$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: xGUisE2LYXUfQ33Xbx+D3sFVp2n5g2TUy/916xjKaJM= Subject key identifier: F9:65:0D:B4:DF:29:5D:76:67:E8:DF:A3:8A:58:ED:FE:C9:51:E6:56 Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 2BF6 Signing time: Fri 08 Aug 2025 16:58:28 +0000 Manifest this update: Fri 08 Aug 2025 16:58:27 +0000 Manifest next update: Fri 15 Aug 2025 16:58:27 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: 4ZOgup6nxUPI3Xi7mc/osBqjI7PbZfZDrdNy3bpTsFA=) 2: A20F3364D9CD11EF93ACA765C4F9AE02.roa (hash: GlYsHzeq/9zAsgZDgmAiaFOhydbYqGstJVX7MNbtJFs=) 3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: zPBNAdtnIGt+ra2FI390H36UQCaUhQl2E2/fPAphoFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Aug 8 16:58:27 2025 GMT Not After : Aug 15 16:58:27 2025 GMT Subject: CN=68962cb4-9b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:ed:31:9a:bd:7a:a2:9a:23:33:e2:ca:aa: d1:a6:e2:fb:df:2b:88:65:14:87:e7:1c:58:4b:aa: 13:5e:b6:8a:84:19:d5:ea:46:2c:b4:7d:ce:3c:03: df:24:f5:3d:73:90:f4:76:5c:79:18:a0:65:e8:53: 01:c5:ea:65:8b:49:21:25:6a:59:cf:1a:21:a7:d2: 74:c1:f4:0b:6e:33:a3:4b:9d:42:ac:8e:ee:62:30: 84:92:2d:63:95:c9:17:8a:56:bc:d3:a9:76:80:89: 43:11:d2:01:08:ba:54:5d:95:d2:ec:be:c0:1e:49: 1d:71:14:99:9d:2c:1a:53:ac:ac:69:8a:50:d3:91: e1:20:70:42:be:7f:13:f9:04:a9:fe:09:9b:43:3c: a2:51:5e:64:d4:c8:c6:59:70:d8:a3:32:95:86:49: 93:6f:40:7f:a5:67:3e:b5:b9:0b:d8:15:c3:d1:86: 81:f1:f6:3d:a2:58:7c:43:65:9f:b1:94:76:5e:e5: fd:ef:e5:2f:9f:7f:94:60:4a:8f:88:50:39:a1:73: 81:bf:b8:e1:85:8e:71:74:81:ac:92:4a:66:86:cf: 41:8e:7d:ee:64:eb:ce:0f:10:15:51:2f:c0:38:d7: 40:3f:ce:ea:fc:68:53:1b:6c:52:1d:8e:55:2b:a3: ab:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:65:0D:B4:DF:29:5D:76:67:E8:DF:A3:8A:58:ED:FE:C9:51:E6:56 X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a7:7d:ce:90:c5:f7:92:5c:0c:a0:d0:0e:42:3a:47:8f:05: aa:89:a0:5d:7f:42:10:e9:65:82:25:4f:9d:63:e3:d9:03:51: 36:2e:ad:60:0e:a4:b0:d1:d6:5a:e8:73:4d:a8:ae:4a:65:01: a7:8f:ff:9c:7d:76:13:bb:81:83:40:84:85:2b:33:77:d2:13: 8d:27:85:03:ce:85:90:3e:d6:57:08:31:ce:7e:14:16:c6:8c: 18:e8:82:f5:2d:7d:b1:85:96:43:02:20:33:c4:20:a1:2d:22: 50:72:43:0e:0b:23:c8:d9:5d:a1:2a:c0:f9:23:2b:19:4d:24: 86:96:ae:f8:af:56:76:b1:60:50:80:05:fe:27:a3:6c:c0:ff: 8a:94:d9:fc:de:a7:d7:3c:f1:54:fc:d1:5b:2a:eb:1e:09:a0: 02:30:de:71:b6:c5:18:1d:33:c1:b2:4b:cd:3a:30:d7:49:7d: 40:b4:f8:0b:f1:7d:50:01:9d:0a:04:f8:5f:79:f2:e5:5f:bf: ef:30:2a:98:6e:2f:41:53:bb:c2:48:fc:4d:3d:e1:57:a6:0e: 83:6f:3f:df:e2:6b:47:c3:23:6d:e3:bd:36:92:2f:7b:06:95: 3b:81:24:65:f4:51:be:da:b9:32:63:96:e4:a7:f9:bb:0c:a0: 37:71:c1:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjUwODA4MTY1ODI3WhcNMjUwODE1MTY1ODI3WjAYMRYwFAYD VQQDEw02ODk2MmNiNC05Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNftMZq9eqKaIzPiyqrRpuL73yuIZRSH5xxYS6oTXraKhBnV6kYstH3OPAPf JPU9c5D0dlx5GKBl6FMBxepli0khJWpZzxohp9J0wfQLbjOjS51CrI7uYjCEki1j lckXila806l2gIlDEdIBCLpUXZXS7L7AHkkdcRSZnSwaU6ysaYpQ05HhIHBCvn8T +QSp/gmbQzyiUV5k1MjGWXDYozKVhkmTb0B/pWc+tbkL2BXD0YaB8fY9olh8Q2Wf sZR2XuX97+Uvn3+UYEqPiFA5oXOBv7jhhY5xdIGskkpmhs9Bjn3uZOvODxAVUS/A ONdAP87q/GhTG2xSHY5VK6OryQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPllDbTf KV12Z+jfo4pY7f7JUeZWMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1p33OkMX3klwMoNAOQjpHjwWqiaBdf0IQ6WWCJU+dY+PZA1E2Lq1g DqSw0dZa6HNNqK5KZQGnj/+cfXYTu4GDQISFKzN30hONJ4UDzoWQPtZXCDHOfhQW xowY6IL1LX2xhZZDAiAzxCChLSJQckMOCyPI2V2hKsD5IysZTSSGlq74r1Z2sWBQ gAX+J6NswP+KlNn83qfXPPFU/NFbKuseCaACMN5xtsUYHTPBskvNOjDXSX1AtPgL 8X1QAZ0KBPhfefLlX7/vMCqYbi9BU7vCSPxNPeFXpg6Dbz/f4mtHwyNt4702ki97 BpU7gSRl9FG+2rkyY5bkp/m7DKA3ccEJ -----END CERTIFICATE-----Generated at Sun Aug 10 03:57:27 2025 by rpki-client