$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: 4B/0ceOuoWgms+gL/5AMF7LOTJaj0onvE2SD+VqfAWY= Subject key identifier: 99:4A:79:DD:5F:C6:55:CD:03:8F:CC:49:CD:23:87:98:16:E1:54:61 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 164E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 1638 Signing time: Sat 02 Aug 2025 16:54:14 +0000 Manifest this update: Sat 02 Aug 2025 16:54:14 +0000 Manifest next update: Sat 09 Aug 2025 16:54:14 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: QlE9yh/5wHAK54SfgL+l0ICl8HHCgANQZXJcvvwmgRg=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5710 (0x164e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Aug 2 16:54:14 2025 GMT Not After : Aug 9 16:54:14 2025 GMT Subject: CN=688e42b6-b289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:8f:f0:3f:b7:1d:93:16:26:32:cf:b0:1e: 9e:5a:d9:8a:66:dd:ae:22:85:95:71:b7:98:67:c1: b8:0d:2a:1b:4b:f7:1d:34:72:ff:3c:d3:2b:f0:68: 11:f7:a5:1a:8b:95:8b:1b:83:13:84:c5:93:ec:36: 21:68:c5:2b:9a:87:aa:7d:f9:2b:53:b2:fc:06:25: 73:91:1a:8a:8a:d8:25:11:0b:86:63:a2:bb:4f:8c: 02:5b:02:04:74:64:ec:e0:bb:7d:9e:31:48:47:b4: f0:b3:1c:36:34:71:24:c1:0e:06:c5:06:63:97:7c: f1:a5:b1:26:8d:b3:2c:ba:ff:a8:36:33:98:ee:25: aa:d0:17:06:84:e1:0b:09:a2:aa:84:93:73:a7:10: 7c:50:c2:03:2f:84:b2:5b:fb:b5:0f:a2:52:57:46: 7e:c0:1a:94:f7:6c:d1:1f:ed:8b:fd:5b:92:15:9f: 2e:c5:ef:a9:ec:46:06:45:05:53:3b:43:8b:4f:7a: 25:39:ef:e4:89:75:58:dd:b1:b9:43:bd:d3:14:b3: 23:5d:25:c7:f7:cc:0c:67:08:88:2f:4a:17:6a:b6: e1:99:3d:00:de:ee:5e:57:d3:ed:bc:c5:12:9c:47: 47:ca:e8:ab:57:18:68:71:1a:5f:bc:f5:79:46:d9: 5e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4A:79:DD:5F:C6:55:CD:03:8F:CC:49:CD:23:87:98:16:E1:54:61 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:8e:61:98:c9:78:fb:0a:8a:b8:36:1e:73:b3:dc:4d:10:b8: 36:80:bb:be:6b:6c:53:1e:65:48:c6:a5:f4:82:95:44:b4:1b: e5:48:da:73:75:66:d2:30:10:4d:b0:ba:9e:0b:77:66:d3:1f: 1a:66:0f:08:76:f1:70:af:ea:17:76:2a:ad:d0:97:c0:ab:a2: 60:76:44:6a:74:77:1d:d4:eb:49:72:2b:6c:54:86:28:0f:08: b0:f7:bb:ae:3c:81:b1:54:47:c9:36:af:cd:5e:f1:4a:70:e5: 1b:83:51:d6:cd:73:05:67:42:76:ca:98:66:79:f6:b5:43:05: 3e:ff:8a:43:3b:0c:cd:75:5b:83:40:07:9b:64:f6:66:49:81: 58:d3:56:79:df:f9:d6:ce:8c:29:65:ce:9e:a7:f8:4e:71:3b: b1:32:68:86:09:15:93:39:b5:1e:3d:97:80:5b:46:38:ee:aa: e0:fd:45:4a:91:e0:f9:c3:aa:f1:55:07:77:97:dc:25:2f:13: 9e:9f:b3:1d:9e:49:65:87:c2:e0:2e:12:6c:98:a5:af:bc:88: 15:be:c3:bb:ba:38:9b:1a:96:30:6a:f4:cd:43:cb:22:b3:78: 93:2f:03:ba:79:3f:2c:6a:2e:6b:77:43:73:16:1a:58:e0:bc: ca:0a:38:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUwODAyMTY1NDE0WhcNMjUwODA5MTY1NDE0WjAYMRYwFAYD VQQDEw02ODhlNDJiNi1iMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6eP8D+3HZMWJjLPsB6eWtmKZt2uIoWVcbeYZ8G4DSobS/cdNHL/PNMr8GgR 96Uai5WLG4MThMWT7DYhaMUrmoeqffkrU7L8BiVzkRqKitglEQuGY6K7T4wCWwIE dGTs4Lt9njFIR7Twsxw2NHEkwQ4GxQZjl3zxpbEmjbMsuv+oNjOY7iWq0BcGhOEL CaKqhJNzpxB8UMIDL4SyW/u1D6JSV0Z+wBqU92zRH+2L/VuSFZ8uxe+p7EYGRQVT O0OLT3olOe/kiXVY3bG5Q73TFLMjXSXH98wMZwiIL0oXarbhmT0A3u5eV9PtvMUS nEdHyuirVxhocRpfvPV5RtleCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlKed1f xlXNA4/MSc0jh5gW4VRhMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAjmGYyXj7Coq4Nh5zs9xNELg2gLu+a2xTHmVIxqX0gpVEtBvlSNpz dWbSMBBNsLqeC3dm0x8aZg8IdvFwr+oXdiqt0JfAq6JgdkRqdHcd1OtJcitsVIYo Dwiw97uuPIGxVEfJNq/NXvFKcOUbg1HWzXMFZ0J2yphmefa1QwU+/4pDOwzNdVuD QAebZPZmSYFY01Z53/nWzowpZc6ep/hOcTuxMmiGCRWTObUePZeAW0Y47qrg/UVK keD5w6rxVQd3l9wlLxOen7Mdnkllh8LgLhJsmKWvvIgVvsO7ujibGpYwavTNQ8si s3iTLwO6eT8sai5rd0NzFhpY4LzKCjgw -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:58 2025 by rpki-client