$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json) Hash identifier: 0mHdJr0vR8b1SyOLDL0jZJTb9E1/EnV634YzEJz0dj8= Subject key identifier: F3:30:C8:B3:EA:69:A7:F7:53:C7:40:21:B7:90:DC:F2:47:4D:CD:02 Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft Manifest number: 065F Signing time: Fri 22 Aug 2025 22:43:50 +0000 Manifest this update: Fri 22 Aug 2025 22:43:50 +0000 Manifest next update: Fri 29 Aug 2025 22:43:50 +0000 Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: Us8Th2L0el62G/EISAEGkiV5sLTwh0gAXT4xhH0d0uQ=) 2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: 4nQWYZbXWSJ3PqE4ZBiXzBzUwOjlbjDx0Oq7v5W8vCQ=) 3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: MzEQJvzOJlRcf4tMcorSrwSuzHCC7BZBlDirsliZQdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Validity Not Before: Aug 22 22:43:50 2025 GMT Not After : Aug 29 22:43:50 2025 GMT Subject: CN=68a8f2a6-394a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:49:ec:d3:59:71:93:19:c5:b0:4e:b4:fd: b6:0f:7e:ac:58:ff:d8:63:e5:35:8f:ea:fa:cb:5d: e9:1c:43:fb:af:18:cf:4c:96:2b:50:2e:e0:b2:df: ec:df:bd:52:f4:4a:83:83:3e:a3:1f:da:da:32:f5: 4f:4e:61:3b:59:d0:f2:f3:b9:98:d7:18:c9:23:79: fb:5f:af:bd:e5:1c:c8:69:a0:f2:7f:28:75:18:ef: 61:11:23:0f:d3:1a:39:df:43:f5:95:e9:ae:39:c5: 86:13:63:6d:ad:0b:a2:81:11:2d:a4:e4:96:8e:13: a3:3d:2f:8b:32:34:02:b1:1a:b9:dc:16:e1:da:8c: b3:72:a1:c2:19:f8:22:fc:12:2c:a5:04:00:df:4c: 6f:84:34:fb:e2:c5:ce:52:13:37:91:25:da:36:9d: 74:a9:5e:99:07:19:63:77:47:c2:36:eb:00:1b:22: 17:ce:ad:f9:e8:20:c4:11:08:05:2e:df:2c:06:3f: 74:e7:f6:36:7c:9b:91:30:a6:e1:1e:8b:04:9b:b6: 8c:f2:5a:7f:8d:ac:e8:09:51:95:23:bb:8e:05:38: e0:5a:e2:ea:cc:82:d5:5e:9a:7b:17:9b:59:88:27: 85:9e:e2:fb:0a:a0:eb:59:3e:79:ef:dd:fb:96:0e: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:30:C8:B3:EA:69:A7:F7:53:C7:40:21:B7:90:DC:F2:47:4D:CD:02 X509v3 Authority Key Identifier: keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:de:87:33:f8:0e:db:12:e2:57:6b:6a:d3:bf:a5:cc:66:47: 3e:6d:5e:9e:bd:1f:b2:8a:26:51:f2:ab:8f:3f:7d:5b:03:00: 19:13:9d:a3:8b:dd:2e:9a:13:de:4c:1b:df:11:aa:b7:d2:98: 58:80:06:f9:a0:12:32:0d:22:9f:3f:d0:8a:84:0c:2c:7c:b1: b5:fc:58:c0:14:44:cc:50:43:5d:21:7d:13:ae:39:53:19:69: 78:ee:49:fc:b1:96:98:dc:89:d3:78:24:38:2a:b7:3c:ff:df: 1a:f5:fe:23:cc:c9:a3:61:15:aa:22:8b:38:db:ea:01:83:a5: 99:6a:eb:60:96:45:77:5e:7e:47:db:0f:1f:fc:6f:57:20:e3: 99:74:61:4d:60:c8:7f:b8:66:4c:d3:fa:0f:c9:58:48:56:db: 2e:6f:d4:bb:b3:4d:a4:8e:ca:49:69:0d:f1:ef:26:c9:93:23: 93:b5:c8:ab:2a:24:03:b3:a4:6a:ad:45:ac:25:6b:e9:ed:a6: a4:7a:b7:be:af:09:cc:c4:9c:95:ac:e8:62:69:68:7c:71:76: 4c:8c:87:0e:bb:ec:a7:6e:87:57:4a:c7:83:cf:b5:c5:1a:cb: 3d:9b:e9:82:fc:89:84:7f:c2:23:99:82:4e:5a:98:df:87:f5: 4c:92:b9:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQxM0JEMzRGRjM4 NzhFNEVFRDAwHhcNMjUwODIyMjI0MzUwWhcNMjUwODI5MjI0MzUwWjAYMRYwFAYD VQQDEw02OGE4ZjJhNi0zOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08JJ7NNZcZMZxbBOtP22D36sWP/YY+U1j+r6y13pHEP7rxjPTJYrUC7gst/s 371S9EqDgz6jH9raMvVPTmE7WdDy87mY1xjJI3n7X6+95RzIaaDyfyh1GO9hESMP 0xo530P1lemuOcWGE2NtrQuigREtpOSWjhOjPS+LMjQCsRq53Bbh2oyzcqHCGfgi /BIspQQA30xvhDT74sXOUhM3kSXaNp10qV6ZBxljd0fCNusAGyIXzq356CDEEQgF Lt8sBj905/Y2fJuRMKbhHosEm7aM8lp/jazoCVGVI7uOBTjgWuLqzILVXpp7F5tZ iCeFnuL7CqDrWT557937lg4zywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMwyLPq aaf3U8dAIbeQ3PJHTc0CMB8GA1UdIwQYMBaAFN8R6SaNBq5Tuvt0E700/zh45O7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0RC9CMkVGM0UzNDk1 RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3JsTzYtM1FUdlRUX09Iams3 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4SHBKbzBHcmxPNi0zUVR2VFRfT0hqazd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0RC9CMkVGM0UzNDk1RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3Js TzYtM1FUdlRUX09Iams3dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs3ocz+A7bEuJXa2rTv6XMZkc+bV6evR+yiiZR8quPP31bAwAZE52j i90umhPeTBvfEaq30phYgAb5oBIyDSKfP9CKhAwsfLG1/FjAFETMUENdIX0TrjlT GWl47kn8sZaY3InTeCQ4Krc8/98a9f4jzMmjYRWqIos42+oBg6WZautglkV3Xn5H 2w8f/G9XIOOZdGFNYMh/uGZM0/oPyVhIVtsub9S7s02kjspJaQ3x7ybJkyOTtcir KiQDs6RqrUWsJWvp7aakere+rwnMxJyVrOhiaWh8cXZMjIcOu+ynbodXSseDz7XF Gss9m+mC/ImEf8IjmYJOWpjfh/VMkrmz -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:16 2025 by rpki-client