$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json) Hash identifier: iGPHGEtUhDMY5UiVasxcoqLPpBynJjz4R7HsS76HAaA= Subject key identifier: 34:7C:6A:A9:B4:C9:61:D6:35:97:41:86:79:B5:2A:7D:68:22:A5:04 Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft Manifest number: 0847 Signing time: Fri 22 Aug 2025 20:50:26 +0000 Manifest this update: Fri 22 Aug 2025 20:50:25 +0000 Manifest next update: Fri 29 Aug 2025 20:50:25 +0000 Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: oCCemiAbAXZ9aX8HQPFtocIVIBWFnEHkw7E2U4vhLI4=) 2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: gZyKCd69uOR05q6m/VeY/HmMPOj6FtQSF2UlUbB28zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Validity Not Before: Aug 22 20:50:25 2025 GMT Not After : Aug 29 20:50:25 2025 GMT Subject: CN=68a8d811-90b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:33:71:82:30:3e:f3:63:cd:ef:fc:32:4e: 03:94:3a:85:90:60:5b:1c:e8:69:8e:45:e4:00:ae: 7f:5b:46:16:81:57:44:fc:66:e2:98:f4:69:fe:a2: 25:d8:e1:32:60:88:58:69:fa:d4:4e:1a:0e:bb:12: 70:f4:5c:23:72:28:4a:0a:6e:f2:c4:20:d8:a2:b0: 0d:76:bb:93:99:e1:9d:25:69:8d:5d:e0:63:11:c1: 1e:25:08:b1:38:27:ac:1c:ed:36:fd:13:38:e0:de: e2:d5:5d:ec:67:a9:da:1f:74:1f:5e:a2:33:f2:83: 04:f8:ca:c5:f6:ba:47:3b:3b:33:08:a7:28:5c:0a: 26:0b:8e:d2:ed:b3:cd:2c:7a:05:a4:28:9e:b1:4f: f2:83:56:e0:0d:65:4d:d1:85:44:80:9f:9b:0a:57: 7b:0e:c5:4f:e5:3f:0e:99:fa:0d:6f:0a:bf:7b:c4: c9:bd:10:15:c4:6e:d9:72:fa:13:a4:a2:bf:06:3a: f3:e8:b1:40:0b:73:06:cf:14:ee:1e:5d:9c:b6:ce: d5:2b:3d:5e:73:65:14:1f:a2:e2:07:05:fa:94:61: 02:c5:f3:6b:c7:20:f0:3a:aa:5d:da:70:73:70:b5: 02:2d:7b:27:0c:f2:04:43:c2:64:8d:3d:fd:2f:7f: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7C:6A:A9:B4:C9:61:D6:35:97:41:86:79:B5:2A:7D:68:22:A5:04 X509v3 Authority Key Identifier: keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c0:17:25:3e:6f:87:eb:fc:a2:29:4d:f1:1b:f5:cf:2d:2e: 26:75:32:88:78:25:03:2a:62:04:de:50:c9:57:c6:c0:34:fa: 5f:31:60:1f:c0:b0:ee:89:2d:1e:af:0d:29:e1:5d:3d:0d:e8: 07:f0:7c:29:db:e3:0d:72:a9:cd:08:b0:c7:4e:48:d2:6c:f7: 3e:6a:59:b4:d1:9e:27:32:b4:b9:4c:4f:d3:cf:25:0a:dc:82: 32:47:b3:fa:20:cf:01:ef:09:70:f5:8e:e4:01:72:c8:ba:0f: c3:0c:a7:8c:cf:90:90:32:2c:5d:c3:50:52:4f:0c:c4:6b:38: 5e:57:bd:e1:91:a6:53:e5:44:a1:e0:fa:f4:d1:e4:49:68:e0: 28:4c:65:c3:f1:d8:94:f7:e0:d4:b0:f9:a9:a3:b9:a2:b3:18: 1f:77:99:47:ef:df:bf:f9:1a:d6:e6:09:14:c7:73:22:aa:81: ec:70:fd:7d:33:fe:7c:03:18:7e:2c:8c:18:57:72:1c:5e:47: 2c:e2:74:43:af:6a:24:37:62:ea:e2:51:ec:54:1e:5b:1e:ea: 27:fd:fa:71:25:86:70:27:93:97:8d:62:d4:d2:98:fd:4a:e9: 1a:f2:4a:83:5c:fa:62:5c:84:67:1d:7c:ef:c0:55:81:f4:2b: 41:f2:14:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4 RjhBMjA2QzYwHhcNMjUwODIyMjA1MDI1WhcNMjUwODI5MjA1MDI1WjAYMRYwFAYD VQQDEw02OGE4ZDgxMS05MGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIYzcYIwPvNjze/8Mk4DlDqFkGBbHOhpjkXkAK5/W0YWgVdE/GbimPRp/qIl 2OEyYIhYafrUThoOuxJw9FwjcihKCm7yxCDYorANdruTmeGdJWmNXeBjEcEeJQix OCesHO02/RM44N7i1V3sZ6naH3QfXqIz8oME+MrF9rpHOzszCKcoXAomC47S7bPN LHoFpCiesU/yg1bgDWVN0YVEgJ+bCld7DsVP5T8OmfoNbwq/e8TJvRAVxG7ZcvoT pKK/Bjrz6LFAC3MGzxTuHl2cts7VKz1ec2UUH6LiBwX6lGECxfNrxyDwOqpd2nBz cLUCLXsnDPIEQ8JkjT39L38RhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR8aqm0 yWHWNZdBhnm1Kn1oIqUEMB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0 RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3 M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3wBclPm+H6/yiKU3xG/XPLS4mdTKIeCUDKmIE3lDJV8bANPpfMWAf wLDuiS0erw0p4V09DegH8Hwp2+MNcqnNCLDHTkjSbPc+alm00Z4nMrS5TE/TzyUK 3IIyR7P6IM8B7wlw9Y7kAXLIug/DDKeMz5CQMixdw1BSTwzEazheV73hkaZT5USh 4Pr00eRJaOAoTGXD8diU9+DUsPmpo7misxgfd5lH79+/+RrW5gkUx3MiqoHscP19 M/58Axh+LIwYV3IcXkcs4nRDr2okN2Lq4lHsVB5bHuon/fpxJYZwJ5OXjWLU0pj9 Suka8kqDXPpiXIRnHXzvwFWB9CtB8hQx -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:48 2025 by rpki-client