$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: CscS4Xno4743lVYDdCSMj32ss5lxTxhdbif1vxsXFWQ= Subject key identifier: 2B:C5:45:CF:3B:06:A4:53:9E:82:BF:60:B0:19:4B:11:CE:AF:01:C2 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1BF3 Signing time: Sun 10 Aug 2025 16:11:17 +0000 Manifest this update: Sun 10 Aug 2025 16:11:16 +0000 Manifest next update: Sun 17 Aug 2025 16:11:16 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: ThKEyQVgwC676vFcG5qOae/+c2YXYnf1m9u5BWTtIEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7155 (0x1bf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Aug 10 16:11:16 2025 GMT Not After : Aug 17 16:11:16 2025 GMT Subject: CN=6898c4a4-811d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:cb:d1:6e:be:b1:91:d0:d6:00:58:e6:8f: be:d5:dd:55:4c:e6:d3:af:4b:1a:e3:c4:ab:ab:f2: 5f:8d:b5:34:b4:c4:05:6b:91:52:48:50:4a:ee:f6: 8b:f3:83:79:6e:41:f3:1b:ae:0a:51:26:0e:a7:9e: 83:6a:77:03:75:ad:d5:c8:d8:0f:f7:b9:c4:a5:74: 2d:31:41:d8:4d:db:11:f7:33:9a:62:fe:79:66:da: 23:16:3f:f6:aa:d5:e8:0d:58:f6:70:9c:6c:e1:86: 82:06:91:13:e8:b2:f3:94:00:36:65:12:76:59:32: e8:79:e8:d4:fa:cd:bd:b7:51:9c:34:0c:dd:b3:d5: 28:5a:95:1e:50:44:88:26:62:a9:31:43:71:45:15: 6b:ff:24:3e:16:a0:ec:84:3c:d5:da:39:98:bf:92: 23:d0:b3:9f:1f:c3:15:ac:ad:54:04:e2:52:1c:5f: 7e:f5:7c:06:d2:bc:7c:ef:09:fc:3c:ca:3c:f1:30: 6b:7f:d5:f6:41:6d:24:e7:d9:49:fc:4c:ad:5c:13: 33:03:eb:a6:ab:4d:40:12:78:f5:aa:18:65:31:90: 35:87:f9:09:a7:6e:ce:99:8c:f4:6e:f0:46:b7:2b: ff:f4:f6:c5:bd:92:03:4a:67:29:cf:d8:2c:fc:99: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C5:45:CF:3B:06:A4:53:9E:82:BF:60:B0:19:4B:11:CE:AF:01:C2 X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:81:e5:ff:e0:70:81:36:a2:81:d0:ea:e1:b4:78:1e:13:8f: 7e:79:9f:80:71:ab:bc:68:fa:09:01:01:17:3e:c9:95:51:5f: 58:a5:7d:b2:51:e8:32:15:d1:23:83:ac:9c:c7:9d:63:78:59: a4:21:be:52:1b:b6:73:0b:1f:d5:6d:27:0f:bb:93:b5:34:6f: 57:c8:12:08:b8:a2:af:d2:bd:bb:67:0d:59:fc:ab:b6:4d:88: 26:39:0b:c6:8c:11:48:b0:7b:41:5c:77:29:bb:e9:79:af:01: cc:d7:a2:00:67:16:3b:0c:23:b8:0e:fe:13:79:25:c6:5f:7a: 06:86:cd:b2:cd:ae:fb:4a:d6:34:c0:41:2e:55:43:a2:ec:93: 19:9f:ce:ce:1a:4b:2b:3f:a8:9c:ec:6e:bc:a6:cf:03:51:df: a3:44:d8:f6:c1:e6:aa:03:61:c9:1d:64:5e:4d:da:62:f6:9c: 00:f7:a0:ec:71:bd:0f:52:89:a3:f5:28:38:e7:6d:23:09:5f: 78:02:a1:9f:36:c3:83:5d:3b:d6:a5:e3:a8:cb:b3:2a:87:6b: 45:cc:bd:54:3f:43:ad:3d:c8:13:52:51:b1:5f:11:76:0f:ed: 85:fe:7b:ab:78:fe:11:d7:98:d7:91:fa:4d:0b:bb:cd:02:c2: 82:af:4c:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUwODEwMTYxMTE2WhcNMjUwODE3MTYxMTE2WjAYMRYwFAYD VQQDEw02ODk4YzRhNC04MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg/L0W6+sZHQ1gBY5o++1d1VTObTr0sa48Srq/JfjbU0tMQFa5FSSFBK7vaL 84N5bkHzG64KUSYOp56DancDda3VyNgP97nEpXQtMUHYTdsR9zOaYv55ZtojFj/2 qtXoDVj2cJxs4YaCBpET6LLzlAA2ZRJ2WTLoeejU+s29t1GcNAzds9UoWpUeUESI JmKpMUNxRRVr/yQ+FqDshDzV2jmYv5Ij0LOfH8MVrK1UBOJSHF9+9XwG0rx87wn8 PMo88TBrf9X2QW0k59lJ/EytXBMzA+umq01AEnj1qhhlMZA1h/kJp27OmYz0bvBG tyv/9PbFvZIDSmcpz9gs/JmNKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvFRc87 BqRTnoK/YLAZSxHOrwHCMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLgeX/4HCBNqKB0OrhtHgeE49+eZ+Acau8aPoJAQEXPsmVUV9YpX2y UegyFdEjg6ycx51jeFmkIb5SG7ZzCx/VbScPu5O1NG9XyBIIuKKv0r27Zw1Z/Ku2 TYgmOQvGjBFIsHtBXHcpu+l5rwHM16IAZxY7DCO4Dv4TeSXGX3oGhs2yza77StY0 wEEuVUOi7JMZn87OGksrP6ic7G68ps8DUd+jRNj2weaqA2HJHWReTdpi9pwA96Ds cb0PUomj9Sg4520jCV94AqGfNsODXTvWpeOoy7Mqh2tFzL1UP0OtPcgTUlGxXxF2 D+2F/nureP4R15jXkfpNC7vNAsKCr0yd -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:46 2025 by rpki-client