$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: YQwDvjbbhe/wEJdJIANFFMCioyvK0pg8ToYYeOwGNM8= Subject key identifier: 5A:37:4D:68:F9:2B:06:99:7C:F3:AC:27:2B:26:49:5F:95:ED:09:62 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 10AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 1963 Signing time: Fri 08 Aug 2025 17:32:04 +0000 Manifest this update: Fri 08 Aug 2025 17:32:03 +0000 Manifest next update: Fri 15 Aug 2025 17:32:03 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: tn6lUp+dDYjzVFlO46mgNQeiyJRIcvEpWhZfGzwBGPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Aug 8 17:32:03 2025 GMT Not After : Aug 15 17:32:03 2025 GMT Subject: CN=68963494-2b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:bf:ea:24:99:0d:ba:52:45:96:8b:e3:b4: db:62:db:3f:7c:d9:0a:de:40:97:4a:9c:07:30:f5: e8:56:19:8f:d4:19:f3:3f:e2:1f:0d:76:56:a4:0c: 87:c0:09:2b:f1:d5:f2:0b:08:96:2f:fe:60:4e:c7: 33:15:53:97:13:2c:14:54:73:9f:31:e6:3e:81:fe: 36:61:5a:b8:52:f4:4a:b8:51:15:41:4c:3f:81:57: f8:f9:4e:c1:8a:0d:ec:94:fc:f8:8a:ba:13:e5:c2: 9c:04:e0:fb:ef:d9:6c:b7:71:29:34:9a:22:71:39: 53:ee:29:58:e1:c8:e1:64:a0:ca:c0:39:64:fa:8d: f6:85:d2:6c:7b:28:a8:c0:a1:c9:79:98:1a:cc:4f: 0c:fa:af:e4:4a:3d:5c:bb:a0:6f:2b:1b:b9:ef:d9: 41:23:2f:02:08:16:82:0a:2e:1a:29:33:cb:83:79: bd:02:b3:75:ed:17:de:6c:a9:72:66:a7:f9:dc:0f: c0:4f:01:d5:c2:cd:60:03:37:6c:87:db:69:0e:3e: 83:45:ea:b8:da:01:0d:c1:ad:77:70:8e:10:ee:00: 2e:cc:4b:1f:70:14:63:57:0e:6e:8f:f9:04:02:62: 89:c2:68:c2:9d:a1:a7:86:78:6f:d9:cc:e0:90:58: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:37:4D:68:F9:2B:06:99:7C:F3:AC:27:2B:26:49:5F:95:ED:09:62 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ae:13:b5:ea:be:a5:2f:e3:ec:d0:d2:e3:84:a7:1e:05:28: a7:91:d7:63:96:dd:f9:a1:fc:a6:a8:3f:85:ed:e8:bc:44:b7: a5:73:23:a6:56:34:6b:8c:cb:6b:2f:d2:ca:15:60:88:20:23: 40:df:c5:1a:90:37:7c:c7:8b:50:c4:c1:c3:49:9b:7c:e9:c2: 48:80:f4:58:70:1c:91:44:fd:88:dd:b3:ec:c0:ef:15:10:5e: 52:71:01:b9:e4:50:37:27:40:ac:9b:10:bb:49:39:7d:8f:a1: e2:22:bd:a2:a2:55:6c:5e:59:5c:fe:30:94:04:d8:b1:3b:c1: e6:83:c0:91:23:98:b6:97:1a:c2:8e:21:42:aa:08:01:6d:1f: 3e:25:8e:0c:07:19:c3:6e:81:77:f8:5c:4d:89:c9:72:ca:c8: ab:f6:ae:0f:a4:58:0a:13:2b:03:b2:7d:53:b9:c5:fd:5d:24: f3:ff:29:fd:ca:1c:e9:17:d7:06:65:63:45:1c:54:82:9e:d8: 8b:44:fc:7e:42:4e:bf:ae:37:f2:0e:6e:c5:17:2d:a2:91:01: a4:6a:25:93:d6:4d:2b:dc:11:bf:a3:16:7b:e6:37:27:f8:1f: a7:c9:62:e6:8f:0c:dd:8e:93:41:05:eb:af:c2:2c:68:19:8f: 1f:84:99:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjUwODA4MTczMjAzWhcNMjUwODE1MTczMjAzWjAYMRYwFAYD VQQDEw02ODk2MzQ5NC0yYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpa/6iSZDbpSRZaL47TbYts/fNkK3kCXSpwHMPXoVhmP1BnzP+IfDXZWpAyH wAkr8dXyCwiWL/5gTsczFVOXEywUVHOfMeY+gf42YVq4UvRKuFEVQUw/gVf4+U7B ig3slPz4iroT5cKcBOD779lst3EpNJoicTlT7ilY4cjhZKDKwDlk+o32hdJseyio wKHJeZgazE8M+q/kSj1cu6BvKxu579lBIy8CCBaCCi4aKTPLg3m9ArN17RfebKly Zqf53A/ATwHVws1gAzdsh9tpDj6DReq42gENwa13cI4Q7gAuzEsfcBRjVw5uj/kE AmKJwmjCnaGnhnhv2czgkFiMSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo3TWj5 KwaZfPOsJysmSV+V7QliMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqrhO16r6lL+Ps0NLjhKceBSinkddjlt35ofymqD+F7ei8RLelcyOm VjRrjMtrL9LKFWCIICNA38UakDd8x4tQxMHDSZt86cJIgPRYcByRRP2I3bPswO8V EF5ScQG55FA3J0CsmxC7STl9j6HiIr2iolVsXllc/jCUBNixO8Hmg8CRI5i2lxrC jiFCqggBbR8+JY4MBxnDboF3+FxNiclyysir9q4PpFgKEysDsn1TucX9XSTz/yn9 yhzpF9cGZWNFHFSCntiLRPx+Qk6/rjfyDm7FFy2ikQGkaiWT1k0r3BG/oxZ75jcn +B+nyWLmjwzdjpNBBeuvwixoGY8fhJmh -----END CERTIFICATE-----Generated at Sat Aug 9 14:27:01 2025 by rpki-client