$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json) Hash identifier: i7IDt4zNaBjtNzombU3I1VOHRSFSw5m6gtcb25tm1OQ= Subject key identifier: CC:4D:9F:2D:EE:E2:8E:B3:73:B7:C5:7F:03:C6:FA:6C:30:2C:D4:94 Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft Manifest number: 36 Signing time: Sat 23 Aug 2025 07:55:48 +0000 Manifest this update: Sat 23 Aug 2025 07:55:48 +0000 Manifest next update: Sat 30 Aug 2025 07:55:48 +0000 Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: 7Ra7TCkI1fmg4lnY0lYAraXvBd3wSZ7DNVqpgSTpyJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Validity Not Before: Aug 23 07:55:48 2025 GMT Not After : Aug 30 07:55:48 2025 GMT Subject: CN=68a97404-97b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cf:54:55:ee:e1:9b:50:d2:28:de:31:bf:66: 42:38:20:c8:4d:3d:9d:97:3c:af:6f:9f:d7:16:8f: ed:88:d2:c1:ed:8e:40:36:45:7f:33:36:c5:9f:6a: c0:fd:8d:0a:1f:5e:04:43:db:b8:12:ac:fa:a3:7a: a6:b6:78:6a:f9:78:ff:fa:f7:0c:9b:36:c2:14:56: dc:bc:52:cd:f8:2f:ba:d4:00:c5:c1:30:9a:3f:8f: 0a:63:6f:4a:b2:3b:98:b8:63:25:d8:1e:83:9a:50: 36:a2:79:15:f1:d8:76:52:e3:9f:67:44:d7:4a:84: ec:8a:b4:67:18:3f:24:7c:2c:6e:24:f4:75:e2:48: 27:aa:24:73:e6:a0:73:7a:78:c8:c3:c7:0b:4b:f3: 16:6b:ab:5d:b4:ce:75:70:e1:ad:9a:98:8f:d7:e4: 0e:94:d6:50:bd:85:77:df:8f:4d:e5:c6:7e:1c:a0: ad:23:09:30:81:2c:33:ee:14:3f:ed:9e:ed:ee:d6: 4b:b4:b0:68:9c:da:62:e0:67:aa:0b:81:3e:5b:4c: 79:71:82:da:1e:5b:cb:e4:6d:70:88:4a:10:43:4d: 03:d3:da:8e:af:07:04:ff:78:ff:51:d8:45:dd:80: 4e:05:8f:cc:9c:79:11:3a:30:2a:b9:49:7b:7e:fc: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4D:9F:2D:EE:E2:8E:B3:73:B7:C5:7F:03:C6:FA:6C:30:2C:D4:94 X509v3 Authority Key Identifier: keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:47:25:d0:be:cd:4f:e8:8f:cd:86:67:83:fb:82:f0:ad:8b: 8a:c6:d7:9e:e7:22:00:a8:64:62:d1:f5:89:61:78:6e:24:5c: 69:4b:36:2e:9f:b4:d0:ca:17:80:98:2a:c9:55:64:fd:89:c4: 4c:6e:2d:be:64:34:aa:44:84:26:d8:db:3d:1a:5c:f7:b2:6a: 12:50:3b:07:70:a4:95:ab:80:4b:e1:a9:76:23:b9:fa:fd:12: 6d:e4:8b:f9:ef:8c:43:ac:98:64:52:f5:fb:e9:25:c6:47:54: 3f:ff:ec:b8:ee:e0:18:28:24:b3:67:ae:13:a8:d4:eb:80:14: 39:9a:94:3c:e8:da:d9:6a:48:95:3f:d3:f3:af:91:09:d9:fa: ac:ca:0a:56:c4:14:08:cb:9d:36:91:90:48:67:cb:4a:91:24: 94:77:7f:5a:1e:a5:dc:47:e3:70:1a:08:e3:97:bd:e2:6c:b9: e2:3a:36:dd:f5:7d:96:d4:f3:30:dd:ff:52:da:c3:28:3c:9c: 47:fd:aa:42:44:54:a6:da:f4:73:56:01:6d:e0:4e:60:ff:33: 39:22:72:d2:5e:8b:2f:d9:89:36:b5:06:b0:57:4a:3b:dd:b7: 69:ff:50:c0:fc:ae:4c:2f:2c:b0:2d:76:f4:a6:ad:40:ae:4c: 67:af:19:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTgyRDExMC8GA1UEBRMoRENDQjQ2RUFBRERDRDczRjVBQUZBRTBCM0YwMDJFRDky MEMwRTg3RTAeFw0yNTA4MjMwNzU1NDhaFw0yNTA4MzAwNzU1NDhaMBgxFjAUBgNV BAMTDTY4YTk3NDA0LTk3YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUz1RV7uGbUNIo3jG/ZkI4IMhNPZ2XPK9vn9cWj+2I0sHtjkA2RX8zNsWfasD9 jQofXgRD27gSrPqjeqa2eGr5eP/69wybNsIUVty8Us34L7rUAMXBMJo/jwpjb0qy O5i4YyXYHoOaUDaieRXx2HZS459nRNdKhOyKtGcYPyR8LG4k9HXiSCeqJHPmoHN6 eMjDxwtL8xZrq120znVw4a2amI/X5A6U1lC9hXffj03lxn4coK0jCTCBLDPuFD/t nu3u1ku0sGic2mLgZ6oLgT5bTHlxgtoeW8vkbXCIShBDTQPT2o6vBwT/eP9R2EXd gE4Fj8yceRE6MCq5SXt+/I01AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzE2fLe7i jrNzt8V/A8b6bDAs1JQwHwYDVR0jBBgwFoAU3MtG6q3c1z9ar64LPwAu2SDA6H4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxODJELzQwNzQ0OEJBM0I4 NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5YXI2NExQd0F1MlNEQTZI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM010RzZxM2MxejlhcjY0TFB3QXUyU0RBNkg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx ODJELzQwNzQ0OEJBM0I4NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5 YXI2NExQd0F1MlNEQTZINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVHJdC+zU/oj82GZ4P7gvCti4rG157nIgCoZGLR9YlheG4kXGlLNi6f tNDKF4CYKslVZP2JxExuLb5kNKpEhCbY2z0aXPeyahJQOwdwpJWrgEvhqXYjufr9 Em3ki/nvjEOsmGRS9fvpJcZHVD//7Lju4BgoJLNnrhOo1OuAFDmalDzo2tlqSJU/ 0/OvkQnZ+qzKClbEFAjLnTaRkEhny0qRJJR3f1oepdxH43AaCOOXveJsueI6Nt31 fZbU8zDd/1Lawyg8nEf9qkJEVKba9HNWAW3gTmD/MzkictJeiy/ZiTa1BrBXSjvd t2n/UMD8rkwvLLAtdvSmrUCuTGevGQs= -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:47 2025 by rpki-client