$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: /w3t6ezR6lYNa5oHBs1LNHybIdQOAXKQ11se/Us0s1g= Subject key identifier: 2D:A9:75:AF:FF:82:43:1A:7E:54:62:28:5C:72:8D:28:3A:97:8F:02 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 078B Signing time: Wed 02 Jul 2025 21:40:43 +0000 Manifest this update: Wed 02 Jul 2025 21:40:43 +0000 Manifest next update: Wed 09 Jul 2025 21:40:43 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: YuIAmwslr4nqhymE9+e+J1scW982UvR1+UDGJYXv6E8=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: SiUJ7SYlbA21+yPfD2uZbgHjH4MPfQViyjJFRbUxFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Jul 2 21:40:43 2025 GMT Not After : Jul 9 21:40:43 2025 GMT Subject: CN=6865a75b-1129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:27:0f:da:02:29:4b:a9:63:bc:a0:c2:df: ca:10:99:4a:e2:51:9c:92:29:91:fa:8b:41:22:46: 79:95:95:90:30:1a:c8:26:f6:9f:f5:cd:27:1a:01: bd:4b:3d:3a:df:f4:67:7a:23:3a:c2:21:5e:91:50: 8e:b0:d0:3b:c7:e8:9f:9c:97:cd:08:82:30:e9:e8: 68:22:60:d5:d6:6a:98:1e:e4:cf:4d:17:09:e7:f6: c7:05:3d:6f:a6:20:aa:93:22:11:13:cc:01:03:29: 38:f8:5e:d3:8a:02:c5:5c:7b:00:d8:3c:eb:f5:1f: 4f:dd:1f:d4:61:5a:27:ff:4c:64:3c:b8:b6:35:99: f0:19:b2:46:2d:d5:5a:d6:ea:b0:7a:b9:44:ce:8e: 24:e2:67:5d:71:6f:4b:d6:a3:52:eb:76:a9:60:dc: 0e:ba:42:bd:0f:4f:c1:d9:93:93:eb:1f:fd:7a:f6: b0:d7:e2:9d:49:c8:a1:14:e3:d5:2c:c9:d2:4e:74: 9c:d3:ea:76:ad:a6:8b:62:f8:70:b1:c5:06:f4:c8: c1:48:63:88:b6:fe:d3:b0:23:e0:5d:f6:62:a7:b7: b7:87:21:61:61:ac:e1:86:b0:e1:73:70:99:8a:47: 36:bf:32:07:cb:d8:54:09:ec:68:99:0c:f0:37:2e: 63:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:75:AF:FF:82:43:1A:7E:54:62:28:5C:72:8D:28:3A:97:8F:02 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:83:f8:7a:7a:31:20:7e:7b:cf:66:87:c3:0b:2a:1f:b0:1f: cb:8e:5d:11:71:40:56:c0:94:0c:f7:7e:fe:fd:22:f3:d2:68: f2:d1:92:b4:74:c6:1d:1f:ea:72:50:7f:56:db:3b:8a:e0:98: 65:7e:69:3e:96:c1:98:ac:47:93:36:a2:e0:ca:a0:19:25:33: 10:c1:57:4b:c0:0a:90:02:c5:b0:9a:3d:06:27:f3:4a:ec:72: a3:80:b4:2e:3e:68:e1:cb:1a:0d:5c:89:57:e1:a9:e3:43:5b: 2f:9e:a6:35:89:5e:80:e1:fb:10:70:3c:02:b7:07:f8:6c:73: 8c:af:85:ba:6b:3a:28:dc:e1:c8:27:9d:c8:75:9e:f6:dc:87: b8:64:f0:52:80:6f:0d:37:51:9b:f0:85:ab:d2:b3:c1:da:b7: 0c:f7:f5:59:83:d0:bb:d5:b3:95:e4:b1:ab:f7:18:e0:83:35: 8f:ff:69:7f:4e:4e:66:56:1a:a9:a9:71:64:b1:35:59:ac:18: 1b:a6:bf:d9:6e:06:ff:06:88:df:0b:3f:13:7e:1a:26:4f:0a: 59:2b:16:9a:68:60:4f:d4:ea:a6:1d:bd:db:8c:f0:07:03:c0: 52:ef:92:d1:68:cc:61:06:08:c5:7a:f5:88:25:16:36:93:80: c6:dc:0c:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjUwNzAyMjE0MDQzWhcNMjUwNzA5MjE0MDQzWjAYMRYwFAYD VQQDEw02ODY1YTc1Yi0xMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCQnD9oCKUupY7ygwt/KEJlK4lGckimR+otBIkZ5lZWQMBrIJvaf9c0nGgG9 Sz063/RneiM6wiFekVCOsNA7x+ifnJfNCIIw6ehoImDV1mqYHuTPTRcJ5/bHBT1v piCqkyIRE8wBAyk4+F7TigLFXHsA2Dzr9R9P3R/UYVon/0xkPLi2NZnwGbJGLdVa 1uqwerlEzo4k4mddcW9L1qNS63apYNwOukK9D0/B2ZOT6x/9evaw1+KdScihFOPV LMnSTnSc0+p2raaLYvhwscUG9MjBSGOItv7TsCPgXfZip7e3hyFhYazhhrDhc3CZ ikc2vzIHy9hUCexomQzwNy5jZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2pda// gkMaflRiKFxyjSg6l48CMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5g/h6ejEgfnvPZofDCyofsB/Ljl0RcUBWwJQM937+/SLz0mjy0ZK0 dMYdH+pyUH9W2zuK4Jhlfmk+lsGYrEeTNqLgyqAZJTMQwVdLwAqQAsWwmj0GJ/NK 7HKjgLQuPmjhyxoNXIlX4anjQ1svnqY1iV6A4fsQcDwCtwf4bHOMr4W6azoo3OHI J53IdZ723Ie4ZPBSgG8NN1Gb8IWr0rPB2rcM9/VZg9C71bOV5LGr9xjggzWP/2l/ Tk5mVhqpqXFksTVZrBgbpr/Zbgb/BojfCz8TfhomTwpZKxaaaGBP1OqmHb3bjPAH A8BS75LRaMxhBgjFevWIJRY2k4DG3AyJ -----END CERTIFICATE-----Generated at Fri Jul 4 17:46:38 2025 by rpki-client