$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json) Hash identifier: mQblxS8vZgCzHssGxOq1wxmNRw3iqEcCjOLH45UgcAM= Subject key identifier: 52:A2:64:BF:E7:40:A1:32:A6:DF:96:4C:90:A1:B9:D1:B8:62:57:4F Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Certificate serial: 18BD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft Manifest number: 18B7 Signing time: Fri 22 Aug 2025 15:51:22 +0000 Manifest this update: Fri 22 Aug 2025 15:51:22 +0000 Manifest next update: Fri 29 Aug 2025 15:51:22 +0000 Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: IAJs6jTxYV++WdUPG7Re+Id1gKmv4J/ygNvqRtHOw78=) 2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: WuIJH5EmbtRmJmFCN//mGN8XhCDwfYBWN+2IltuHvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6333 (0x18bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Validity Not Before: Aug 22 15:51:22 2025 GMT Not After : Aug 29 15:51:22 2025 GMT Subject: CN=68a891fa-1e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:24:ea:1f:ba:3c:bc:ea:a9:ba:17:cb:db:66: dc:cc:d7:94:2e:2f:90:1b:32:8f:f4:4a:98:1e:7b: 90:7f:92:7c:5d:4e:80:6e:ef:bc:df:cd:64:10:4f: 30:3a:fd:44:c5:ff:07:3a:95:02:7f:8b:98:5a:27: 6d:42:06:04:73:30:a2:11:08:9d:c2:ed:64:74:21: ac:a8:dd:0b:8e:74:88:ca:f7:a6:5c:89:42:d2:f8: 1a:28:d9:95:db:5e:f1:da:ee:bd:12:60:54:76:f9: 98:4a:4b:63:6b:7e:6a:83:cc:f9:2f:f3:f9:8f:a9: 32:10:37:b6:58:9b:c8:8d:49:05:ed:98:af:e5:ff: 23:6e:ae:23:66:2b:ef:27:52:e3:6b:25:51:cd:ac: 75:f2:30:e6:b8:fe:d4:cc:8c:a3:1d:a3:46:e2:94: e7:4b:cf:b9:24:e4:ce:79:12:70:c6:b6:77:a1:e8: a5:bd:6b:86:69:e7:55:8c:e9:f7:0a:06:de:72:69: 74:6b:35:b9:66:dc:d4:54:ed:d6:64:c9:1c:b4:20: fa:5a:a8:50:e0:1b:b4:c2:6e:94:5b:4a:bd:49:bf: de:3f:64:31:e2:89:cd:a5:8b:71:67:49:83:7a:f1: 51:52:7b:94:ba:7d:2d:d7:9c:8e:fd:3d:33:4e:c1: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:64:BF:E7:40:A1:32:A6:DF:96:4C:90:A1:B9:D1:B8:62:57:4F X509v3 Authority Key Identifier: keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b5:03:2d:44:ca:37:9b:22:23:02:ea:4e:8e:2e:86:d9:a2: 4a:cd:e5:de:58:ee:6f:9e:9e:52:d7:aa:d5:1a:2d:7e:8a:97: 99:f8:41:3c:dc:c1:7b:ce:c2:49:02:18:48:db:54:54:e7:0b: ba:77:ee:9f:20:cb:6a:28:79:61:fe:42:06:c6:9a:ce:77:a0: 1f:2f:62:30:fd:f2:2d:bc:c5:01:7b:0b:23:e1:ff:cf:de:2b: e0:a2:d2:49:b9:36:f0:0f:ce:63:df:3e:4b:53:47:0d:d9:04: 5b:13:41:9e:33:e6:8d:75:ee:d6:ad:57:38:4b:b8:7b:3c:c1: db:e9:61:3c:e3:75:24:11:9f:ee:9c:c6:28:97:07:8d:58:20: e3:b5:6e:31:d2:ae:56:51:1e:f0:3f:25:4c:2b:31:fe:8b:45: b1:9e:07:17:d4:82:b0:f2:12:76:65:db:45:10:78:4b:eb:71: 85:1c:02:10:6c:e0:f5:08:4e:80:58:e1:34:2f:d4:57:50:37: 2e:53:df:ae:04:da:4d:9f:2a:12:f4:9f:1d:ed:52:cb:bf:be: 2f:2b:38:10:52:f8:67:3f:12:74:a6:66:33:de:3f:c2:3e:b0: a6:6b:16:00:57:43:0f:6b:c9:d7:55:83:b6:f8:e4:3e:02:80: 44:10:4d:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2 MTFDQURBNTEwHhcNMjUwODIyMTU1MTIyWhcNMjUwODI5MTU1MTIyWjAYMRYwFAYD VQQDEw02OGE4OTFmYS0xZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/CTqH7o8vOqpuhfL22bczNeULi+QGzKP9EqYHnuQf5J8XU6Abu+8381kEE8w Ov1Exf8HOpUCf4uYWidtQgYEczCiEQidwu1kdCGsqN0LjnSIyvemXIlC0vgaKNmV 217x2u69EmBUdvmYSktja35qg8z5L/P5j6kyEDe2WJvIjUkF7Ziv5f8jbq4jZivv J1LjayVRzax18jDmuP7UzIyjHaNG4pTnS8+5JOTOeRJwxrZ3oeilvWuGaedVjOn3 Cgbecml0azW5ZtzUVO3WZMkctCD6WqhQ4Bu0wm6UW0q9Sb/eP2Qx4onNpYtxZ0mD evFRUnuUun0t15yO/T0zTsHfPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKiZL/n QKEypt+WTJChudG4YldPMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs Z3ZGYTNlN254b0poSEsybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgtQMtRMo3myIjAupOji6G2aJKzeXeWO5vnp5S16rVGi1+ipeZ+EE8 3MF7zsJJAhhI21RU5wu6d+6fIMtqKHlh/kIGxprOd6AfL2Iw/fItvMUBewsj4f/P 3ivgotJJuTbwD85j3z5LU0cN2QRbE0GeM+aNde7WrVc4S7h7PMHb6WE843UkEZ/u nMYolweNWCDjtW4x0q5WUR7wPyVMKzH+i0WxngcX1IKw8hJ2ZdtFEHhL63GFHAIQ bOD1CE6AWOE0L9RXUDcuU9+uBNpNnyoS9J8d7VLLv74vKzgQUvhnPxJ0pmYz3j/C PrCmaxYAV0MPa8nXVYO2+OQ+AoBEEE1I -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:38 2025 by rpki-client