$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft File: 3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json) Hash identifier: dSvBGBeRnF7VqAG/z7c1BXagp/USfaFHzGc9B+CMQXM= Subject key identifier: CE:49:CC:CB:B5:F6:08:09:34:8E:D6:5E:FE:8B:4F:47:AE:F9:0C:78 Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E Certificate issuer: /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft Manifest number: 0A50 Signing time: Fri 22 Aug 2025 19:50:24 +0000 Manifest this update: Fri 22 Aug 2025 19:50:24 +0000 Manifest next update: Fri 29 Aug 2025 19:50:24 +0000 Files and hashes: 1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: L43jQvLgBpxDKWTX4vw/fEHlrtDvnhmMY95iEh3B+Js=) 2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: vFM8zP6/yZnn9lA/MIHAlH1VsJ7/4aQRYj46a02OHPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Validity Not Before: Aug 22 19:50:24 2025 GMT Not After : Aug 29 19:50:24 2025 GMT Subject: CN=68a8ca00-7630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:bf:1a:0f:4f:f9:7f:3b:2d:3d:92:a7:64: d5:bf:c0:ef:10:2d:20:74:dc:90:19:15:1c:52:f3: 74:8f:62:9f:46:56:4d:1c:ba:d8:c8:77:23:0a:5e: 7e:bc:70:a6:39:36:c4:92:92:23:89:ac:08:fd:15: dd:63:ae:9b:1b:79:48:99:de:b9:c5:8d:1d:4c:cf: a7:54:c7:0a:b4:24:e7:a7:8d:0c:a4:cf:e9:79:e8: a3:61:58:dc:8d:e8:2e:2b:fa:f9:e7:8c:48:72:87: 7f:2d:f2:18:ea:a7:50:ae:91:a6:fe:99:14:a4:44: 1f:db:2b:bb:f7:5d:84:93:ef:13:9c:95:06:36:38: 1a:5e:46:4e:37:5c:0c:fc:d2:cf:ca:38:82:11:a7: 70:6c:61:b2:97:fc:b2:87:cd:3a:38:01:db:40:fa: 6b:2a:06:c2:f0:7c:4b:49:7e:f1:e9:05:8b:41:6a: 19:4e:6e:39:fc:77:5b:0f:dd:64:02:ac:ab:82:cd: 64:15:17:26:33:ae:10:88:c7:30:7c:99:67:38:a9: f8:fc:cf:ac:ef:d6:7f:e8:a7:85:9c:eb:5b:c4:54: ea:c3:67:7c:e4:a2:49:da:76:82:e6:e1:6b:14:3a: 30:5e:ad:6a:b0:89:82:b6:fb:11:8f:b5:ea:a7:bc: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:49:CC:CB:B5:F6:08:09:34:8E:D6:5E:FE:8B:4F:47:AE:F9:0C:78 X509v3 Authority Key Identifier: keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4a:fb:c2:ee:d3:f3:59:f2:97:f3:3f:01:c9:46:60:73:f5: e7:ff:2a:5b:0e:56:92:4f:ab:7d:d8:a3:1a:50:f6:59:dd:2d: 90:85:67:7e:4f:a2:b3:51:b4:5c:51:d6:c4:dd:24:e5:ad:87: aa:d7:e4:cc:5f:d6:6d:30:24:83:90:c1:eb:86:db:1c:7c:5e: 30:09:7e:da:34:0f:48:a9:86:2d:b4:3b:80:db:4b:1e:63:de: 8a:ae:32:07:79:bb:15:8b:8f:f5:74:55:c3:d2:06:fd:29:3e: c4:82:4b:7a:ae:af:7f:f5:ce:8f:91:bf:72:04:e2:f2:84:89: b0:bb:87:40:05:e9:4b:ec:f2:40:e9:7f:29:8b:a9:47:82:ac: 65:ab:31:5c:69:1c:6e:c0:4d:dc:79:84:41:cc:66:27:3c:4f: dd:35:cf:b9:9b:6a:e3:8a:b5:11:32:6b:10:56:8f:9e:f5:7a: 5f:38:25:56:65:7b:39:f4:a1:f8:43:bf:85:04:68:9e:6c:a5: bc:ab:9f:69:5d:5a:ca:10:44:56:f8:a6:b6:c3:40:ed:d6:67: 6a:5a:9e:9e:cc:b4:86:f4:a2:b8:47:47:41:4b:71:7f:61:87: 09:28:db:2e:61:21:1a:72:f3:1e:8d:7f:9e:87:32:ff:d0:1c: 0d:be:39:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4MjkxMTAvBgNVBAUTKERDQ0Q1NTM1NTJCQUY4QTY1QzFBMDY2QjMzNDdGNzkz MjQ0RjU3NUUwHhcNMjUwODIyMTk1MDI0WhcNMjUwODI5MTk1MDI0WjAYMRYwFAYD VQQDEw02OGE4Y2EwMC03NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RG/Gg9P+X87LT2Sp2TVv8DvEC0gdNyQGRUcUvN0j2KfRlZNHLrYyHcjCl5+ vHCmOTbEkpIjiawI/RXdY66bG3lImd65xY0dTM+nVMcKtCTnp40MpM/peeijYVjc jeguK/r554xIcod/LfIY6qdQrpGm/pkUpEQf2yu7912Ek+8TnJUGNjgaXkZON1wM /NLPyjiCEadwbGGyl/yyh806OAHbQPprKgbC8HxLSX7x6QWLQWoZTm45/HdbD91k Aqyrgs1kFRcmM64QiMcwfJlnOKn4/M+s79Z/6KeFnOtbxFTqw2d85KJJ2naC5uFr FDowXq1qsImCtvsRj7Xqp7yFiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5JzMu1 9ggJNI7WXv6LT0eu+Qx4MB8GA1UdIwQYMBaAFNzNVTVSuvimXBoGazNH95MkT1de MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDgyOS85OUQ3QzZBNDZG RUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1LWmNHZ1pyTTBmM2t5UlBW MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNMVZOVks2LUtaY0dnWnJNMGYza3lSUFYxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDgyOS85OUQ3QzZBNDZGRUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1L WmNHZ1pyTTBmM2t5UlBWMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnSvvC7tPzWfKX8z8ByUZgc/Xn/ypbDlaST6t92KMaUPZZ3S2QhWd+ T6KzUbRcUdbE3STlrYeq1+TMX9ZtMCSDkMHrhtscfF4wCX7aNA9IqYYttDuA20se Y96KrjIHebsVi4/1dFXD0gb9KT7Egkt6rq9/9c6Pkb9yBOLyhImwu4dABelL7PJA 6X8pi6lHgqxlqzFcaRxuwE3ceYRBzGYnPE/dNc+5m2rjirURMmsQVo+e9XpfOCVW ZXs59KH4Q7+FBGiebKW8q59pXVrKEERW+Ka2w0Dt1mdqWp6ezLSG9KK4R0dBS3F/ YYcJKNsuYSEacvMejX+ehzL/0BwNvjkA -----END CERTIFICATE-----Generated at Sun Aug 24 01:28:12 2025 by rpki-client