$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: ZDhYuSAXlIOyRlPJYlm3gCh0Bg9X0cusSzIaqUbWjCw= Subject key identifier: 79:6F:50:0C:88:11:94:D2:E6:18:A8:2C:EF:32:23:C6:55:F2:25:98 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 038E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 0383 Signing time: Mon 11 Aug 2025 01:03:15 +0000 Manifest this update: Mon 11 Aug 2025 01:03:14 +0000 Manifest next update: Mon 18 Aug 2025 01:03:14 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: GVNsohcAmvTYpQ62i6dsfjrQJpYLzJxvE0QN3Mt8oLM=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Aug 11 01:03:14 2025 GMT Not After : Aug 18 01:03:14 2025 GMT Subject: CN=68994152-8230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:4a:25:ee:1f:05:69:ca:b2:2d:66:3e:99: a8:49:5c:a7:46:b3:c0:d3:ed:45:b8:d4:d3:ae:f3: 6e:e0:89:2e:fa:39:cb:e3:d5:00:77:cf:7b:1d:61: 04:13:78:85:93:15:3d:98:90:22:3c:be:a8:89:fb: 8e:09:ce:50:54:f0:46:5e:bf:fc:85:81:20:be:7e: ed:43:36:64:d8:95:13:a8:56:94:86:92:2f:85:d5: 6e:c8:4d:be:80:8d:74:01:7f:48:18:02:2a:76:cf: 2a:0e:6a:69:25:51:15:24:20:cd:a1:60:2f:e4:cf: 32:56:ed:ce:5a:99:af:c0:a9:da:7c:24:46:c7:52: de:02:76:28:91:1e:64:47:31:b3:35:02:96:70:bb: 0d:14:5a:23:e9:ed:f6:92:e6:9f:48:93:04:ed:66: 92:19:a9:9e:26:59:1c:50:ab:ed:8b:e8:ad:d6:f6: 32:03:1e:da:c3:35:38:54:4f:7d:4a:bf:43:81:58: 48:80:d9:80:c4:90:f6:40:1e:c7:09:2a:18:6b:06: e6:ce:ca:02:25:81:f4:b1:0c:8b:24:ab:f9:09:43: b1:41:7f:f8:1f:04:77:f0:da:68:e8:a6:b7:70:ab: 3f:21:f7:fc:bd:c3:a9:2d:ed:eb:19:68:cc:7d:21: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6F:50:0C:88:11:94:D2:E6:18:A8:2C:EF:32:23:C6:55:F2:25:98 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e6:cf:26:cb:95:79:bb:76:97:a4:2b:5d:9a:c5:0c:df:3b: e8:24:bf:8c:dc:31:61:14:4e:9d:0c:51:ea:c1:d5:9b:01:69: c6:a8:8a:97:6b:87:42:06:19:29:a2:5e:8f:51:7c:d5:ee:42: a2:51:70:31:62:2a:2b:6e:ab:8a:83:ca:8e:ba:88:de:e2:71: 1b:6a:00:49:78:ab:34:57:91:9a:78:f4:2f:38:50:21:63:ee: b7:96:92:af:8e:9c:92:65:1d:da:42:64:36:5d:94:c6:b7:55: fc:b7:7a:22:83:22:8a:f6:0d:3b:e5:bc:86:0f:91:af:f6:10: 6a:fc:de:0c:02:83:df:57:5f:c5:3e:c0:58:94:37:4b:2c:42: 8e:e5:20:1c:51:e0:b6:f6:7e:18:ab:7e:0d:12:32:a3:c4:7a: fe:8f:2f:44:5b:5a:b5:dd:2a:62:ee:53:ea:38:a4:61:71:3c: 2e:5a:b0:89:80:e2:ad:96:73:c0:52:5c:fa:e8:73:a3:ca:ce: 2b:2f:ec:88:89:14:53:cd:99:fc:04:03:27:89:49:10:fe:71: 56:c0:16:fd:08:9b:0a:c8:84:bc:91:d5:ae:59:86:9d:8d:99: d1:08:3e:bc:53:cf:1d:49:4d:a6:b5:21:5d:48:24:d2:30:3c: f8:be:38:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUwODExMDEwMzE0WhcNMjUwODE4MDEwMzE0WjAYMRYwFAYD VQQDEw02ODk5NDE1Mi04MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzedKJe4fBWnKsi1mPpmoSVynRrPA0+1FuNTTrvNu4Iku+jnL49UAd897HWEE E3iFkxU9mJAiPL6oifuOCc5QVPBGXr/8hYEgvn7tQzZk2JUTqFaUhpIvhdVuyE2+ gI10AX9IGAIqds8qDmppJVEVJCDNoWAv5M8yVu3OWpmvwKnafCRGx1LeAnYokR5k RzGzNQKWcLsNFFoj6e32kuafSJME7WaSGameJlkcUKvti+it1vYyAx7awzU4VE99 Sr9DgVhIgNmAxJD2QB7HCSoYawbmzsoCJYH0sQyLJKv5CUOxQX/4HwR38Npo6Ka3 cKs/Iff8vcOpLe3rGWjMfSE46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlvUAyI EZTS5hioLO8yI8ZV8iWYMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg5s8my5V5u3aXpCtdmsUM3zvoJL+M3DFhFE6dDFHqwdWbAWnGqIqX a4dCBhkpol6PUXzV7kKiUXAxYiorbquKg8qOuoje4nEbagBJeKs0V5GaePQvOFAh Y+63lpKvjpySZR3aQmQ2XZTGt1X8t3oigyKK9g075byGD5Gv9hBq/N4MAoPfV1/F PsBYlDdLLEKO5SAcUeC29n4Yq34NEjKjxHr+jy9EW1q13Spi7lPqOKRhcTwuWrCJ gOKtlnPAUlz66HOjys4rL+yIiRRTzZn8BAMniUkQ/nFWwBb9CJsKyIS8kdWuWYad jZnRCD68U88dSU2mtSFdSCTSMDz4vjjg -----END CERTIFICATE-----Generated at Mon Aug 11 04:32:07 2025 by rpki-client