$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: Dt6E5TfIpY4qd8fdsCTK3KAA1GY09iUvx2D8KpILYAg= Subject key identifier: 33:24:E1:90:D4:FD:92:04:7E:21:BF:E7:0A:D5:7A:7D:94:90:86:A0 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0C81 Signing time: Tue 12 Aug 2025 18:41:41 +0000 Manifest this update: Tue 12 Aug 2025 18:41:40 +0000 Manifest next update: Tue 19 Aug 2025 18:41:40 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: F2e2vURDnQNyA3VcN1XNvjXWCabpPRQKGrVKiitW+fA=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Aug 12 18:41:40 2025 GMT Not After : Aug 19 18:41:40 2025 GMT Subject: CN=689b8ae5-9bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:85:a0:75:a7:ce:eb:92:ee:30:76:2b:d6: b5:f6:82:46:6a:27:cc:c7:0a:85:aa:2e:0f:22:cc: e2:69:c4:f6:77:30:5e:35:d1:52:71:4e:b4:13:03: f8:d0:da:6f:9e:02:45:07:cb:50:e6:d6:3e:2e:79: f1:de:13:09:4b:63:a0:c1:df:e8:17:dc:d1:b4:09: d9:9c:02:5a:9a:9f:37:98:e2:1a:d8:e3:ce:e0:7b: 57:5e:f7:4c:9f:f4:bb:e0:40:72:53:7c:e4:61:a7: ac:57:32:99:f1:c7:ae:7d:ae:5c:18:10:57:45:ed: f5:3d:b4:88:24:45:8d:35:12:c9:88:c4:f1:e3:a1: 06:89:5c:1b:22:fb:ae:2b:9a:86:df:6e:d2:73:34: 52:9f:84:52:50:2e:24:e9:6f:61:f7:42:b6:0a:7a: 5b:65:78:3a:49:6c:8e:2d:44:48:d1:ca:2b:f6:5b: cc:71:bf:d0:9e:b6:c6:0d:c7:ab:7f:49:61:ea:76: dc:17:27:b8:de:2c:43:1f:20:33:b1:00:f1:71:58: 19:25:0c:3a:9a:39:cc:e6:94:57:f6:63:98:fe:e7: 1a:fd:64:d1:b3:57:ad:35:23:10:91:c8:b7:d1:7f: b2:d6:1e:13:0b:4f:92:91:49:cf:6c:75:b8:5a:3d: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:24:E1:90:D4:FD:92:04:7E:21:BF:E7:0A:D5:7A:7D:94:90:86:A0 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:32:5f:3e:c5:26:d6:e3:9c:ad:ce:bc:e1:bf:0d:cf:e6:00: b7:7c:a6:da:01:76:90:84:a4:b8:9c:c5:ed:69:3d:0d:a2:cb: c7:b5:87:d7:78:0c:33:ba:9e:16:64:f6:8a:2e:50:73:8d:5e: 70:b7:ba:8e:f2:eb:0a:34:8a:8a:49:52:a9:5b:2a:9b:ef:04: f2:a6:b9:e9:3a:f8:07:d8:2e:ed:e0:77:00:8c:75:4e:b4:a7: ad:1e:69:ce:f2:ba:c6:cc:d6:cd:d1:52:5d:60:80:36:5c:b5: 2e:29:17:fb:fc:b2:5f:37:5d:97:5f:41:6c:d3:24:3e:98:da: 00:3f:e0:68:ee:58:7a:b2:92:94:e8:30:0f:82:13:4a:0b:93: 52:2a:1d:67:00:85:f8:ec:7c:a4:c7:b0:95:ee:35:18:d0:7a: ec:84:1c:01:5d:18:7e:7b:f4:d6:c1:07:b0:b9:ff:6d:35:da: b6:cc:89:92:f6:bb:6b:9f:74:d7:4e:d2:16:cf:b0:84:53:f3: f9:4e:d6:bb:4c:f8:1b:69:f6:93:24:c1:5a:1e:01:6e:df:ec: b5:29:e2:a5:53:4a:03:38:59:3d:0d:ad:2d:cf:34:b2:20:49: ad:07:48:52:65:5d:c0:f5:27:d8:cb:f2:e0:d1:7a:3c:7f:96: 76:d6:fc:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjUwODEyMTg0MTQwWhcNMjUwODE5MTg0MTQwWjAYMRYwFAYD VQQDEw02ODliOGFlNS05YmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkuFoHWnzuuS7jB2K9a19oJGaifMxwqFqi4PIsziacT2dzBeNdFScU60EwP4 0NpvngJFB8tQ5tY+Lnnx3hMJS2Ogwd/oF9zRtAnZnAJamp83mOIa2OPO4HtXXvdM n/S74EByU3zkYaesVzKZ8ceufa5cGBBXRe31PbSIJEWNNRLJiMTx46EGiVwbIvuu K5qG327SczRSn4RSUC4k6W9h90K2CnpbZXg6SWyOLURI0cor9lvMcb/QnrbGDcer f0lh6nbcFye43ixDHyAzsQDxcVgZJQw6mjnM5pRX9mOY/uca/WTRs1etNSMQkci3 0X+y1h4TC0+SkUnPbHW4Wj3QEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMk4ZDU /ZIEfiG/5wrVen2UkIagMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrMl8+xSbW45ytzrzhvw3P5gC3fKbaAXaQhKS4nMXtaT0NosvHtYfX eAwzup4WZPaKLlBzjV5wt7qO8usKNIqKSVKpWyqb7wTyprnpOvgH2C7t4HcAjHVO tKetHmnO8rrGzNbN0VJdYIA2XLUuKRf7/LJfN12XX0Fs0yQ+mNoAP+Bo7lh6spKU 6DAPghNKC5NSKh1nAIX47Hykx7CV7jUY0HrshBwBXRh+e/TWwQewuf9tNdq2zImS 9rtrn3TXTtIWz7CEU/P5Tta7TPgbafaTJMFaHgFu3+y1KeKlU0oDOFk9Da0tzzSy IEmtB0hSZV3A9SfYy/Lg0Xo8f5Z21vw8 -----END CERTIFICATE-----Generated at Tue Aug 12 22:52:27 2025 by rpki-client