$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: U/YAeQWsmPx7ZPrMeB6h0HreuUipJEA7xUJZe/v4Y1g= Subject key identifier: 98:1A:5B:36:DB:72:DA:65:94:21:1D:4F:0E:C1:BB:A1:12:51:78:8A Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 0117 Signing time: Mon 11 Aug 2025 05:01:22 +0000 Manifest this update: Mon 11 Aug 2025 05:01:22 +0000 Manifest next update: Mon 18 Aug 2025 05:01:22 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: Z2IEkcURCwjGn865z3PFYtE1/WBWewWqomBom7rRcco=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 1uxD9+JBsmHAELgtODtowZ9H7bGY5PrdUNrrDTftS4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Aug 11 05:01:22 2025 GMT Not After : Aug 18 05:01:22 2025 GMT Subject: CN=68997922-3d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e8:5b:b0:00:11:87:99:d5:70:8e:75:52:21: 59:c3:4f:30:df:d9:fb:d4:0f:38:c4:26:59:64:d5: d6:0c:7a:56:2f:c7:c1:1d:ce:45:7f:ea:fb:5b:3f: 29:88:ed:7e:29:82:a3:00:19:cb:71:b1:be:ed:46: 1d:b9:0f:c7:dc:b7:02:9e:fa:ea:40:36:8b:97:84: 9f:fe:c3:cd:c0:da:fc:5e:3f:57:6b:d6:c9:9c:ae: 48:a2:f8:88:48:9a:ce:bc:b8:5f:e0:a9:e1:ac:50: 77:06:a9:77:16:e5:6c:33:56:21:f6:c3:d5:48:78: 39:79:e6:61:95:ec:b8:8d:30:33:7a:03:08:1b:06: e7:04:fc:08:f2:16:fa:e7:73:fe:d5:d7:ae:d0:59: 97:bd:7e:e7:ee:5a:67:3a:1d:b8:26:18:6c:82:2a: c4:34:5e:6d:bb:a0:82:0a:a8:22:91:49:2f:41:b2: f8:cb:9a:c4:d7:3d:4d:d8:93:28:80:5f:4c:60:3f: 61:66:4a:4a:77:67:04:4b:73:58:fe:c3:4f:78:98: 0a:0b:44:c3:38:d9:df:d9:49:8d:a0:b1:d9:92:ce: 46:77:69:e9:a7:96:48:25:10:27:cb:30:9d:1f:d9: b7:74:d0:e8:e9:59:67:ca:3c:88:99:b2:96:cc:0a: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1A:5B:36:DB:72:DA:65:94:21:1D:4F:0E:C1:BB:A1:12:51:78:8A X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:89:c7:23:75:41:ba:fd:d5:3e:6e:7c:a8:0c:ac:be:5d:b7: 44:fb:16:e4:88:b3:0a:2c:05:72:e6:fc:24:80:29:08:90:eb: 72:f7:2f:87:4d:de:29:e4:b2:d4:a0:55:78:f1:f3:f3:9b:be: 7f:a4:4f:5a:4a:8d:a8:5b:93:b3:64:e9:64:9e:14:e5:aa:96: 8d:4c:65:15:9a:6f:96:0f:30:75:90:13:21:26:45:e5:ad:9a: c4:5b:b3:66:ed:8a:26:ee:3f:1a:01:99:38:dc:78:4d:59:1f: 9c:b9:ce:30:41:69:48:d1:b1:25:3c:ca:eb:31:68:f2:23:37: 3a:d5:fc:41:99:9e:70:a7:68:ec:8b:67:61:81:e1:0a:a3:ba: 5d:c3:7f:0f:3b:29:c1:2a:70:08:ec:5e:da:5f:d0:60:ac:04: de:91:42:1b:1d:cc:4b:fd:d1:9d:3b:72:1d:a7:0c:88:19:2e: 8e:e3:42:b0:f1:74:e8:37:43:9f:2a:2e:9f:9d:fb:0f:00:ce: b2:b1:12:4e:55:1a:85:15:ce:bd:db:2f:bd:a3:63:93:93:34: 70:19:7f:f1:ab:ef:63:ee:ed:40:6e:f8:4b:d8:ed:22:1a:ad: cb:25:ab:ff:e7:d4:f5:a7:c9:4a:2d:18:fc:60:f3:ed:78:05: ce:dc:40:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUwODExMDUwMTIyWhcNMjUwODE4MDUwMTIyWjAYMRYwFAYD VQQDEw02ODk5NzkyMi0zZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+hbsAARh5nVcI51UiFZw08w39n71A84xCZZZNXWDHpWL8fBHc5Ff+r7Wz8p iO1+KYKjABnLcbG+7UYduQ/H3LcCnvrqQDaLl4Sf/sPNwNr8Xj9Xa9bJnK5IoviI SJrOvLhf4KnhrFB3Bql3FuVsM1Yh9sPVSHg5eeZhley4jTAzegMIGwbnBPwI8hb6 53P+1deu0FmXvX7n7lpnOh24JhhsgirENF5tu6CCCqgikUkvQbL4y5rE1z1N2JMo gF9MYD9hZkpKd2cES3NY/sNPeJgKC0TDONnf2UmNoLHZks5Gd2npp5ZIJRAnyzCd H9m3dNDo6VlnyjyImbKWzArYvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgaWzbb ctpllCEdTw7Bu6ESUXiKMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8iccjdUG6/dU+bnyoDKy+XbdE+xbkiLMKLAVy5vwkgCkIkOty9y+H Td4p5LLUoFV48fPzm75/pE9aSo2oW5OzZOlknhTlqpaNTGUVmm+WDzB1kBMhJkXl rZrEW7Nm7Yom7j8aAZk43HhNWR+cuc4wQWlI0bElPMrrMWjyIzc61fxBmZ5wp2js i2dhgeEKo7pdw38POynBKnAI7F7aX9BgrATekUIbHcxL/dGdO3IdpwyIGS6O40Kw 8XToN0OfKi6fnfsPAM6ysRJOVRqFFc692y+9o2OTkzRwGX/xq+9j7u1AbvhL2O0i Gq3LJav/59T1p8lKLRj8YPPteAXO3EAc -----END CERTIFICATE-----Generated at Wed Aug 13 05:55:19 2025 by rpki-client