$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: U6NLWW59Z38Rc4Z3rO75mU0RKFq3d7jmxzPr/KpEhys= Subject key identifier: A8:71:EC:73:97:F7:B7:C4:CF:31:02:34:DF:C6:60:9B:00:32:F5:48 Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0A46 Signing time: Wed 02 Jul 2025 19:56:30 +0000 Manifest this update: Wed 02 Jul 2025 19:56:29 +0000 Manifest next update: Wed 09 Jul 2025 19:56:29 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: KigPw6I3QDCfq4iaycz4Two2LM2UqGYfrnDXc4nCgTI=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: VtwEbio1gRB7Ch5LlsoNkh9yhOMrAAqsTjIWAhPZFj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Jul 2 19:56:29 2025 GMT Not After : Jul 9 19:56:29 2025 GMT Subject: CN=68658eed-7c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:df:46:aa:75:cc:6d:18:10:9e:0f:46:0c:d1: 76:88:b0:13:d3:20:dd:16:82:04:d3:83:d9:df:f8: 8d:d0:9c:c6:60:50:c6:d8:59:55:e4:1d:56:12:68: 99:d5:b2:0c:aa:75:79:50:b7:12:6f:a2:a6:25:30: 54:8b:8d:75:78:4c:a6:3e:4a:d3:c7:de:7f:dd:7a: 7f:8b:ef:3b:c3:eb:3a:28:8f:18:54:5d:16:9a:a4: 6e:d4:b3:2a:45:e0:3f:03:ca:02:ef:a5:d3:73:ea: da:80:ef:39:05:a0:8e:0d:1e:08:cf:21:ce:9b:6b: 45:d5:63:f1:e9:ab:52:f5:bd:33:85:08:d4:ed:1b: 84:8a:b4:e7:f6:8a:88:8f:9d:e5:a6:7d:43:40:16: a3:8f:26:70:a4:c8:9e:1f:6e:67:ff:0f:e9:05:74: b8:58:b6:89:7c:d5:8c:5e:86:27:e7:2c:0b:15:7b: f0:1a:b7:ce:1e:b4:21:3c:a7:cc:45:52:21:25:64: 60:7b:be:2a:51:b0:41:9c:10:f3:d1:d5:cf:a4:0f: f0:d9:0c:1f:8d:d2:0f:a4:cb:87:05:80:98:1f:99: 7b:77:59:6d:78:c9:7c:9f:24:e5:28:ad:b2:33:20: fd:da:4d:59:0e:18:d2:06:18:15:6f:f2:e7:e9:f9: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:71:EC:73:97:F7:B7:C4:CF:31:02:34:DF:C6:60:9B:00:32:F5:48 X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:2e:62:c0:e3:42:d4:86:39:ea:72:6e:14:6f:f7:4f:7b:fa: 79:3e:f5:52:ba:2a:ba:6a:63:75:5f:9a:60:6c:6d:08:ff:b8: 3a:53:4a:73:50:8c:67:d2:e3:a4:f3:13:61:da:33:bf:d2:65: 18:51:48:2a:20:82:89:e5:e2:ea:08:c2:e9:bc:f3:1e:32:b6: ca:f9:3d:26:d5:09:e6:a5:08:90:5a:c7:50:f5:35:6e:06:68: d9:7b:d8:e3:8c:e0:c2:c1:b5:2a:78:d8:88:59:ac:7c:5a:30: bd:90:d9:9a:3c:ef:e9:ca:37:3f:c6:28:05:cc:ea:70:f8:00: 09:ac:d3:33:4e:0f:5b:9f:88:a3:35:f7:a9:be:40:ee:ed:68: a4:41:35:b4:94:14:73:fd:74:f2:95:cb:5a:33:3c:aa:65:69: 93:ff:f3:0a:58:7e:9b:98:e6:4b:75:2d:d7:73:9e:a9:c9:38: 1e:f1:0f:1c:25:92:76:2a:99:f1:fe:51:9e:36:31:75:70:f0: 38:56:f8:cf:77:f8:02:24:ae:2d:47:d3:0d:1e:62:6a:d6:a0: 04:34:b7:46:60:83:3c:79:18:97:fc:ad:4d:65:e9:48:91:37: be:9d:38:2a:ad:16:9a:24:2f:99:32:8a:a7:20:80:bc:50:22: ea:33:ba:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjUwNzAyMTk1NjI5WhcNMjUwNzA5MTk1NjI5WjAYMRYwFAYD VQQDEw02ODY1OGVlZC03YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d9GqnXMbRgQng9GDNF2iLAT0yDdFoIE04PZ3/iN0JzGYFDG2FlV5B1WEmiZ 1bIMqnV5ULcSb6KmJTBUi411eEymPkrTx95/3Xp/i+87w+s6KI8YVF0WmqRu1LMq ReA/A8oC76XTc+ragO85BaCODR4IzyHOm2tF1WPx6atS9b0zhQjU7RuEirTn9oqI j53lpn1DQBajjyZwpMieH25n/w/pBXS4WLaJfNWMXoYn5ywLFXvwGrfOHrQhPKfM RVIhJWRge74qUbBBnBDz0dXPpA/w2QwfjdIPpMuHBYCYH5l7d1lteMl8nyTlKK2y MyD92k1ZDhjSBhgVb/Ln6flwdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhx7HOX 97fEzzECNN/GYJsAMvVIMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5LmLA40LUhjnqcm4Ub/dPe/p5PvVSuiq6amN1X5pgbG0I/7g6U0pz UIxn0uOk8xNh2jO/0mUYUUgqIIKJ5eLqCMLpvPMeMrbK+T0m1QnmpQiQWsdQ9TVu BmjZe9jjjODCwbUqeNiIWax8WjC9kNmaPO/pyjc/xigFzOpw+AAJrNMzTg9bn4ij NfepvkDu7WikQTW0lBRz/XTylctaMzyqZWmT//MKWH6bmOZLdS3Xc56pyTge8Q8c JZJ2Kpnx/lGeNjF1cPA4VvjPd/gCJK4tR9MNHmJq1qAENLdGYIM8eRiX/K1NZelI kTe+nTgqrRaaJC+ZMoqnIIC8UCLqM7qM -----END CERTIFICATE-----Generated at Fri Jul 4 10:57:56 2025 by rpki-client