$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json) Hash identifier: JmPCiCc4KJ8f0wnLKN3kwThqGp0w8K8j5qrhDKA3K5c= Subject key identifier: 5B:75:E6:70:EF:12:01:32:48:F6:24:6C:8B:67:CE:E8:46:83:8F:59 Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft Manifest number: 0F Signing time: Tue 05 Aug 2025 08:49:36 +0000 Manifest this update: Tue 05 Aug 2025 08:49:35 +0000 Manifest next update: Tue 12 Aug 2025 08:49:35 +0000 Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: Sb6tDhmaX+Fnxa3Uh/sICRyTRvR45Ut+JM47/2IpaU4=) 2: 90F60DFE63B711F0B5918E66C4F9AE02.roa (hash: lywazMdLQZ0rBOXkYhNggr86pJ03TRLPWTLqfJbXC1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Aug 5 08:49:35 2025 GMT Not After : Aug 12 08:49:35 2025 GMT Subject: CN=6891c59f-5eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:38:03:7a:67:bd:36:c0:65:21:17:e6:19: 29:30:c9:e0:f6:4f:84:6d:e0:92:19:55:c2:a4:62: e1:2a:ac:71:10:39:e7:11:8b:62:4f:27:17:9f:4c: e9:cc:ad:bc:5e:4e:03:58:88:01:1a:19:f0:cf:d2: 5a:87:21:a5:9c:61:92:be:fd:59:24:c2:21:08:4d: 6d:9d:aa:c0:67:e4:b4:7a:76:1c:4b:f1:f5:e2:46: d9:a1:ce:41:67:da:2b:78:5e:73:2b:de:5a:f2:b9: 5d:d7:65:a4:23:85:3e:17:d0:dc:b0:3f:eb:77:61: 69:71:63:1e:05:af:ff:00:c8:a9:81:ad:25:24:78: 19:43:d1:bf:66:c9:6a:77:b5:a2:27:83:c7:0d:1d: 33:f6:02:06:b9:49:b5:24:24:57:88:ca:0f:26:8e: 95:4c:0d:b6:e3:a2:91:0f:e6:21:8a:78:88:27:89: 3b:2a:73:ef:53:83:ea:bd:0d:be:55:d7:59:36:27: e3:d7:f7:0c:e5:23:d8:c6:94:53:ae:71:06:fd:8a: 65:26:c5:01:24:dd:ae:51:dc:71:1e:c6:3c:4a:89: 28:be:c6:26:40:79:70:30:c6:9e:20:eb:0c:ad:24: df:2f:40:71:9c:ea:8d:2f:86:93:f0:ec:fe:d7:59: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:75:E6:70:EF:12:01:32:48:F6:24:6C:8B:67:CE:E8:46:83:8F:59 X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d9:20:fd:ff:3e:c1:48:0f:f6:82:d2:d7:39:d6:81:0f:11: 79:5f:39:dc:2a:44:29:5e:d4:25:b1:6d:1e:da:5b:57:e3:65: d8:63:92:01:6c:c2:f3:e7:72:2e:ca:33:f2:f4:34:52:4a:83: 3f:2d:7e:2f:83:88:c3:22:0a:d9:6b:97:7e:5c:92:af:32:26: dd:28:a2:6a:06:cc:fc:d5:a8:62:c2:b2:1a:4d:c4:1a:60:3e: bf:c8:96:02:53:cc:06:e8:e1:90:58:b9:ec:77:e0:b1:3f:4f: 11:cb:f2:85:a3:6a:8d:2f:aa:26:d8:e8:c9:ca:19:54:2b:88: 2c:64:7d:8c:76:ff:cc:11:0d:85:2c:3a:23:44:44:c0:7b:1f: 87:8a:84:fe:b1:cb:ac:dc:b3:8b:ed:c4:fc:1e:fe:73:b1:2d: 1f:ee:dd:91:85:4e:f7:2e:ec:2f:ba:ab:41:0b:a1:de:85:9e: 14:f2:62:5c:fb:c4:2a:eb:03:cb:64:c7:3c:29:85:f6:31:90: 3b:dc:46:ec:40:25:fc:78:53:98:5f:ef:8b:9d:c8:23:03:f2: bf:25:16:90:7d:cf:43:73:17:c3:b7:fa:18:bc:37:e7:61:c2: be:b4:bf:5b:27:43:99:45:04:0b:96:d8:b7:b3:5a:38:a3:f2: 4c:63:22:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRBNjExMC8GA1UEBRMoNzM3NTgyRUM0RThGRTM5REY0MkMwREMyMjlCQTM3RDFC NkIzODY1QTAeFw0yNTA4MDUwODQ5MzVaFw0yNTA4MTIwODQ5MzVaMBgxFjAUBgNV BAMTDTY4OTFjNTlmLTVlYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtCTgDeme9NsBlIRfmGSkwyeD2T4Rt4JIZVcKkYuEqrHEQOecRi2JPJxefTOnM rbxeTgNYiAEaGfDP0lqHIaWcYZK+/VkkwiEITW2dqsBn5LR6dhxL8fXiRtmhzkFn 2it4XnMr3lryuV3XZaQjhT4X0NywP+t3YWlxYx4Fr/8AyKmBrSUkeBlD0b9myWp3 taIng8cNHTP2Aga5SbUkJFeIyg8mjpVMDbbjopEP5iGKeIgniTsqc+9Tg+q9Db5V 11k2J+PX9wzlI9jGlFOucQb9imUmxQEk3a5R3HEexjxKiSi+xiZAeXAwxp4g6wyt JN8vQHGc6o0vhpPw7P7XWTVRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW3XmcO8S ATJI9iRsi2fO6EaDj1kwHwYDVR0jBBgwFoAUc3WC7E6P4530LA3CKbo30bazhlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEE2LzNCNjdBRDhFNjNC NzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzNXQzdFNlA0NTMwTEEzQ0tibzMwYmF6aGxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NEE2LzNCNjdBRDhFNjNCNzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUz MExBM0NLYm8zMGJhemhsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACnZIP3/PsFID/aC0tc51oEPEXlfOdwqRCle1CWxbR7aW1fjZdhjkgFs wvPnci7KM/L0NFJKgz8tfi+DiMMiCtlrl35ckq8yJt0oomoGzPzVqGLCshpNxBpg Pr/IlgJTzAbo4ZBYuex34LE/TxHL8oWjao0vqibY6MnKGVQriCxkfYx2/8wRDYUs OiNERMB7H4eKhP6xy6zcs4vtxPwe/nOxLR/u3ZGFTvcu7C+6q0ELod6FnhTyYlz7 xCrrA8tkxzwphfYxkDvcRuxAJfx4U5hf74udyCMD8r8lFpB9z0NzF8O3+hi8N+dh wr60v1snQ5lFBAuW2LezWjij8kxjIvs= -----END CERTIFICATE-----Generated at Wed Aug 6 10:07:35 2025 by rpki-client