$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: JUMMPt0KFWr1h7obmxManOvv8gHPNYR86WGo6AF5ZZo= Subject key identifier: 53:63:2F:6A:7F:EA:1E:F5:AD:AB:74:82:CE:2E:79:63:8F:76:49:1F Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 2540 Signing time: Fri 08 Aug 2025 16:29:15 +0000 Manifest this update: Fri 08 Aug 2025 16:29:14 +0000 Manifest next update: Fri 15 Aug 2025 16:29:14 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: l1otjjlthC4QzikwVNINFIrdhbhTHMeeIllxs+TuTj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Aug 8 16:29:14 2025 GMT Not After : Aug 15 16:29:14 2025 GMT Subject: CN=689625db-c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:af:71:9d:14:13:79:47:85:20:dd:5e:2c: ee:b1:7f:9b:5d:8d:0c:b6:23:29:a5:da:ec:12:5c: b4:3b:2c:cb:74:53:e0:f7:79:bb:0d:7c:39:82:b6: 63:b2:d4:97:5f:24:87:86:18:0b:3c:c5:18:07:84: 9a:e1:25:7e:8a:cb:ee:1e:3e:56:5d:38:6d:4a:3f: 39:4c:e2:39:d8:df:5f:c9:e9:64:30:d6:7f:5d:c5: d5:aa:b4:df:cd:c2:dd:71:dd:ea:f1:ca:23:b4:1c: e6:08:df:15:b4:02:8c:30:83:e7:0a:09:f7:ba:4a: cf:8c:c8:39:b7:cc:4f:51:86:c0:91:8f:58:c4:94: b6:9e:56:8b:e5:07:c0:86:37:fa:c4:78:5c:71:aa: 8e:f4:68:8e:34:01:37:49:12:ad:af:4e:dc:ab:cc: 99:25:2c:53:4c:26:80:54:68:08:e3:7a:a5:e6:aa: 33:9c:cb:72:39:a6:b9:4d:f5:89:2e:b8:ce:17:fe: 9d:b4:6b:4a:a1:93:19:7e:74:66:da:4d:96:bc:02: 1c:a8:8d:60:55:71:fe:43:3a:96:e6:0d:3a:ac:e5: 91:ec:da:a1:e2:25:78:35:9c:32:a1:d0:2d:bb:02: 11:8a:82:42:f9:cc:5e:22:f0:2e:74:d1:b7:32:58: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:63:2F:6A:7F:EA:1E:F5:AD:AB:74:82:CE:2E:79:63:8F:76:49:1F X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a7:2c:ba:42:31:39:9d:f9:4b:cc:9f:f7:43:03:bc:ce:8a: 7c:7b:1e:12:49:a3:21:59:3e:d8:29:0a:5f:17:41:68:2f:22: 2b:12:a6:bd:93:0f:ef:8e:36:5a:09:59:91:9a:fe:18:1c:e9: 83:ca:53:fb:54:33:27:3c:46:dc:6b:e7:50:1a:50:04:52:89: 7d:28:2c:d1:33:eb:33:6b:2b:d9:a4:df:20:04:ac:5d:85:47: 95:8c:b1:27:24:33:7e:d9:cc:1c:e0:9c:e7:db:6f:0b:01:93: be:9e:9a:7a:51:40:e0:16:f2:53:59:b1:1d:eb:a6:f4:70:f7: cb:c8:32:bd:34:13:2b:38:46:a9:7d:82:6e:42:5a:7c:8a:9f: 07:79:2a:b0:80:71:51:c9:e9:ea:23:0d:09:65:02:ac:9e:f5: a0:e8:d4:6b:5b:50:e3:99:4c:09:62:14:df:78:b4:c4:14:23: d8:47:00:9d:18:44:90:77:6e:a2:50:1e:95:7a:90:d6:6e:58: 13:a5:09:bb:8d:6c:2b:a2:45:75:a8:f8:9c:7c:3d:8d:96:6e: b8:53:85:66:7f:2d:68:7d:39:86:3e:06:dd:38:40:6b:ff:92: e2:99:f0:f7:b7:2c:7d:2a:7f:6a:6f:7e:bf:ea:a3:de:ef:9e: d6:e1:23:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUwODA4MTYyOTE0WhcNMjUwODE1MTYyOTE0WjAYMRYwFAYD VQQDEw02ODk2MjVkYi1jNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGOvcZ0UE3lHhSDdXizusX+bXY0MtiMppdrsEly0OyzLdFPg93m7DXw5grZj stSXXySHhhgLPMUYB4Sa4SV+isvuHj5WXThtSj85TOI52N9fyelkMNZ/XcXVqrTf zcLdcd3q8cojtBzmCN8VtAKMMIPnCgn3ukrPjMg5t8xPUYbAkY9YxJS2nlaL5QfA hjf6xHhccaqO9GiONAE3SRKtr07cq8yZJSxTTCaAVGgI43ql5qoznMtyOaa5TfWJ LrjOF/6dtGtKoZMZfnRm2k2WvAIcqI1gVXH+QzqW5g06rOWR7Nqh4iV4NZwyodAt uwIRioJC+cxeIvAudNG3MljWRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNjL2p/ 6h71rat0gs4ueWOPdkkfMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWpyy6QjE5nflLzJ/3QwO8zop8ex4SSaMhWT7YKQpfF0FoLyIrEqa9 kw/vjjZaCVmRmv4YHOmDylP7VDMnPEbca+dQGlAEUol9KCzRM+szayvZpN8gBKxd hUeVjLEnJDN+2cwc4Jzn228LAZO+npp6UUDgFvJTWbEd66b0cPfLyDK9NBMrOEap fYJuQlp8ip8HeSqwgHFRyenqIw0JZQKsnvWg6NRrW1DjmUwJYhTfeLTEFCPYRwCd GESQd26iUB6VepDWblgTpQm7jWwrokV1qPicfD2Nlm64U4Vmfy1ofTmGPgbdOEBr /5LimfD3tyx9Kn9qb36/6qPe757W4SOJ -----END CERTIFICATE-----Generated at Sat Aug 9 05:46:25 2025 by rpki-client