$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: LhAluDJtVcV6urCGV0YjdVKxu/91Ru8fskWmu6XC4d8= Subject key identifier: 68:07:D8:89:00:4A:FD:BD:BF:EB:CA:D1:00:08:8F:6E:81:0E:D0:89 Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 0162 Signing time: Sat 23 Aug 2025 04:06:21 +0000 Manifest this update: Sat 23 Aug 2025 04:06:21 +0000 Manifest next update: Sat 30 Aug 2025 04:06:21 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: f3/CP+90W/sYgmAPN2fkW0/cxoZE5eoppFUVsdpUQWA=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: aEwpt3FN/b3agcSqsy028NBcRbgaV2C2DNdzwhDgaUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Aug 23 04:06:21 2025 GMT Not After : Aug 30 04:06:21 2025 GMT Subject: CN=68a93e3d-8d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:6c:31:43:6b:13:db:64:28:37:2e:3a:b9: 84:f7:96:77:a0:42:78:0e:38:08:bd:e0:9c:b9:3b: 5f:b9:09:29:d7:f9:51:ef:e3:a9:fd:43:3d:3b:74: 89:4f:ca:f1:15:4f:2a:b7:32:fe:20:f2:bc:26:52: e7:7f:26:00:9f:7e:13:30:d3:88:2b:93:57:0d:cd: 28:ea:b4:6d:21:6f:77:7d:89:d2:57:7a:3a:9b:9f: 5d:2a:43:f6:da:07:42:64:f7:2f:2e:d6:8d:30:39: e7:56:a0:d2:b8:51:f4:c4:f0:75:50:69:a6:49:72: 16:f8:cd:4c:19:81:0f:0b:53:82:8f:48:19:15:45: cc:bb:e4:a1:90:ff:34:64:f2:81:be:a7:24:8c:30: 2b:ce:1e:f7:3a:1b:70:55:b2:75:3a:94:0f:2c:10: 2b:64:f8:17:93:d9:78:93:7e:99:d3:99:85:6c:5d: aa:96:3c:69:31:a2:03:4a:00:ab:d0:b9:7d:3b:68: 45:f3:5a:80:96:55:64:8a:93:c4:af:74:48:41:27: 5d:7b:6b:40:d7:87:32:6b:ef:17:4d:f6:98:11:e2: 9b:fc:89:db:54:c0:65:97:9f:c3:da:b5:cc:97:e4: ac:fa:d9:61:31:9c:0f:b8:ce:70:27:b1:84:13:0d: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:07:D8:89:00:4A:FD:BD:BF:EB:CA:D1:00:08:8F:6E:81:0E:D0:89 X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8c:b7:d6:65:c9:18:03:01:b0:58:9f:b8:34:a2:c7:a3:bc: 6b:c0:7f:08:1b:17:9a:79:2e:5b:ae:80:d1:9e:df:34:f5:e4: 1c:89:3d:a5:2a:88:55:d5:7a:a1:f9:bc:28:ee:6e:58:19:f2: f8:6b:f9:88:9b:5b:63:e8:b6:3b:2c:75:fa:73:ef:c2:cf:87: 5f:a4:41:04:cd:19:73:9a:37:65:ea:c8:b9:76:e9:a9:10:eb: 0a:32:80:63:51:4b:fb:dd:ee:b4:6b:c2:22:46:67:e5:a3:df: cd:ea:22:fa:9d:4e:d6:4b:8f:5e:b9:85:d7:ec:f4:ef:38:3a: 2b:1a:d0:b2:1f:39:39:5e:99:a2:66:f2:6a:77:2b:a6:3b:b1: cc:3f:e9:71:06:30:ca:5a:93:4d:f6:29:b2:5c:e4:eb:d5:57: ef:16:51:ee:44:06:5c:3c:37:23:ba:86:e2:e4:d6:4c:d6:ff: 15:0e:84:b1:fd:98:64:76:52:45:b1:0b:60:36:a9:fa:5f:67: 6f:bc:66:d5:59:31:99:77:59:06:d1:01:f7:84:d0:08:f1:28: da:29:59:d6:ba:15:ea:a7:44:1f:92:86:09:58:fa:33:80:2e: 5d:55:49:9e:0f:01:f5:5b:93:c6:77:88:2d:74:3a:1e:97:21: 80:2c:c2:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjUwODIzMDQwNjIxWhcNMjUwODMwMDQwNjIxWjAYMRYwFAYD VQQDEw02OGE5M2UzZC04ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8xsMUNrE9tkKDcuOrmE95Z3oEJ4DjgIveCcuTtfuQkp1/lR7+Op/UM9O3SJ T8rxFU8qtzL+IPK8JlLnfyYAn34TMNOIK5NXDc0o6rRtIW93fYnSV3o6m59dKkP2 2gdCZPcvLtaNMDnnVqDSuFH0xPB1UGmmSXIW+M1MGYEPC1OCj0gZFUXMu+ShkP80 ZPKBvqckjDArzh73OhtwVbJ1OpQPLBArZPgXk9l4k36Z05mFbF2qljxpMaIDSgCr 0Ll9O2hF81qAllVkipPEr3RIQSdde2tA14cya+8XTfaYEeKb/InbVMBll5/D2rXM l+Ss+tlhMZwPuM5wJ7GEEw2JxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgH2IkA Sv29v+vK0QAIj26BDtCJMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMjLfWZckYAwGwWJ+4NKLHo7xrwH8IGxeaeS5broDRnt809eQciT2l KohV1Xqh+bwo7m5YGfL4a/mIm1tj6LY7LHX6c+/Cz4dfpEEEzRlzmjdl6si5dump EOsKMoBjUUv73e60a8IiRmflo9/N6iL6nU7WS49euYXX7PTvODorGtCyHzk5Xpmi ZvJqdyumO7HMP+lxBjDKWpNN9imyXOTr1VfvFlHuRAZcPDcjuobi5NZM1v8VDoSx /ZhkdlJFsQtgNqn6X2dvvGbVWTGZd1kG0QH3hNAI8SjaKVnWuhXqp0QfkoYJWPoz gC5dVUmeDwH1W5PGd4gtdDoelyGALMJv -----END CERTIFICATE-----Generated at Sat Aug 23 17:00:38 2025 by rpki-client