$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json) Hash identifier: wCXQg4/aOeybxmKO7sgGhjIDzDCYEBJZkd/8oVrvvgg= Subject key identifier: A1:64:EC:2E:87:2A:E2:90:33:B3:4A:D3:8E:18:38:75:35:55:C2:40 Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Certificate serial: 15F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft Manifest number: 15E9 Signing time: Fri 22 Aug 2025 16:52:23 +0000 Manifest this update: Fri 22 Aug 2025 16:52:21 +0000 Manifest next update: Fri 29 Aug 2025 16:52:21 +0000 Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: /nhNi6sWglqXaJvFqYIhP00Y13Hfy3yFF4PP1Ja/4Vc=) 2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: Xq7aDp/RYbNUbH8lamtxHtlBICT7QgYLuIupGmw4yJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5617 (0x15f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Validity Not Before: Aug 22 16:52:21 2025 GMT Not After : Aug 29 16:52:21 2025 GMT Subject: CN=68a8a046-2a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:a2:9a:95:be:93:19:3e:ac:3b:3a:fe:24: 7d:36:2c:35:96:b6:61:9f:83:45:3b:09:3a:5d:26: 21:b6:e3:49:00:a3:1a:30:e1:de:52:70:89:28:c8: e5:aa:3a:91:dc:4b:e2:4a:a0:4a:5a:b4:15:7b:f8: 1b:ae:fc:6d:00:19:d7:86:35:17:f6:55:24:c7:f5: 6b:2f:86:da:90:d6:2d:c6:60:68:b3:31:b7:03:c5: 1d:4b:78:f4:a4:92:81:18:ef:09:c3:5e:67:3e:4f: 70:40:1f:a3:d7:78:f9:a7:e7:41:92:d7:c4:5c:5b: c4:7c:8d:0e:97:ff:84:de:09:03:17:88:61:47:07: 67:18:0b:21:b2:0e:fe:64:ce:51:6f:94:9b:52:36: a4:f9:44:ae:aa:1e:68:b9:b6:b4:d5:ce:ae:3c:9b: 48:ab:26:a9:eb:90:5c:ba:16:c7:ba:5e:a6:32:d4: 9a:65:6a:ab:b4:3e:7e:fc:f4:70:29:62:86:5d:b0: b2:f6:7d:ea:c8:81:76:70:4b:39:9a:a1:4b:4a:31: ac:57:8e:6d:5b:85:0f:77:da:e8:12:68:f5:b9:30: 5d:17:35:61:01:53:25:a3:8f:99:9c:3c:79:cf:e9: 42:86:06:2a:89:28:4c:98:ec:bb:ab:cc:8f:6a:48: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:64:EC:2E:87:2A:E2:90:33:B3:4A:D3:8E:18:38:75:35:55:C2:40 X509v3 Authority Key Identifier: keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:29:0d:96:f8:ee:32:81:f9:31:f3:d4:f7:4c:b2:a5:63:1e: 38:ca:28:fb:07:68:65:54:7d:e2:33:45:2e:67:f4:0c:47:23: 0c:00:d3:dc:3a:49:ea:82:a9:b2:77:e3:18:4b:94:d6:59:eb: 0c:21:3a:00:af:8b:2f:86:1c:4a:8a:be:b6:c4:e1:ac:b0:c0: 2c:b8:42:89:42:7e:49:72:82:20:95:24:d1:9c:06:94:c4:5e: 4d:aa:82:2e:d3:9e:f3:7c:a8:18:27:96:a8:c7:0e:35:25:27: 06:72:66:ff:02:01:e4:72:bc:81:4a:a8:1b:fb:a7:61:02:ce: ed:99:1c:54:d0:55:0d:47:78:b9:a5:cc:89:0e:1f:19:ce:90: 4b:34:43:7d:4c:2e:84:4e:90:ce:c3:8b:61:90:80:8d:42:f7: 41:b5:eb:72:64:61:9f:5a:c6:16:d3:f0:da:45:ad:01:72:4e: 58:82:a8:dd:45:dd:c3:4f:80:8a:ce:41:1a:0d:df:41:88:87: d5:3b:53:b8:bc:48:e3:82:35:d0:3f:f3:7e:00:cd:8c:ad:60: ef:00:b3:fc:f9:9a:13:c6:69:f8:12:a5:db:bd:13:8e:f1:c1: 0c:3d:9a:0c:57:de:ac:37:19:99:06:b8:ba:56:a0:bc:b1:53: 43:67:47:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0 MzRERjQ1NDAwHhcNMjUwODIyMTY1MjIxWhcNMjUwODI5MTY1MjIxWjAYMRYwFAYD VQQDEw02OGE4YTA0Ni0yYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfeimpW+kxk+rDs6/iR9Niw1lrZhn4NFOwk6XSYhtuNJAKMaMOHeUnCJKMjl qjqR3EviSqBKWrQVe/gbrvxtABnXhjUX9lUkx/VrL4bakNYtxmBoszG3A8UdS3j0 pJKBGO8Jw15nPk9wQB+j13j5p+dBktfEXFvEfI0Ol/+E3gkDF4hhRwdnGAshsg7+ ZM5Rb5SbUjak+USuqh5ouba01c6uPJtIqyap65BcuhbHul6mMtSaZWqrtD5+/PRw KWKGXbCy9n3qyIF2cEs5mqFLSjGsV45tW4UPd9roEmj1uTBdFzVhAVMlo4+ZnDx5 z+lChgYqiShMmOy7q8yPakgMswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFk7C6H KuKQM7NK044YOHU1VcJAMB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4 MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty a1lDRkNEdm9MVkZEVGZSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrKQ2W+O4ygfkx89T3TLKlYx44yij7B2hlVH3iM0UuZ/QMRyMMANPc Oknqgqmyd+MYS5TWWesMIToAr4svhhxKir62xOGssMAsuEKJQn5JcoIglSTRnAaU xF5NqoIu057zfKgYJ5aoxw41JScGcmb/AgHkcryBSqgb+6dhAs7tmRxU0FUNR3i5 pcyJDh8ZzpBLNEN9TC6ETpDOw4thkICNQvdBtetyZGGfWsYW0/DaRa0Bck5Ygqjd Rd3DT4CKzkEaDd9BiIfVO1O4vEjjgjXQP/N+AM2MrWDvALP8+ZoTxmn4EqXbvROO 8cEMPZoMV96sNxmZBri6VqC8sVNDZ0fG -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:25 2025 by rpki-client