$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: vuzh/kSzDCQTTjaAQfEm1F+f3DgCAk8G4nv3/myJQTc= Subject key identifier: 28:D2:A8:18:21:E8:78:DF:16:D2:9D:D5:40:D1:4E:FC:D7:E0:58:B7 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 07A5 Signing time: Fri 22 Aug 2025 21:28:18 +0000 Manifest this update: Fri 22 Aug 2025 21:28:17 +0000 Manifest next update: Fri 29 Aug 2025 21:28:17 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: OftZ3FLzOf8p/GZOu8VbXvuR/RqnZi1h94/kv8U7l/c=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: SiUJ7SYlbA21+yPfD2uZbgHjH4MPfQViyjJFRbUxFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Aug 22 21:28:17 2025 GMT Not After : Aug 29 21:28:17 2025 GMT Subject: CN=68a8e0f2-ae26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7d:9b:cc:ec:67:59:45:5b:eb:ec:dc:ec:bd: b4:6c:48:e6:d1:a0:4d:bf:78:bc:fb:3f:92:d9:b1: 18:6c:59:2d:e1:eb:ed:50:62:d8:3e:3d:cb:de:04: a4:b2:5e:06:34:5a:33:07:e6:73:ce:e9:8a:80:3c: 1a:c6:6d:22:67:80:79:d7:5e:09:bf:a9:58:70:13: d8:66:5e:70:ac:ed:86:0e:e0:93:2a:ae:c6:17:04: aa:31:de:6e:67:0e:68:7a:ca:0c:f7:99:8e:e3:e0: 1b:23:98:fa:8c:d0:10:aa:78:5e:f5:d4:b4:60:45: e1:c7:58:71:ea:d6:97:cf:99:a7:74:66:08:3b:0d: 5d:e3:bd:73:fc:79:a0:26:8f:72:12:61:6a:e3:59: e2:97:7d:ab:3d:47:8c:9f:64:ae:bf:1f:8c:41:3b: 3e:35:ac:f1:36:1d:70:33:5f:f7:25:76:92:00:bb: 6e:2c:29:1b:e5:91:2e:44:b6:08:37:ef:d7:26:c8: e4:55:88:bd:05:10:88:47:d6:a5:28:8b:31:a3:28: 5b:94:5f:b6:1c:6b:28:d4:3b:b2:ae:ca:94:b4:2a: fd:8c:b8:72:e2:86:30:c8:d0:33:db:76:65:0f:3e: af:e0:75:91:31:5d:22:dd:72:39:45:bd:6d:1c:c9: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D2:A8:18:21:E8:78:DF:16:D2:9D:D5:40:D1:4E:FC:D7:E0:58:B7 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ba:f1:95:5f:fd:69:d7:72:9e:57:bd:2c:44:fa:18:91:02: 7e:95:ce:28:ea:1d:c5:3c:b7:ca:d1:21:aa:e3:e0:1d:b1:cc: d6:c9:8c:8d:93:9a:59:ea:e0:cd:44:6e:38:bb:49:11:04:d0: 18:f6:13:02:2c:db:ff:69:c7:bb:62:8a:04:bb:36:e5:45:39: 98:31:56:ad:bd:d0:3c:5a:ef:b1:0d:77:52:98:04:f8:c5:10: 01:6b:db:5c:c8:55:83:7e:f3:42:f0:db:a2:59:0a:04:e1:13: 1b:d3:73:72:40:4d:c6:c4:97:7b:18:36:c6:67:8c:22:70:9a: 7f:cd:df:50:b3:39:be:94:13:e3:16:6b:7c:e3:88:39:37:fd: cb:ac:33:72:c1:dd:61:51:15:a7:79:fb:db:43:89:96:76:de: 4f:f9:6c:6f:9b:d0:84:a9:39:76:c4:2a:01:a4:bf:74:c2:cc: 76:71:c0:c7:05:07:77:9b:aa:cb:ed:74:a1:4e:b6:51:99:03: e0:b7:b9:b8:93:76:74:2e:fd:cc:dd:a5:b2:2c:01:c8:ff:3f: c6:8e:85:a9:6c:a8:c5:63:1b:2b:6c:62:ee:6c:35:0d:74:26: 9c:3b:15:75:cb:8c:82:44:fb:6b:7b:f0:cf:38:e4:d4:6e:cf: 73:09:04:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjUwODIyMjEyODE3WhcNMjUwODI5MjEyODE3WjAYMRYwFAYD VQQDEw02OGE4ZTBmMi1hZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n2bzOxnWUVb6+zc7L20bEjm0aBNv3i8+z+S2bEYbFkt4evtUGLYPj3L3gSk sl4GNFozB+ZzzumKgDwaxm0iZ4B5114Jv6lYcBPYZl5wrO2GDuCTKq7GFwSqMd5u Zw5oesoM95mO4+AbI5j6jNAQqnhe9dS0YEXhx1hx6taXz5mndGYIOw1d471z/Hmg Jo9yEmFq41nil32rPUeMn2Suvx+MQTs+NazxNh1wM1/3JXaSALtuLCkb5ZEuRLYI N+/XJsjkVYi9BRCIR9alKIsxoyhblF+2HGso1DuyrsqUtCr9jLhy4oYwyNAz23Zl Dz6v4HWRMV0i3XI5Rb1tHMm1pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjSqBgh 6HjfFtKd1UDRTvzX4Fi3MB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUuvGVX/1p13KeV70sRPoYkQJ+lc4o6h3FPLfK0SGq4+AdsczWyYyN k5pZ6uDNRG44u0kRBNAY9hMCLNv/ace7YooEuzblRTmYMVatvdA8Wu+xDXdSmAT4 xRABa9tcyFWDfvNC8NuiWQoE4RMb03NyQE3GxJd7GDbGZ4wicJp/zd9Qszm+lBPj Fmt844g5N/3LrDNywd1hURWnefvbQ4mWdt5P+Wxvm9CEqTl2xCoBpL90wsx2ccDH BQd3m6rL7XShTrZRmQPgt7m4k3Z0Lv3M3aWyLAHI/z/GjoWpbKjFYxsrbGLubDUN dCacOxV1y4yCRPtre/DPOOTUbs9zCQQa -----END CERTIFICATE-----Generated at Sat Aug 23 15:17:48 2025 by rpki-client