:8c:21:45:ea:47:5c:7f:83:87: f6:d1:03:e7:61:45:1d:16:ad:f3:cf:bf:88:15:0a: 5f:52:d2:46:72:70:01:4d:dd:cc:b5:bd:cb:9e:03: 80:de:61:91:76:d3:8a:89:05:24:3d:16:11:04:b9: f8:d1:98:79:f4:64:10:8e:12:e2:b3:44:2a:2b:ef: b7:4e:5c:3a:20:42:d3:cf:9e:1e:3d:30:95:63:b0: 9c:e7:40:c4:c7:06:30:e4:a7:45:cf:ad:32:16:45: 8d:79:1d:14:cb:a9:ce:d5:af:44:11:9e:0f:34:f1: 00:3d:e5:99:05:e0:06:d9:1a:00:87:1d:9c:8e:3f: 89:f5:c4:01:4f:ed:fc:5e:5e:db:09:75:f1:0d:69: 30:e3:fb:70:73:ea:73:b2:20:7c:19:4a:0b:ec:a9: da:a0:15:98:a0:59:ec:90:f1:b9:7c:83:be:e5:e8: 42:d5:cb:b9:6b:c9:4c:45:0e:a1:32:f0:1d:07:a3: 2f:5d:14:52:e2:10:c1:7f:8c:0a:55:dd:3d:de:59: 1e:9c:11:5b:f7:b8:7f:6e:db:43:66:34:13:a9:0f: e3:f8:76:31:4e:0c:cb:f4:03:9c:43:9f:39:62:f1: 39:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:ED:58:0F:5D:C7:4C:E4:93:74:00:7B:F1:20:5B:F2:7E:59:10 X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c5:e0:28:51:04:ed:ff:a6:eb:17:f7:c7:59:c1:fe:dc:ef: a1:d7:36:48:0c:a4:98:1c:ba:37:15:ec:92:f1:a0:1c:cc:a5: 2d:f2:8d:ed:62:78:f0:c6:c8:05:47:a1:75:d3:91:7f:ed:2f: cc:f4:76:2f:93:31:94:17:c3:36:b4:d7:64:fd:41:84:f6:0c: 87:39:9b:9b:89:35:61:0a:07:70:91:0a:1e:2e:16:47:27:8e: 4f:44:e2:ae:03:ca:93:e0:9b:0d:b7:10:a4:52:46:10:e0:e0: b5:87:8b:a5:76:32:41:e7:1b:3e:90:b8:31:4c:57:ba:a0:26: 07:5d:c9:9f:ed:cd:4f:56:ec:7a:10:f9:e1:d0:71:e0:85:c6: 14:0c:a9:a7:b7:0f:8a:fe:32:30:5d:2a:3a:c1:7f:3e:34:f5: 5e:04:44:9b:32:df:36:d1:5e:83:cd:ef:01:7f:c3:c0:13:ea: 98:13:e2:93:08:93:d8:00:ab:0a:8c:b4:1b:aa:b8:b0:b7:c3: 83:62:d3:73:08:69:2f:e6:df:7e:b2:57:5d:d0:9d:40:19:63: d7:99:b8:ac:59:fc:f7:ca:94:27:8d:b4:98:e3:53:a9:cf:0a: 23:b1:c4:cb:2c:c3:ed:3a:5c:20:62:63:1e:e9:6a:04:9e:06: 19:f7:db:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUwODIzMDM1ODM3WhcNMjUwODMwMDM1ODM3WjAYMRYwFAYD VQQDEw02OGE5M2M2ZS0xOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4DsEWPhGz2QzVQROeZ24/wsaA6MIUXqR1x/g4f20QPnYUUdFq3zz7+IFQpf UtJGcnABTd3Mtb3LngOA3mGRdtOKiQUkPRYRBLn40Zh59GQQjhLis0QqK++3Tlw6 IELTz54ePTCVY7Cc50DExwYw5KdFz60yFkWNeR0Uy6nO1a9EEZ4PNPEAPeWZBeAG 2RoAhx2cjj+J9cQBT+38Xl7bCXXxDWkw4/twc+pzsiB8GUoL7KnaoBWYoFnskPG5 fIO+5ehC1cu5a8lMRQ6hMvAdB6MvXRRS4hDBf4wKVd093lkenBFb97h/bttDZjQT qQ/j+HYxTgzL9AOcQ585YvE5awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYR7VgP XcdM5JN0AHvxIFvyflkQMB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlxeAoUQTt/6brF/fHWcH+3O+h1zZIDKSYHLo3FeyS8aAczKUt8o3t YnjwxsgFR6F105F/7S/M9HYvkzGUF8M2tNdk/UGE9gyHOZubiTVhCgdwkQoeLhZH J45PROKuA8qT4JsNtxCkUkYQ4OC1h4uldjJB5xs+kLgxTFe6oCYHXcmf7c1PVux6 EPnh0HHghcYUDKmntw+K/jIwXSo6wX8+NPVeBESbMt820V6Dze8Bf8PAE+qYE+KT CJPYAKsKjLQbqriwt8ODYtNzCGkv5t9+sldd0J1AGWPXmbisWfz3ypQnjbSY41Op zwojscTLLMPtOlwgYmMe6WoEngYZ99th -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:19 2025 by rpki-client