$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: 4Tz9bWXN4LW3cqStUEJ2or6fhBSullXA/NLdpnBKOyQ= Subject key identifier: 48:FB:A3:1B:35:91:82:FA:8B:F4:F5:70:75:0B:A0:40:F6:2C:5E:E8 Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: 2B Signing time: Sat 09 Aug 2025 08:14:37 +0000 Manifest this update: Sat 09 Aug 2025 08:14:37 +0000 Manifest next update: Sat 16 Aug 2025 08:14:36 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: DjWFcQMGcePa3g/6EambSRk2W/hZAJtlCtsjPz9zRlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: Aug 9 08:14:37 2025 GMT Not After : Aug 16 08:14:36 2025 GMT Subject: CN=6897036d-85cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0b:90:2f:72:7f:ac:c5:c8:3a:ec:72:27:21: 0a:35:a7:b0:ed:47:c1:35:58:67:94:b7:63:94:3e: 2d:1d:aa:5c:12:61:b8:f3:5d:95:3e:0a:6e:43:35: 73:e1:84:c7:79:4c:ef:c6:4d:7d:e6:01:1a:a0:11: b5:5f:56:8d:dc:97:62:b3:16:46:56:b1:14:9c:c0: f9:2b:f6:bb:05:6b:ad:9d:f2:b4:9b:df:c5:92:74: b4:36:36:82:fb:0a:9f:f9:fc:ec:11:06:f8:d4:f5: 5a:5a:8f:6b:35:1c:e4:f8:8d:a4:5e:57:2e:fd:53: fa:74:8e:1f:96:5d:58:f1:0a:90:22:d5:55:2d:64: 41:29:5c:a7:e3:f3:1a:e0:89:bb:86:05:db:ec:cd: 1e:d9:3c:2e:d5:31:f2:90:e8:f1:1a:36:8d:23:8d: 1c:5d:11:e9:22:68:84:fd:c7:63:e8:81:ea:9a:07: 58:3d:12:08:b3:0d:cc:33:42:65:1e:04:27:b6:b5: 3c:fa:a2:2d:9a:be:d8:9e:ff:ed:3c:82:6e:ba:fd: e9:6d:67:26:d1:06:c9:88:12:24:4c:2c:7a:3f:b1: be:86:e8:3b:13:98:96:95:75:4d:6c:12:b0:1c:a1: cd:a8:0b:ed:60:36:a9:d4:29:fb:3a:8d:2a:e2:e2: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FB:A3:1B:35:91:82:FA:8B:F4:F5:70:75:0B:A0:40:F6:2C:5E:E8 X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d2:38:fb:eb:b4:26:da:bd:27:32:fc:f9:81:1e:a9:e5:60: c5:b5:b7:ae:65:3e:eb:4c:3c:fd:41:20:67:cc:d5:01:b0:f7: 82:25:9e:a1:c7:eb:3c:cd:55:7e:f7:f9:00:e6:df:5d:45:52: 4f:35:39:91:cc:e5:f0:9e:39:55:50:25:a5:10:12:6e:85:05: cf:e0:a9:74:09:22:28:c2:6b:d6:53:47:a5:0c:21:4b:d5:31: 96:bf:03:a1:3c:27:2e:ac:6d:f3:3e:69:bf:ef:40:f2:0c:33: e9:62:ac:ef:13:cb:cb:86:60:08:a4:eb:30:e1:9b:75:b9:2a: c8:2b:27:de:2d:84:2c:2f:d0:9c:68:06:18:78:b5:3c:f8:09: 62:3d:ba:53:a4:cc:7e:f4:ca:c0:b6:c0:41:99:6e:fb:38:92: 37:63:6c:0c:ab:ac:2f:96:e6:8d:dd:d7:f5:b1:b5:37:43:89: 3d:c3:8e:bc:22:01:c1:3f:62:dd:c7:ad:c9:81:6a:dd:01:18: a6:51:1f:b6:ec:76:d8:c3:10:7e:cf:bf:07:e1:85:99:f8:f7: 4c:d7:ae:f0:a8:1d:f1:99:2e:d6:41:e5:a5:f8:22:c3:a8:ad: f8:19:78:3c:4c:75:62:05:df:c4:c3:bf:d2:80:95:8b:56:82: 5e:42:5f:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoRENFQjlCNkQ4M0ZCMDJEQzQ1RTkyMDM1MzhBNUM4QUY2 Rjk0MUZBOTAeFw0yNTA4MDkwODE0MzdaFw0yNTA4MTYwODE0MzZaMBgxFjAUBgNV BAMTDTY4OTcwMzZkLTg1Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvC5Avcn+sxcg67HInIQo1p7DtR8E1WGeUt2OUPi0dqlwSYbjzXZU+Cm5DNXPh hMd5TO/GTX3mARqgEbVfVo3cl2KzFkZWsRScwPkr9rsFa62d8rSb38WSdLQ2NoL7 Cp/5/OwRBvjU9Vpaj2s1HOT4jaReVy79U/p0jh+WXVjxCpAi1VUtZEEpXKfj8xrg ibuGBdvszR7ZPC7VMfKQ6PEaNo0jjRxdEekiaIT9x2PogeqaB1g9EgizDcwzQmUe BCe2tTz6oi2avtie/+08gm66/eltZybRBsmIEiRMLHo/sb6G6DsTmJaVdU1sErAc oc2oC+1gNqnUKfs6jSri4kKNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSPujGzWR gvqL9PVwdQugQPYsXugwHwYDVR0jBBgwFoAU3OubbYP7AtxF6SA1OKXIr2+UH6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzEyMzg0QURFMzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM091YmJZUDdBdHhGNlNBMU9LWElyMi1VSDZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzEyMzg0QURFMzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4 RjZTQTFPS1hJcjItVUg2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/SOPvrtCbavScy/PmBHqnlYMW1t65lPutMPP1BIGfM1QGw94IlnqHH 6zzNVX73+QDm311FUk81OZHM5fCeOVVQJaUQEm6FBc/gqXQJIijCa9ZTR6UMIUvV MZa/A6E8Jy6sbfM+ab/vQPIMM+lirO8Ty8uGYAik6zDhm3W5KsgrJ94thCwv0Jxo Bhh4tTz4CWI9ulOkzH70ysC2wEGZbvs4kjdjbAyrrC+W5o3d1/WxtTdDiT3Djrwi AcE/Yt3HrcmBat0BGKZRH7bsdtjDEH7PvwfhhZn490zXrvCoHfGZLtZB5aX4IsOo rfgZeDxMdWIF38TDv9KAlYtWgl5CXw4= -----END CERTIFICATE-----Generated at Sat Aug 9 23:15:03 2025 by rpki-client