$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: fg92pyMLF83f5R774uh+Sva4ij5D92f+G/ANZCRG5FU= Subject key identifier: 4D:48:8C:03:86:99:BB:BA:E3:3E:BC:B3:A1:66:69:C5:21:86:7F:16 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0CA7 Signing time: Fri 22 Aug 2025 18:26:39 +0000 Manifest this update: Fri 22 Aug 2025 18:26:39 +0000 Manifest next update: Fri 29 Aug 2025 18:26:38 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: EXmhxd4pRK4UtWAewabCeDnQm7hxHBqMR9XJCfV4B0A=) 2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: /m7E0Dw/anD8qYNxCWedW44uleLaVBkf0eBmZ6XFvMk=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: rZ4CQjG/7W0/b4/xy8McSOxNbiTi926f91iRcbtKHeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Aug 22 18:26:39 2025 GMT Not After : Aug 29 18:26:38 2025 GMT Subject: CN=68a8b65f-eb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:5f:67:64:b4:4a:c8:bb:b1:35:a2:a3:5c: c5:71:f3:45:7b:d8:36:89:ec:a9:d7:02:ca:df:44: ae:e2:ea:77:00:0f:3d:ef:8e:d7:1b:b1:f2:03:9e: df:c1:59:d6:ea:be:e0:ea:1b:ee:03:65:1c:e0:57: ac:37:23:aa:59:1d:17:cd:d9:28:04:b3:8a:01:08: 69:dc:43:06:fa:43:78:0e:89:2a:34:03:d0:ef:88: 81:2b:7b:f5:0c:b0:5a:14:26:49:cb:64:16:35:7d: 39:99:03:ea:9d:b3:72:27:82:67:7a:aa:3d:d9:5e: f6:33:f5:d9:18:30:09:0e:60:02:b4:57:31:af:9f: 83:26:e7:62:fa:ae:16:9c:d9:e0:17:28:3b:12:c5: 52:69:33:8f:34:93:fa:0b:e5:07:0c:e3:a0:e7:1e: e7:20:38:e0:69:93:83:9c:f3:64:06:b1:22:9a:af: a7:a5:21:6d:db:f7:2c:51:8d:e1:3d:41:fc:97:e2: 1b:bd:ad:40:c4:75:44:cc:76:2f:03:f2:1b:25:17: ba:7f:8f:b5:e5:c7:1e:77:ab:8f:ea:22:ef:73:80: d0:1e:55:6b:3a:97:37:58:74:aa:c0:b7:bc:a3:67: 97:20:bc:0e:93:f8:1e:3a:ff:8c:a1:02:79:36:1f: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:48:8C:03:86:99:BB:BA:E3:3E:BC:B3:A1:66:69:C5:21:86:7F:16 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:81:4b:87:c0:cc:08:6a:17:36:23:ed:31:24:3b:d3:96:7e: c2:fa:ce:19:41:9a:27:55:30:30:6a:85:26:25:9e:1a:ff:80: 56:e7:a3:6f:e6:b3:c2:1a:08:e6:93:ba:82:f6:e3:6c:2b:28: 0a:7e:62:d2:6f:76:c8:79:06:03:ad:8a:09:5b:37:13:09:ad: cf:7c:98:63:3e:aa:59:f2:94:0d:fc:7f:ec:13:b8:e2:fb:25: 58:1f:fa:80:be:11:08:5d:14:b7:02:f1:2c:22:e4:d7:13:37: 38:78:70:4a:bb:e8:71:18:60:65:e0:1d:ae:36:fa:8e:14:ad: 0d:d9:bb:f2:7f:60:20:e4:9f:11:7c:14:90:66:55:a5:e4:0f: 2a:7d:9e:46:f8:5a:30:e9:ae:d0:27:27:2c:e3:7e:22:1a:f2: d1:6a:c2:41:c5:82:2a:e2:36:de:b1:f2:f4:6a:0c:74:68:6c: b8:28:c4:8d:15:1f:6a:9e:4d:d0:12:5b:ca:f8:71:80:4c:f3: 0f:4a:12:a5:f6:a5:9f:ed:75:12:50:61:ad:c5:bd:a4:85:d9: 42:69:b2:78:90:48:ba:50:7a:6d:2d:cd:61:0f:0a:29:43:17: 05:ba:ec:a0:34:52:a3:6c:8e:12:b2:3d:23:65:18:90:3a:99: 00:a5:99:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjUwODIyMTgyNjM5WhcNMjUwODI5MTgyNjM4WjAYMRYwFAYD VQQDEw02OGE4YjY1Zi1lYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbpfZ2S0Ssi7sTWio1zFcfNFe9g2ieyp1wLK30Su4up3AA89747XG7HyA57f wVnW6r7g6hvuA2Uc4FesNyOqWR0XzdkoBLOKAQhp3EMG+kN4DokqNAPQ74iBK3v1 DLBaFCZJy2QWNX05mQPqnbNyJ4Jneqo92V72M/XZGDAJDmACtFcxr5+DJudi+q4W nNngFyg7EsVSaTOPNJP6C+UHDOOg5x7nIDjgaZODnPNkBrEimq+npSFt2/csUY3h PUH8l+Ibva1AxHVEzHYvA/IbJRe6f4+15cced6uP6iLvc4DQHlVrOpc3WHSqwLe8 o2eXILwOk/geOv+MoQJ5Nh+5mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1IjAOG mbu64z68s6FmacUhhn8WMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASgUuHwMwIahc2I+0xJDvTln7C+s4ZQZonVTAwaoUmJZ4a/4BW56Nv 5rPCGgjmk7qC9uNsKygKfmLSb3bIeQYDrYoJWzcTCa3PfJhjPqpZ8pQN/H/sE7ji +yVYH/qAvhEIXRS3AvEsIuTXEzc4eHBKu+hxGGBl4B2uNvqOFK0N2bvyf2Ag5J8R fBSQZlWl5A8qfZ5G+Fow6a7QJycs434iGvLRasJBxYIq4jbesfL0agx0aGy4KMSN FR9qnk3QElvK+HGATPMPShKl9qWf7XUSUGGtxb2khdlCabJ4kEi6UHptLc1hDwop QxcFuuygNFKjbI4Ssj0jZRiQOpkApZmk -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:40 2025 by rpki-client