$ rpki-client -vvf rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft File: B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft (raw, json) Hash identifier: y5dS97vKWdptjgZ6IWyygF1WGVwpQg6uhS7hTPeVRkU= Subject key identifier: 38:E7:16:86:8F:D6:5A:25:96:1B:39:D6:C3:9F:36:34:04:8F:4D:33 Authority key identifier: 07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3 Certificate issuer: /CN=A91C13E1/serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft Manifest number: F8 Signing time: Sat 23 Aug 2025 05:21:43 +0000 Manifest this update: Sat 23 Aug 2025 05:21:42 +0000 Manifest next update: Sat 30 Aug 2025 05:21:42 +0000 Files and hashes: 1: B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl (hash: wkiqZN/eSmnYpp0JSxGIGh1GA7gsg66tjRGnsngWK3c=) 2: 5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa (hash: zw1ksNYvuYvz/L+PTYal5s6UlMhRxYj97KDb6gSbQJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C13E1, serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3 Validity Not Before: Aug 23 05:21:42 2025 GMT Not After : Aug 30 05:21:42 2025 GMT Subject: CN=68a94fe6-9905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:f4:0d:ac:89:15:43:1a:f9:5b:8c:aa:b3: 3b:cd:73:ef:2e:12:f6:c0:ce:61:23:d0:a7:39:23: 65:ed:f0:ec:77:a8:b0:e4:4d:5e:e1:de:c2:e5:3d: ca:90:8a:b7:80:90:a0:a7:f2:09:4b:bb:59:32:d6: 04:e1:a3:90:a8:3f:b0:fe:d3:75:8d:d6:16:fd:67: 35:af:86:f2:fa:1a:37:9e:d3:b0:43:fc:5e:8a:d0: da:4c:6c:39:15:04:4b:6c:e3:58:2e:35:76:cd:f3: d8:96:a7:55:aa:52:7c:c6:9e:a0:d5:44:77:20:53: 97:16:14:42:09:3e:33:f8:d6:46:77:6d:32:10:ff: 53:b5:10:6a:4d:ac:ba:a7:fd:2b:99:18:0b:8c:3d: 4a:45:2a:4a:d8:ff:d0:c4:13:28:4a:e9:98:d2:fc: 4c:82:dd:06:1c:57:19:d7:e3:f9:88:27:ba:15:6e: 2d:98:21:3f:0d:5d:96:d8:5f:91:f9:5c:ab:99:44: bb:f9:70:39:4d:ca:db:c7:6c:04:00:0b:b6:9d:17: 6f:a3:87:5c:e8:d0:82:cf:c8:e0:b3:3a:d0:a0:10: b9:9a:fa:1b:e4:03:fe:7e:cf:f6:ce:c1:70:f0:4c: 94:01:3e:97:af:77:e1:83:38:bf:96:b1:82:75:d4: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:16:86:8F:D6:5A:25:96:1B:39:D6:C3:9F:36:34:04:8F:4D:33 X509v3 Authority Key Identifier: keyid:07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c2:b7:85:6d:eb:d6:52:4d:1c:63:5e:5f:fb:ee:48:05:e8: f1:33:ef:61:f6:eb:86:92:91:b6:13:b2:46:1d:66:f3:d1:f6: a1:a4:fe:c1:cf:70:7f:03:cc:73:dc:3b:bb:fc:51:5b:00:01: ea:d5:83:9d:bf:eb:fc:5d:a2:b0:20:96:8a:d6:a2:5b:d9:c1: d8:f5:01:70:79:bc:5f:e3:9f:7c:be:1c:c3:54:5a:0a:0e:91: 61:4a:6a:a6:8b:2e:13:0c:0c:66:4c:f7:ea:92:57:71:2b:77: c8:dc:e7:a3:76:c4:22:23:a2:d7:ae:a5:fd:8d:be:82:5f:ec: aa:d4:70:91:8e:59:95:37:e4:ad:95:72:5c:ad:69:d8:83:b2: 77:87:79:59:e0:76:c3:b4:a5:ec:0b:0f:06:62:19:aa:d0:42: 2a:f4:18:cc:29:d2:83:b5:b1:20:44:12:2f:ae:4c:3b:96:d1: 9b:26:b5:00:1e:c9:aa:a7:c5:0b:e5:bd:d0:e6:9f:53:2d:72: cd:07:9f:14:97:0a:a4:50:a1:78:b1:43:75:55:88:80:24:d9: 70:e9:a5:28:24:dd:16:67:4b:8c:ca:67:a3:fa:a3:2a:bb:74: 9a:44:f8:95:c7:6d:b7:30:0a:39:a8:05:c6:63:e3:9f:e6:df: cc:f2:e2:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzRTExMTAvBgNVBAUTKDA3N0JFQTlCRkUzMDA2NDYxNjVDMzQzNkM3RDRDQzM4 MzQ2QzZCQTMwHhcNMjUwODIzMDUyMTQyWhcNMjUwODMwMDUyMTQyWjAYMRYwFAYD VQQDEw02OGE5NGZlNi05OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcL0DayJFUMa+VuMqrM7zXPvLhL2wM5hI9CnOSNl7fDsd6iw5E1e4d7C5T3K kIq3gJCgp/IJS7tZMtYE4aOQqD+w/tN1jdYW/Wc1r4by+ho3ntOwQ/xeitDaTGw5 FQRLbONYLjV2zfPYlqdVqlJ8xp6g1UR3IFOXFhRCCT4z+NZGd20yEP9TtRBqTay6 p/0rmRgLjD1KRSpK2P/QxBMoSumY0vxMgt0GHFcZ1+P5iCe6FW4tmCE/DV2W2F+R +VyrmUS7+XA5Tcrbx2wEAAu2nRdvo4dc6NCCz8jgszrQoBC5mvob5AP+fs/2zsFw 8EyUAT6Xr3fhgzi/lrGCddRn+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjnFoaP 1lollhs51sOfNjQEj00zMB8GA1UdIwQYMBaAFAd76pv+MAZGFlw0NsfUzDg0bGuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTNFMS84MkZERjkxQTA1 RkMxMUVGOEE1RkMzNjhDNEY5QUUwMi9CM3ZxbV80d0JrWVdYRFEyeDlUTU9EUnNh Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IzdnFtXzR3QmtZV1hEUTJ4OVRNT0RSc2E2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTNFMS84MkZERjkxQTA1RkMxMUVGOEE1RkMzNjhDNEY5QUUwMi9CM3ZxbV80d0Jr WVdYRFEyeDlUTU9EUnNhNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMwreFbevWUk0cY15f++5IBejxM+9h9uuGkpG2E7JGHWbz0fahpP7B z3B/A8xz3Du7/FFbAAHq1YOdv+v8XaKwIJaK1qJb2cHY9QFwebxf4598vhzDVFoK DpFhSmqmiy4TDAxmTPfqkldxK3fI3OejdsQiI6LXrqX9jb6CX+yq1HCRjlmVN+St lXJcrWnYg7J3h3lZ4HbDtKXsCw8GYhmq0EIq9BjMKdKDtbEgRBIvrkw7ltGbJrUA Hsmqp8UL5b3Q5p9TLXLNB58UlwqkUKF4sUN1VYiAJNlw6aUoJN0WZ0uMymej+qMq u3SaRPiVx223MAo5qAXGY+Of5t/M8uLr -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:16 2025 by rpki-client