$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: 18LiGNhp5c27i1MjQiATasQ7NK/pGTF6zQZiXTkf49I= Subject key identifier: F2:A4:D8:51:63:34:81:D0:A0:BC:C8:A3:08:53:3E:90:89:3F:AD:06 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 1080 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 1072 Signing time: Sun 10 Aug 2025 17:23:35 +0000 Manifest this update: Sun 10 Aug 2025 17:23:34 +0000 Manifest next update: Sun 17 Aug 2025 17:23:34 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: 8tdlMxJGHZJNOQNwwtHpaw0DLvlRJ2+XcLZ3b6MTaZM=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: 0OKa5D8R5tqflMwj5WNvymkXFrzQXgwFV3RUnRL3aD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 17:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4224 (0x1080) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Aug 10 17:23:34 2025 GMT Not After : Aug 17 17:23:34 2025 GMT Subject: CN=6898d596-d60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:8e:c5:02:56:a7:12:1f:30:e3:95:db:f5: c8:89:c1:d2:35:60:c6:ad:b6:63:82:fd:31:c3:80: 3d:7b:da:e8:5e:3c:65:3a:fc:68:69:28:aa:98:6f: 77:33:f0:9a:ad:34:61:43:90:5a:d9:6f:1e:b5:bd: 96:64:95:de:a2:48:2a:54:cf:0b:ad:8f:30:c2:07: 92:36:47:c8:67:ac:7c:c2:db:d3:bc:e4:52:21:6f: cc:ca:cf:f6:59:55:9f:0d:fe:2b:84:52:2c:37:3e: b8:e7:2e:4e:7e:ce:33:46:df:d1:3a:7f:9f:e0:70: 29:6e:9e:82:af:9c:60:ff:3a:70:4e:62:35:a3:3a: 12:aa:6a:e2:85:34:01:96:1b:81:09:8d:d2:a8:ef: f7:7f:4a:a5:22:8e:7b:b6:65:29:a1:9e:77:25:e8: f6:90:12:96:7a:ea:f3:09:31:cb:f9:6e:c4:45:db: 7b:b5:62:b5:30:e9:c9:1c:1c:9b:a8:3e:11:38:f7: 06:70:94:a8:7d:04:dc:f5:e9:4b:a0:c0:3a:32:5c: 72:51:00:d0:f8:29:15:80:bc:82:f2:3f:a6:77:7c: e6:27:4c:f8:97:29:a5:6d:23:a5:f1:f9:96:ce:67: 99:72:64:6d:ba:55:78:bf:5d:c6:5c:ef:85:5d:8e: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A4:D8:51:63:34:81:D0:A0:BC:C8:A3:08:53:3E:90:89:3F:AD:06 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:87:9e:54:2f:2f:99:99:0b:7a:aa:b3:16:0f:ad:6d:be:17: 47:5a:93:29:59:dd:62:c9:d1:42:b7:d0:ba:09:70:11:49:de: a0:53:c4:db:6d:9f:84:e3:d8:61:8a:1e:23:5b:f9:c4:f9:bb: f8:e1:1e:01:69:b5:c2:83:f7:af:4a:c2:4c:72:13:b0:73:b3: d4:4a:e6:dd:a8:68:e3:31:9e:e6:27:89:b3:d5:0a:9c:e1:4e: 61:88:97:6c:68:79:c9:8f:15:a2:34:48:91:a8:17:85:6a:d6: 6f:1c:3e:61:5b:cd:a0:e2:a4:7c:f5:98:29:4f:99:4b:d3:f4: d5:1c:a8:52:63:b7:61:24:06:ba:17:ae:2c:ad:62:01:29:a8: d7:43:7f:67:7d:a3:5b:43:32:34:bd:c3:fd:ab:47:62:76:5f: d0:6f:d5:42:af:f0:fa:2e:a9:6a:60:19:cf:ef:0a:04:c5:a2: 51:0f:d9:b7:70:a0:43:3c:86:ef:24:1c:a8:82:3f:ba:40:1b: 14:c7:5d:6a:17:1a:ae:0c:33:53:e2:d4:69:6f:2f:9a:e2:60: 5f:d3:fb:c8:a9:1d:5c:8c:59:8e:58:aa:58:c0:a1:8f:fc:09: e7:6e:b1:6d:64:4d:03:36:0e:3d:21:13:ba:72:b7:31:b6:03: 63:86:78:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUwODEwMTcyMzM0WhcNMjUwODE3MTcyMzM0WjAYMRYwFAYD VQQDEw02ODk4ZDU5Ni1kNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunKOxQJWpxIfMOOV2/XIicHSNWDGrbZjgv0xw4A9e9roXjxlOvxoaSiqmG93 M/CarTRhQ5Ba2W8etb2WZJXeokgqVM8LrY8wwgeSNkfIZ6x8wtvTvORSIW/Mys/2 WVWfDf4rhFIsNz645y5Ofs4zRt/ROn+f4HApbp6Cr5xg/zpwTmI1ozoSqmrihTQB lhuBCY3SqO/3f0qlIo57tmUpoZ53Jej2kBKWeurzCTHL+W7ERdt7tWK1MOnJHByb qD4ROPcGcJSofQTc9elLoMA6MlxyUQDQ+CkVgLyC8j+md3zmJ0z4lymlbSOl8fmW zmeZcmRtulV4v13GXO+FXY5cUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKk2FFj NIHQoLzIowhTPpCJP60GMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGh55ULy+ZmQt6qrMWD61tvhdHWpMpWd1iydFCt9C6CXARSd6gU8Tb bZ+E49hhih4jW/nE+bv44R4BabXCg/evSsJMchOwc7PUSubdqGjjMZ7mJ4mz1Qqc 4U5hiJdsaHnJjxWiNEiRqBeFatZvHD5hW82g4qR89ZgpT5lL0/TVHKhSY7dhJAa6 F64srWIBKajXQ39nfaNbQzI0vcP9q0didl/Qb9VCr/D6LqlqYBnP7woExaJRD9m3 cKBDPIbvJByogj+6QBsUx11qFxquDDNT4tRpby+a4mBf0/vIqR1cjFmOWKpYwKGP /AnnbrFtZE0DNg49IRO6crcxtgNjhnji -----END CERTIFICATE-----Generated at Tue Aug 12 14:04:12 2025 by rpki-client