$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: GPgH/FIe+EawbabP1fRIpGTZHEI0CO2g+1EVvwPZg8o= Subject key identifier: EC:4A:E3:FF:02:44:21:F1:54:FA:49:54:81:10:2A:84:4E:A3:A5:DD Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 04D4 Signing time: Sat 09 Aug 2025 00:16:35 +0000 Manifest this update: Sat 09 Aug 2025 00:16:35 +0000 Manifest next update: Sat 16 Aug 2025 00:16:35 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: fw+ZmsRlRmGcsNSxScSQPEw/Qz5hbGf8esEvMpPjFnI=) 2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: ES0KtplnGhM27Vh/hroAKpFu+jIJhHlyayZgnN5P/Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: Aug 9 00:16:35 2025 GMT Not After : Aug 16 00:16:35 2025 GMT Subject: CN=68969363-bbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:a1:86:08:fd:26:2c:c4:2d:c1:c2:4a:3f: 0a:ce:99:3b:56:04:ff:99:c5:f5:ca:0d:3c:54:c9: 00:e7:67:7d:97:8d:ee:b2:1e:33:e0:01:c9:f6:c5: 4f:83:43:56:9b:5a:65:be:9c:47:f5:9a:a2:33:0c: 9e:e8:40:fe:86:58:6c:34:8a:4f:ad:3c:ae:b1:88: 81:1c:8c:d2:c3:94:d1:9c:43:c9:1a:cd:8c:5e:21: 37:0d:a6:6b:52:f1:cc:fd:59:c6:69:e8:1c:95:2a: 09:57:76:ef:3e:f5:e3:2d:d4:dd:53:fa:b4:32:19: 84:ce:80:97:52:e6:eb:8c:cb:53:22:70:41:72:a3: 1d:18:fc:3c:93:c5:ab:12:6a:94:6d:97:58:a0:32: 3c:16:af:57:42:2d:e5:87:b1:1e:1d:91:36:4f:d6: 42:ae:c8:e0:8f:9f:df:0c:da:33:fb:31:f1:d5:6e: d3:17:1d:ab:8c:a7:7c:cc:03:f5:f8:b3:ce:55:63: 57:b6:46:6b:d9:2e:62:ff:4e:dc:11:8b:fd:6c:e4: 06:57:8d:d4:37:0d:7d:4e:21:de:f3:7b:90:ad:e5: 6b:4f:e1:93:92:bb:03:a7:b7:fd:80:73:fb:00:0a: db:67:8d:dc:4f:33:f1:76:64:ee:3c:44:cc:7e:02: 2a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4A:E3:FF:02:44:21:F1:54:FA:49:54:81:10:2A:84:4E:A3:A5:DD X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5c:c2:da:86:8d:9d:2f:15:f7:24:8c:8b:03:bf:61:fd:0e: 66:30:76:2d:3e:c6:de:d6:2e:09:7a:af:f5:8e:49:b8:69:78: b6:a3:f4:76:04:2c:d5:ab:28:ff:06:33:02:4a:3c:32:5a:57: 4b:99:bd:6f:91:8d:73:4c:0e:87:9b:10:61:c0:a5:90:8e:97: 9b:c1:d7:9b:00:48:0f:5e:9c:98:0f:b7:f6:a6:95:31:60:79: c2:82:5c:a8:0a:a4:e3:ec:3d:ce:3e:8f:14:d5:e1:56:02:67: 3b:7c:48:4b:29:1c:df:07:31:24:09:1f:34:be:df:60:a8:10: c2:5e:c8:30:dd:31:78:d5:a6:de:7d:97:1f:61:d9:b7:13:73: cc:13:40:81:a1:b4:04:2b:e2:9f:cf:8d:b2:9e:3c:d8:8a:d0: 98:bb:0e:83:de:a1:38:86:91:3e:88:9b:0e:fe:39:16:a6:56: 52:ff:0b:39:4c:a7:b1:7d:33:e8:7e:44:15:71:a0:da:5c:42: a8:0b:9c:ca:62:99:05:7e:6a:7f:79:01:bb:52:4d:c4:01:e7: 2d:70:1c:13:77:bd:35:ed:e2:b2:a2:cc:3b:23:26:43:bc:49: 93:74:a2:b7:e3:d1:fc:12:bd:a4:09:0e:45:31:74:b0:e6:34: a0:4d:42:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjUwODA5MDAxNjM1WhcNMjUwODE2MDAxNjM1WjAYMRYwFAYD VQQDEw02ODk2OTM2My1iYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkh6hhgj9JizELcHCSj8Kzpk7VgT/mcX1yg08VMkA52d9l43ush4z4AHJ9sVP g0NWm1plvpxH9ZqiMwye6ED+hlhsNIpPrTyusYiBHIzSw5TRnEPJGs2MXiE3DaZr UvHM/VnGaegclSoJV3bvPvXjLdTdU/q0MhmEzoCXUubrjMtTInBBcqMdGPw8k8Wr EmqUbZdYoDI8Fq9XQi3lh7EeHZE2T9ZCrsjgj5/fDNoz+zHx1W7TFx2rjKd8zAP1 +LPOVWNXtkZr2S5i/07cEYv9bOQGV43UNw19TiHe83uQreVrT+GTkrsDp7f9gHP7 AArbZ43cTzPxdmTuPETMfgIqfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxK4/8C RCHxVPpJVIEQKoROo6XdMB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuXMLaho2dLxX3JIyLA79h/Q5mMHYtPsbe1i4Jeq/1jkm4aXi2o/R2 BCzVqyj/BjMCSjwyWldLmb1vkY1zTA6HmxBhwKWQjpebwdebAEgPXpyYD7f2ppUx YHnCglyoCqTj7D3OPo8U1eFWAmc7fEhLKRzfBzEkCR80vt9gqBDCXsgw3TF41abe fZcfYdm3E3PME0CBobQEK+Kfz42ynjzYitCYuw6D3qE4hpE+iJsO/jkWplZS/ws5 TKexfTPofkQVcaDaXEKoC5zKYpkFfmp/eQG7Uk3EAectcBwTd7017eKyosw7IyZD vEmTdKK349H8Er2kCQ5FMXSw5jSgTUIi -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:06 2025 by rpki-client