$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: 5tHo/aRnx7eky8Tt6f5ywgng4HPshU4+Nri2cHgRozo= Subject key identifier: 37:A1:F3:4A:71:17:9D:B2:5E:F3:8D:9C:21:31:69:47:BC:C4:07:59 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 0577 Signing time: Fri 22 Aug 2025 23:28:36 +0000 Manifest this update: Fri 22 Aug 2025 23:28:36 +0000 Manifest next update: Fri 29 Aug 2025 23:28:36 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: BsfdLeSSaMkBPiAoaPp5YHUQUF8kVtSws4LmvZLOfsE=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: H5pjI/DUhiXyW6sQwhGG/wb5HeJLy8aTxQs1mqyRqSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: Aug 22 23:28:36 2025 GMT Not After : Aug 29 23:28:36 2025 GMT Subject: CN=68a8fd24-93df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:45:d6:de:bb:3a:2d:12:ca:73:c2:d8:36:64: dd:b7:93:7a:ce:49:6b:5d:86:a9:1b:df:9e:05:c5: 99:2c:9b:32:e4:de:90:21:93:3e:c9:27:c1:00:43: fa:ec:4e:23:03:e6:dd:89:8e:0d:79:bc:ae:d4:18: 59:08:13:e0:bc:94:6d:41:b3:75:0c:6d:b2:fc:8e: fd:f7:ab:1f:93:f2:0d:49:c4:0e:89:3d:e3:f4:50: 9a:b1:92:05:da:9e:7e:df:59:e2:de:66:60:06:b0: 11:c4:e2:58:09:73:f5:80:4a:6d:ff:24:64:ba:6d: 84:73:9d:b0:7e:18:c6:d1:86:69:73:45:be:36:65: b1:88:cf:ae:75:a9:5e:bb:84:a8:40:b8:65:6a:fc: 79:c2:61:98:db:cc:26:94:99:09:9e:55:29:d7:15: 60:d3:14:49:9a:be:36:ab:b0:73:12:d6:7f:78:28: 95:e1:23:a1:bb:11:fc:70:7a:12:d2:76:31:65:a1: 78:c9:dc:f3:1c:1c:cf:6f:de:b8:f3:22:12:f3:97: 03:39:07:21:25:73:ee:92:18:a0:86:9c:68:89:4f: 7c:bc:8c:26:2c:e9:54:69:f1:69:3e:e0:c6:f0:7c: 06:8a:16:30:fc:40:85:16:68:e5:f3:2c:72:7c:6c: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A1:F3:4A:71:17:9D:B2:5E:F3:8D:9C:21:31:69:47:BC:C4:07:59 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4b:c6:42:ce:82:bf:1e:eb:be:c9:6a:76:dc:9e:5c:7a:a5: 86:7b:43:80:4a:65:29:46:d1:0b:71:bf:45:3a:50:98:24:6b: 51:79:dc:82:41:23:61:bd:b7:f6:d2:a3:96:af:db:04:2a:05: c4:bf:ef:6d:53:06:9f:74:3a:89:d8:b5:1a:c1:ac:62:8e:10: 77:c4:4c:a6:fd:9f:17:40:d5:1f:2e:dd:87:c3:08:5f:8c:c4: 07:26:c8:5d:58:5c:bf:4d:a6:27:7e:a8:7d:de:28:e0:b7:e2: 3a:9a:91:a3:db:5f:69:2a:3e:e3:5d:9b:bd:74:4a:7d:ce:21: 67:9a:03:e8:5f:52:52:e6:51:fa:03:c4:9a:40:61:13:13:49: 10:73:c4:0b:a8:a2:12:fd:88:fe:8b:34:ab:1f:71:09:00:d7: 70:f5:58:48:ef:a9:8c:69:26:da:f7:dc:b7:7e:b3:e4:81:53: 32:33:27:5b:5b:06:02:3f:67:8d:ce:3d:c3:f4:3b:e3:e8:1f: 39:6c:3c:79:d4:d0:5f:cd:22:2d:ff:99:a2:bc:2e:7d:0f:f7: 20:ae:ff:d7:31:ee:84:7f:41:3e:e7:6f:d1:df:84:16:47:c7: 74:08:57:f8:0e:a9:47:33:d6:bd:46:0d:c2:84:e7:43:5c:46: 9d:4d:ec:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUwODIyMjMyODM2WhcNMjUwODI5MjMyODM2WjAYMRYwFAYD VQQDEw02OGE4ZmQyNC05M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkXW3rs6LRLKc8LYNmTdt5N6zklrXYapG9+eBcWZLJsy5N6QIZM+ySfBAEP6 7E4jA+bdiY4Nebyu1BhZCBPgvJRtQbN1DG2y/I7996sfk/INScQOiT3j9FCasZIF 2p5+31ni3mZgBrARxOJYCXP1gEpt/yRkum2Ec52wfhjG0YZpc0W+NmWxiM+udale u4SoQLhlavx5wmGY28wmlJkJnlUp1xVg0xRJmr42q7BzEtZ/eCiV4SOhuxH8cHoS 0nYxZaF4ydzzHBzPb9648yIS85cDOQchJXPukhighpxoiU98vIwmLOlUafFpPuDG 8HwGihYw/ECFFmjl8yxyfGz5/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeh80px F52yXvONnCExaUe8xAdZMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6S8ZCzoK/Huu+yWp23J5ceqWGe0OASmUpRtELcb9FOlCYJGtRedyC QSNhvbf20qOWr9sEKgXEv+9tUwafdDqJ2LUawaxijhB3xEym/Z8XQNUfLt2Hwwhf jMQHJshdWFy/TaYnfqh93ijgt+I6mpGj219pKj7jXZu9dEp9ziFnmgPoX1JS5lH6 A8SaQGETE0kQc8QLqKIS/Yj+izSrH3EJANdw9VhI76mMaSba99y3frPkgVMyMydb WwYCP2eNzj3D9Dvj6B85bDx51NBfzSIt/5mivC59D/cgrv/XMe6Ef0E+52/R34QW R8d0CFf4DqlHM9a9Rg3ChOdDXEadTeyZ -----END CERTIFICATE-----Generated at Sat Aug 23 20:25:23 2025 by rpki-client