$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: +shynF4/1NuRNxEnxNb+dLW07oRkuUs+WMLiR4O9Gno= Subject key identifier: 5C:0D:9F:AB:17:33:4B:BE:A9:69:88:6C:95:5A:4C:97:5E:1F:69:CF Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 04AE Signing time: Mon 11 Aug 2025 00:03:16 +0000 Manifest this update: Mon 11 Aug 2025 00:03:15 +0000 Manifest next update: Mon 18 Aug 2025 00:03:15 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: N8A3SYPXPmwbL5SoBfioKwHY3cia4z9qePIj0FWkwZA=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Aug 11 00:03:15 2025 GMT Not After : Aug 18 00:03:15 2025 GMT Subject: CN=68993344-7dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:08:92:53:71:00:78:dd:b5:91:51:5c:36: 32:07:b7:5a:6f:66:a5:78:fd:ba:0d:23:35:7b:e2: 91:1a:99:85:80:d8:59:58:81:30:83:49:4d:63:13: 12:24:45:61:ba:3f:4f:c3:de:68:86:2f:dd:7a:49: 0b:4d:01:57:90:a2:73:cf:28:4a:65:cd:7d:c5:b1: 76:63:8d:7f:0f:bc:91:14:7e:77:67:6b:7d:2b:2e: c1:df:42:4f:3a:48:e3:51:a7:fe:03:2a:b3:17:bd: 7e:89:60:be:38:00:8a:41:d6:92:25:63:7c:08:c4: 69:ba:8c:98:1a:13:33:30:d1:de:45:0a:50:c1:04: af:36:ba:a7:15:dc:ce:de:2d:46:11:f5:b6:33:80: 4a:8b:3d:37:0a:5c:3e:8e:7a:b8:46:96:5e:9d:cc: e8:86:08:30:62:40:91:32:82:38:99:a2:10:0a:10: e1:12:27:f6:5d:b7:be:27:50:6b:ea:a2:4f:db:d3: 81:4f:08:4c:77:6b:f8:e1:bb:63:bd:7b:f5:1c:00: b8:38:ac:c0:3a:6f:65:05:6c:74:ca:e1:d3:59:2b: 4a:cb:ab:23:2a:b2:db:d3:bc:05:61:13:d0:02:40: 76:0b:f4:9c:96:b7:b1:72:3e:0b:65:81:8c:3a:ec: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0D:9F:AB:17:33:4B:BE:A9:69:88:6C:95:5A:4C:97:5E:1F:69:CF X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8f:ee:dd:08:73:08:b7:ac:9c:f4:29:62:18:f8:ee:0d:1f: c9:3a:d7:8c:4d:5b:e1:e5:0e:bd:75:ac:d8:f0:58:26:5f:e5: 31:de:cb:99:fe:07:93:40:98:3b:3f:43:18:af:c4:e2:97:92: e2:37:bc:06:8a:7a:43:e1:bf:77:89:80:99:ad:69:1e:ac:47: 84:7b:0c:42:f1:28:a8:23:a1:dd:6f:37:7b:62:46:d9:95:b6: f5:c4:fd:ef:55:38:57:64:aa:78:08:d7:e0:2b:df:b5:16:9e: df:13:6a:8c:c2:36:4e:bc:78:e8:79:78:ba:62:8f:db:7f:20: 8b:04:0b:5a:f7:af:77:74:97:ef:dd:b4:dd:d1:93:79:15:65: 6c:74:93:53:2b:43:a9:7f:51:3f:05:f7:b6:9e:3d:7f:18:27: 10:0a:6c:2b:33:09:17:d6:5f:09:1b:e1:2d:1e:42:62:10:82: 5e:fb:51:f6:f4:48:ac:40:b9:9c:14:2e:90:bf:57:74:c9:33: 1a:35:8d:f7:0c:e0:69:80:f2:17:cd:35:b9:4e:c6:ef:77:cb: cb:a5:9c:46:68:db:93:5a:6e:bf:30:22:f4:29:f5:bc:fa:2d: d2:ba:20:cb:38:5a:20:7f:96:5a:c7:11:cb:e0:c5:fd:21:c9: 41:d3:bb:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUwODExMDAwMzE1WhcNMjUwODE4MDAwMzE1WjAYMRYwFAYD VQQDEw02ODk5MzM0NC03ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OMIklNxAHjdtZFRXDYyB7dab2aleP26DSM1e+KRGpmFgNhZWIEwg0lNYxMS JEVhuj9Pw95ohi/dekkLTQFXkKJzzyhKZc19xbF2Y41/D7yRFH53Z2t9Ky7B30JP OkjjUaf+AyqzF71+iWC+OACKQdaSJWN8CMRpuoyYGhMzMNHeRQpQwQSvNrqnFdzO 3i1GEfW2M4BKiz03Clw+jnq4RpZenczohggwYkCRMoI4maIQChDhEif2Xbe+J1Br 6qJP29OBTwhMd2v44btjvXv1HAC4OKzAOm9lBWx0yuHTWStKy6sjKrLb07wFYRPQ AkB2C/Sclrexcj4LZYGMOuzJFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwNn6sX M0u+qWmIbJVaTJdeH2nPMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfj+7dCHMIt6yc9CliGPjuDR/JOteMTVvh5Q69dazY8FgmX+Ux3suZ /geTQJg7P0MYr8Til5LiN7wGinpD4b93iYCZrWkerEeEewxC8SioI6Hdbzd7YkbZ lbb1xP3vVThXZKp4CNfgK9+1Fp7fE2qMwjZOvHjoeXi6Yo/bfyCLBAta9693dJfv 3bTd0ZN5FWVsdJNTK0Opf1E/Bfe2nj1/GCcQCmwrMwkX1l8JG+EtHkJiEIJe+1H2 9EisQLmcFC6Qv1d0yTMaNY33DOBpgPIXzTW5Tsbvd8vLpZxGaNuTWm6/MCL0KfW8 +i3SuiDLOFogf5ZaxxHL4MX9IclB07s3 -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:25 2025 by rpki-client