$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: s01a4p0f497R7XXO1nU6IKYmEY3RFlak8XW3+4j3/+c= Subject key identifier: BE:20:6D:84:70:01:42:45:1A:03:52:36:9C:EF:5F:BA:A6:C3:A8:69 Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 0196 Signing time: Sat 23 Aug 2025 03:37:18 +0000 Manifest this update: Sat 23 Aug 2025 03:37:18 +0000 Manifest next update: Sat 30 Aug 2025 03:37:18 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: QR3OBlaYNi3lvKJ22+ujuasqWZEYmeR3tRnKJN7Q4qM=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: 7UGzCq6Cb6amiBq87W5KeE/DUZqLNVV6OVzp45wF3WQ=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: ACKLgoePLs3Ke5FTi4aaIlytoIlfeMfpdj0hhLm4rHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Aug 23 03:37:18 2025 GMT Not After : Aug 30 03:37:18 2025 GMT Subject: CN=68a9376e-aacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:0e:0e:15:59:4c:ac:0a:61:d8:9c:4d:ca: 8f:e7:18:2c:0a:e5:ba:98:1f:53:2a:26:ea:08:b5: 78:98:76:48:5c:cd:3a:78:97:45:c5:98:d0:47:70: 3c:6b:81:80:4b:c0:57:db:76:29:95:b2:ee:aa:b1: 7c:5c:9a:77:c2:90:8a:10:4d:a1:f2:11:15:b8:8c: 00:41:cd:97:65:99:b8:96:a5:7d:5b:cc:83:34:f0: a2:ec:ab:33:81:37:69:fc:64:4f:62:45:e6:61:eb: 4e:7b:be:1c:9f:20:eb:7c:d2:11:9a:15:67:4a:6f: 0e:81:d2:2f:98:bb:64:91:56:4d:fd:59:75:5c:31: 05:1c:89:ae:15:e5:c0:af:1d:3e:ef:e2:77:ea:d6: b3:f4:2a:5a:ee:47:5e:92:dd:3f:ac:95:ce:15:dd: f6:82:f1:76:ef:a0:e6:cb:f7:11:2d:83:66:d3:f9: 72:43:11:38:a3:59:45:a2:69:d9:64:b9:1b:7a:3f: 4d:87:44:90:2a:63:16:86:dd:2d:84:f3:83:d2:80: 2b:9f:60:86:94:20:05:fb:0c:f5:c9:d4:28:c3:21: 79:b6:b8:c8:4c:ce:d3:fc:44:0f:87:b1:1e:e9:49: 90:24:bd:9a:a7:48:5b:21:38:4b:f4:61:81:c5:19: fc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:20:6D:84:70:01:42:45:1A:03:52:36:9C:EF:5F:BA:A6:C3:A8:69 X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1c:4a:33:11:6b:d2:fd:e3:73:af:b1:7d:d4:ca:52:21:78: 64:ee:d5:8e:ff:c9:07:5d:ca:1a:b8:6c:48:f9:01:90:e7:85: 82:3c:dc:dd:d1:26:dd:33:e2:7b:aa:ae:71:12:6b:90:bc:ca: f2:92:52:4e:84:ae:28:35:34:fb:b0:d2:e4:42:6f:57:48:eb: 40:a4:05:62:81:d8:89:2c:76:5f:9b:41:77:d8:fd:a0:a9:67: 37:f8:59:00:c5:a9:71:70:7c:40:5e:c5:c7:f5:23:a4:32:2f: e3:44:39:12:d5:17:6d:f8:c7:dc:92:f1:4a:06:2c:40:0f:26: 8d:bb:40:30:29:c8:4a:5c:7d:02:2d:32:83:79:50:eb:77:64: e0:ce:e0:57:7a:52:36:12:47:95:13:f1:3f:26:11:4a:99:8c: 9c:b7:a5:60:44:4a:3c:9a:5d:7a:f0:99:95:26:7e:55:53:d6: e0:26:d6:da:51:07:56:77:22:92:2a:23:b9:1c:42:71:72:01: f1:3e:4c:59:49:11:52:56:8c:38:e7:6d:18:c1:fb:24:3f:a0: f5:93:fd:5a:d5:e1:b6:03:07:f1:54:f0:8c:1c:6c:ca:b9:27: bf:9e:f2:fe:05:cc:5c:72:70:81:d6:ef:85:8d:86:26:19:74: 9b:a2:52:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjUwODIzMDMzNzE4WhcNMjUwODMwMDMzNzE4WjAYMRYwFAYD VQQDEw02OGE5Mzc2ZS1hYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkVMODhVZTKwKYdicTcqP5xgsCuW6mB9TKibqCLV4mHZIXM06eJdFxZjQR3A8 a4GAS8BX23YplbLuqrF8XJp3wpCKEE2h8hEVuIwAQc2XZZm4lqV9W8yDNPCi7Ksz gTdp/GRPYkXmYetOe74cnyDrfNIRmhVnSm8OgdIvmLtkkVZN/Vl1XDEFHImuFeXA rx0+7+J36taz9Cpa7kdekt0/rJXOFd32gvF276Dmy/cRLYNm0/lyQxE4o1lFomnZ ZLkbej9Nh0SQKmMWht0thPOD0oArn2CGlCAF+wz1ydQowyF5trjITM7T/EQPh7Ee 6UmQJL2ap0hbIThL9GGBxRn8tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4gbYRw AUJFGgNSNpzvX7qmw6hpMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOHEozEWvS/eNzr7F91MpSIXhk7tWO/8kHXcoauGxI+QGQ54WCPNzd 0SbdM+J7qq5xEmuQvMryklJOhK4oNTT7sNLkQm9XSOtApAVigdiJLHZfm0F32P2g qWc3+FkAxalxcHxAXsXH9SOkMi/jRDkS1Rdt+MfckvFKBixADyaNu0AwKchKXH0C LTKDeVDrd2TgzuBXelI2EkeVE/E/JhFKmYyct6VgREo8ml168JmVJn5VU9bgJtba UQdWdyKSKiO5HEJxcgHxPkxZSRFSVow4520YwfskP6D1k/1a1eG2AwfxVPCMHGzK uSe/nvL+BcxccnCB1u+FjYYmGXSbolLV -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:26 2025 by rpki-client