$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: agP07PVy1muDOf3DQhKA12HiSbpg2QYtJKO1AQEb6lQ= Subject key identifier: 07:80:1F:6C:50:69:08:6B:23:94:55:3D:68:C1:58:3F:4B:0E:D6:C0 Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 012A Signing time: Sat 23 Aug 2025 04:49:41 +0000 Manifest this update: Sat 23 Aug 2025 04:49:41 +0000 Manifest next update: Sat 30 Aug 2025 04:49:41 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: uRKorrRxsQQIfaDfmH5Hs1wA3pZNEJRsowcfIXBq5Ww=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Aug 23 04:49:41 2025 GMT Not After : Aug 30 04:49:41 2025 GMT Subject: CN=68a94865-a5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:3b:5e:c5:5d:a2:1c:db:13:70:92:b6:ab: a0:95:9b:bd:1b:fb:de:95:e2:9a:b2:86:4f:de:cd: 71:18:f4:f1:50:63:b5:04:14:9c:0f:f3:a9:1b:9b: 75:2c:ee:6e:8a:fa:cb:07:d3:8c:d9:9c:9d:94:31: 66:ed:59:c5:92:7a:99:c9:49:f6:48:85:85:5c:33: 3b:48:81:68:22:6a:60:2e:f8:5e:fb:86:87:59:6b: 70:60:d4:d9:8b:b8:c3:2b:5f:97:db:cc:28:bb:5d: 05:29:a6:83:ed:ba:1b:ac:14:47:a8:54:ae:d7:2f: bb:fa:4c:11:4b:e5:f8:2c:ed:3e:58:cb:8d:54:79: b4:89:d1:fe:a4:6a:30:8e:7f:78:2c:4c:43:91:ae: 32:fe:f5:3d:0d:7b:51:f1:59:1b:10:be:a7:cb:53: 20:fe:63:58:83:ec:a9:a5:12:1e:8c:0f:49:0c:3b: c7:9c:ec:8a:a5:45:1d:d4:f6:2e:49:e1:d3:5f:9f: 21:15:d2:b7:76:75:6a:ae:e2:8a:4f:98:3b:26:4a: c4:3f:ea:25:4e:59:77:32:1c:45:85:92:41:44:c2: 69:f3:85:4b:ca:b5:de:92:de:08:7b:a3:cf:5c:38: fb:23:28:1d:48:16:39:a1:ce:19:c3:68:28:3e:13: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:80:1F:6C:50:69:08:6B:23:94:55:3D:68:C1:58:3F:4B:0E:D6:C0 X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4d:81:fa:40:7e:4d:6f:40:10:c4:2b:01:3b:87:70:41:a4: a3:12:87:a0:b7:86:33:cb:a4:69:5c:1e:e1:d3:9d:84:42:8b: fc:e0:41:9e:3e:de:47:b8:b7:ab:d9:ff:3a:a4:3a:30:b7:d4: a2:55:20:da:2c:21:14:d0:3f:b2:bb:d9:7d:60:7b:ba:11:a3: 90:dc:c4:93:cf:12:fc:6d:87:6c:11:5e:50:e2:b2:d8:06:cd: 1d:a4:cb:9b:20:71:4f:cc:f4:b9:b5:64:e1:f9:69:be:57:31: d0:2d:8e:fb:ea:6c:19:f2:f5:f7:66:a1:a2:ed:11:97:58:af: 35:fb:92:74:3c:0f:61:ed:83:04:85:e4:4d:9e:5e:1b:72:18: 78:2b:7d:6e:8f:a5:03:40:c2:46:ee:7d:f3:11:fc:4f:c0:8d: a2:4e:39:fe:8e:b5:d5:15:39:7f:f4:95:37:30:f5:63:7b:88: 75:bc:58:1a:6d:60:9a:fb:25:03:28:a4:41:b6:95:9f:99:04: ea:40:bb:b7:80:2b:e6:69:72:2c:79:a5:e0:44:a9:23:b0:31: 42:b4:81:62:8e:9a:a5:71:7c:db:11:31:5d:fc:a1:5e:f3:37: 53:ef:ac:48:de:7c:a9:b9:12:77:94:5d:ab:0a:ef:d7:e4:9f: 60:64:6d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUwODIzMDQ0OTQxWhcNMjUwODMwMDQ0OTQxWjAYMRYwFAYD VQQDEw02OGE5NDg2NS1hNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1w7XsVdohzbE3CStquglZu9G/veleKasoZP3s1xGPTxUGO1BBScD/OpG5t1 LO5uivrLB9OM2ZydlDFm7VnFknqZyUn2SIWFXDM7SIFoImpgLvhe+4aHWWtwYNTZ i7jDK1+X28wou10FKaaD7bobrBRHqFSu1y+7+kwRS+X4LO0+WMuNVHm0idH+pGow jn94LExDka4y/vU9DXtR8VkbEL6ny1Mg/mNYg+yppRIejA9JDDvHnOyKpUUd1PYu SeHTX58hFdK3dnVqruKKT5g7JkrEP+olTll3MhxFhZJBRMJp84VLyrXekt4Ie6PP XDj7IygdSBY5oc4Zw2goPhNVzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeAH2xQ aQhrI5RVPWjBWD9LDtbAMB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBTYH6QH5Nb0AQxCsBO4dwQaSjEoegt4Yzy6RpXB7h052EQov84EGe Pt5HuLer2f86pDowt9SiVSDaLCEU0D+yu9l9YHu6EaOQ3MSTzxL8bYdsEV5Q4rLY Bs0dpMubIHFPzPS5tWTh+Wm+VzHQLY776mwZ8vX3ZqGi7RGXWK81+5J0PA9h7YME heRNnl4bchh4K31uj6UDQMJG7n3zEfxPwI2iTjn+jrXVFTl/9JU3MPVje4h1vFga bWCa+yUDKKRBtpWfmQTqQLu3gCvmaXIseaXgRKkjsDFCtIFijpqlcXzbETFd/KFe 8zdT76xI3nypuRJ3lF2rCu/X5J9gZG0H -----END CERTIFICATE-----Generated at Sat Aug 23 21:49:31 2025 by rpki-client