$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: zoifD3BayfEhaEMLcQtm8o2GvfAgN7kqq6ZWNf48Eds= Subject key identifier: 0A:B9:5E:41:BD:35:4E:14:75:FD:C6:58:56:A9:01:53:B5:64:68:39 Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 07B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 07B2 Signing time: Fri 08 Aug 2025 21:37:44 +0000 Manifest this update: Fri 08 Aug 2025 21:37:43 +0000 Manifest next update: Fri 15 Aug 2025 21:37:43 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: 61AmncSEAf+w4gqMH/XFaZ8UNZmlL5976Ld53VZODq4=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Aug 8 21:37:43 2025 GMT Not After : Aug 15 21:37:43 2025 GMT Subject: CN=68966e27-91d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:30:9d:6f:5a:f2:29:c6:7b:78:92:2d:b6:31: 74:77:3a:8d:3f:b7:3c:58:a2:6f:4c:f6:82:ae:b0: 8c:06:97:4c:58:c3:8b:7d:6c:83:8f:30:55:3c:10: f3:d3:7b:18:66:9a:5d:a0:f3:ca:78:08:b8:25:9b: 1a:88:65:f1:b3:82:ac:db:85:2f:a6:4d:d8:28:8d: 46:e7:16:23:2a:5c:28:04:99:ad:98:2d:1b:52:9b: f1:b6:60:bb:a1:83:9a:c6:40:1e:42:2b:c4:c9:f8: a2:bc:36:d5:11:24:60:3d:a8:00:31:be:57:19:4f: f5:45:69:e7:3f:07:de:17:d6:3c:8a:b8:50:ad:d3: 4f:33:2c:e7:60:c3:a9:b2:46:81:dc:da:f2:09:2a: 4e:7d:4d:33:0a:e9:35:c1:06:0b:b8:de:ed:ad:d6: 1b:9c:50:e0:83:33:21:4d:e6:ae:f2:a1:9e:f1:ba: ac:52:dc:7f:00:0c:c3:69:3a:1c:d1:92:c0:aa:bf: b7:a2:ed:08:24:9a:8f:b2:a9:82:e4:3d:be:a9:da: ff:71:72:0e:f0:4e:f4:91:cd:28:9a:20:a3:dd:59: ce:b1:90:85:cb:16:9e:78:94:b6:90:44:1f:3e:8a: 6c:ac:cc:92:1b:fa:fa:45:10:13:b3:38:75:da:a5: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:5E:41:BD:35:4E:14:75:FD:C6:58:56:A9:01:53:B5:64:68:39 X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cd:13:5f:0e:76:91:35:56:e4:d5:29:a9:de:f1:80:89:be: ba:35:45:ab:5b:55:f1:70:57:de:fa:f4:5e:42:92:ef:d0:be: 9d:9e:a8:97:ba:aa:d5:94:17:f0:30:a7:90:31:69:08:7b:9d: e4:3a:c5:c1:29:8d:13:f4:9f:3a:45:5c:9b:a4:ba:93:f6:db: fc:e5:81:80:7f:7a:e1:da:ff:dd:ad:80:44:80:e5:21:fa:a3: 97:33:bc:bc:7a:e2:f8:9d:58:74:a1:93:b0:ca:58:d2:4a:35: 5c:bc:80:cd:16:5c:cb:58:70:fd:43:de:85:f7:9b:fd:89:c2: 97:2a:b9:5e:93:bb:a0:cc:60:11:5c:ba:ce:66:de:10:14:70: 05:e0:84:b1:1f:fb:ce:c3:94:5b:b0:3c:1d:b9:ae:25:21:19: c6:70:31:48:74:e8:f6:5c:39:ed:19:ce:2b:a1:e3:22:7a:c7: b7:15:43:05:f7:9e:9c:7b:0b:82:2b:75:59:48:64:9f:94:5e: b7:2c:cb:af:78:2b:0b:bf:69:cd:ee:3f:20:5e:4c:06:77:f0: 7b:ff:02:cd:1b:6a:a6:d6:49:fd:a8:8f:2b:e9:68:c6:5b:b1: 45:a3:8d:c9:67:2c:f1:c2:74:54:31:be:95:d6:3c:94:e9:ca: f6:7b:c5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUwODA4MjEzNzQzWhcNMjUwODE1MjEzNzQzWjAYMRYwFAYD VQQDEw02ODk2NmUyNy05MWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jCdb1ryKcZ7eJIttjF0dzqNP7c8WKJvTPaCrrCMBpdMWMOLfWyDjzBVPBDz 03sYZppdoPPKeAi4JZsaiGXxs4Ks24Uvpk3YKI1G5xYjKlwoBJmtmC0bUpvxtmC7 oYOaxkAeQivEyfiivDbVESRgPagAMb5XGU/1RWnnPwfeF9Y8irhQrdNPMyznYMOp skaB3NryCSpOfU0zCuk1wQYLuN7trdYbnFDggzMhTeau8qGe8bqsUtx/AAzDaToc 0ZLAqr+3ou0IJJqPsqmC5D2+qdr/cXIO8E70kc0omiCj3VnOsZCFyxaeeJS2kEQf PopsrMySG/r6RRATszh12qWQQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq5XkG9 NU4Udf3GWFapAVO1ZGg5MB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3zRNfDnaRNVbk1Smp3vGAib66NUWrW1XxcFfe+vReQpLv0L6dnqiX uqrVlBfwMKeQMWkIe53kOsXBKY0T9J86RVybpLqT9tv85YGAf3rh2v/drYBEgOUh +qOXM7y8euL4nVh0oZOwyljSSjVcvIDNFlzLWHD9Q96F95v9icKXKrlek7ugzGAR XLrOZt4QFHAF4ISxH/vOw5RbsDwdua4lIRnGcDFIdOj2XDntGc4roeMiese3FUMF 956cewuCK3VZSGSflF63LMuveCsLv2nN7j8gXkwGd/B7/wLNG2qm1kn9qI8r6WjG W7FFo43JZyzxwnRUMb6V1jyU6cr2e8WI -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:22 2025 by rpki-client