$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: oaS9H+sERHY/nf7g/Q6oauGQ43aBSzrbS11FUzddMIc= Subject key identifier: 1F:FA:12:78:23:1F:25:F5:8F:4B:80:BA:20:B4:CD:13:B1:BC:D2:02 Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: 64 Signing time: Sat 23 Aug 2025 07:16:47 +0000 Manifest this update: Sat 23 Aug 2025 07:16:46 +0000 Manifest next update: Sat 30 Aug 2025 07:16:46 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: yJDcpnYQQyjhwvwlf6g3+9lx3QaYdHivUs8B8W6NTFo=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: EzMoudDWuTdlnNruCHKgAEy3hjxWEtpDs8wnwjR1b6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: Aug 23 07:16:46 2025 GMT Not After : Aug 30 07:16:46 2025 GMT Subject: CN=68a96ade-2f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:63:c3:57:50:e6:28:5b:76:a9:76:52:a1: a9:6c:f5:8b:57:96:5d:7e:d0:2c:ce:28:08:d2:a3: d3:6a:fa:18:eb:7e:1b:1e:f1:8c:8b:38:6a:2f:48: ab:1c:6c:08:d1:86:d5:44:16:4c:43:f0:4d:7f:70: c1:09:43:59:e4:13:cf:1a:af:df:bd:ea:2d:d1:d4: 44:1e:9b:b5:05:ba:50:32:8a:58:23:13:c1:f2:5c: 6a:84:58:92:4f:ad:16:be:ed:a8:3d:9e:48:c4:d2: 00:89:f7:16:be:60:0c:52:83:b0:92:c9:77:d7:4d: 90:a5:33:e3:ee:08:5c:13:5d:84:2e:63:c9:28:5f: 03:e8:d3:a2:f4:db:5d:92:04:ee:50:e4:0b:74:b7: 98:16:34:7d:72:2d:a8:75:28:5f:ef:b3:70:aa:d6: a3:6f:b2:5a:4b:01:2f:01:d3:11:b3:e9:bb:6e:f4: fc:be:9e:17:cf:63:16:15:da:13:ec:9a:b4:ac:12: 38:a8:1a:e1:06:de:f1:d6:5a:ef:ca:30:b2:c5:db: 05:f4:3d:99:a4:2b:dd:27:cb:7e:58:ca:51:a5:ab: 15:17:74:6e:75:ec:23:fe:08:ba:d4:44:8d:7f:08: e5:d1:c7:aa:e4:88:d5:13:ca:30:4f:5b:3b:a5:2e: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FA:12:78:23:1F:25:F5:8F:4B:80:BA:20:B4:CD:13:B1:BC:D2:02 X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:21:a7:41:0f:cb:54:d9:8b:6c:cd:b0:5a:5b:3d:40:03:b2: 06:35:c7:26:43:15:87:76:91:90:ee:d6:11:97:26:d3:55:70: 76:9f:b2:8f:6b:8a:8f:8e:89:c7:b1:0e:61:05:8f:10:ca:59: 6d:fe:00:a8:70:09:6c:02:44:75:84:63:2e:7a:a6:18:57:66: 4d:8f:71:38:be:53:45:56:26:69:50:6e:4e:fc:1d:5a:98:72: 3b:0c:61:5d:7b:cf:a3:c4:07:c3:12:c4:ca:05:32:3e:b6:2e: 6e:9f:7b:b4:4b:e2:27:7d:f1:c9:23:a2:04:94:0e:7f:27:a0: 8a:1f:77:7b:4f:5a:5e:bb:df:9c:17:72:99:de:ef:8a:cc:eb: b4:69:1c:37:74:08:16:69:dd:1e:74:99:a3:ae:23:81:c1:2a: 67:3d:22:19:19:4f:62:ef:23:58:c6:e1:19:fa:b1:39:a0:32: 92:4d:62:c7:00:27:b8:24:c0:db:94:58:07:f5:02:80:af:6d: 72:4b:34:9c:11:2f:ee:e3:29:24:6f:d1:d0:8b:a9:0c:22:3f: 32:8b:84:02:71:48:4a:9c:2b:88:ef:90:c2:4e:9d:bd:1d:54: 90:a9:c8:5e:a5:d2:e5:0f:f1:f0:af:46:9e:ac:d3:98:b1:97: 47:7e:0e:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NEQ1NDExMC8GA1UEBRMoQUY3NjEyNTdERTJDOURBNUYzM0U3MUM2NDE5RTI2N0E4 NjJERkI2MjAeFw0yNTA4MjMwNzE2NDZaFw0yNTA4MzAwNzE2NDZaMBgxFjAUBgNV BAMTDTY4YTk2YWRlLTJmNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbn2PDV1DmKFt2qXZSoals9YtXll1+0CzOKAjSo9Nq+hjrfhse8YyLOGovSKsc bAjRhtVEFkxD8E1/cMEJQ1nkE88ar9+96i3R1EQem7UFulAyilgjE8HyXGqEWJJP rRa+7ag9nkjE0gCJ9xa+YAxSg7CSyXfXTZClM+PuCFwTXYQuY8koXwPo06L0212S BO5Q5At0t5gWNH1yLah1KF/vs3Cq1qNvslpLAS8B0xGz6btu9Py+nhfPYxYV2hPs mrSsEjioGuEG3vHWWu/KMLLF2wX0PZmkK90ny35YylGlqxUXdG517CP+CLrURI1/ COXRx6rkiNUTyjBPWzulLoB9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH/oSeCMf JfWPS4C6ILTNE7G80gIwHwYDVR0jBBgwFoAUr3YSV94snaXzPnHGQZ4meoYt+2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0RDU0L0QyODc3REI2RTlF QjExRUZBNDU0MkIxOEM0RjlBRTAyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0y SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjNZU1Y5NHNuYVh6UG5IR1FaNG1lb1l0LTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 RDU0L0QyODc3REI2RTlFQjExRUZBNDU0MkIxOEM0RjlBRTAyL3IzWVNWOTRzbmFY elBuSEdRWjRtZW9ZdC0ySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB8hp0EPy1TZi2zNsFpbPUADsgY1xyZDFYd2kZDu1hGXJtNVcHafso9r io+OicexDmEFjxDKWW3+AKhwCWwCRHWEYy56phhXZk2PcTi+U0VWJmlQbk78HVqY cjsMYV17z6PEB8MSxMoFMj62Lm6fe7RL4id98ckjogSUDn8noIofd3tPWl6735wX cpne74rM67RpHDd0CBZp3R50maOuI4HBKmc9IhkZT2LvI1jG4Rn6sTmgMpJNYscA J7gkwNuUWAf1AoCvbXJLNJwRL+7jKSRv0dCLqQwiPzKLhAJxSEqcK4jvkMJOnb0d VJCpyF6l0uUP8fCvRp6s05ixl0d+Dms= -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:14 2025 by rpki-client