$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: HogZukDsdMg3i1cWdpWfh8ilKKJMw9zegwuhUe+N5Jg= Subject key identifier: 0D:0C:23:DE:CC:D6:4C:80:07:B6:B9:90:C0:2F:56:7D:D1:40:23:BD Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 018D Signing time: Sat 09 Aug 2025 03:51:46 +0000 Manifest this update: Sat 09 Aug 2025 03:51:45 +0000 Manifest next update: Sat 16 Aug 2025 03:51:45 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: hCZeSGI8cq0S+WRJ04PNTHPfRR23jMiIWNPa7HyTk6c=) 2: F287261014C311EE89C2C021C4F9AE02.roa (hash: OFdCpcqmoBow8dq1SGBZY5AJXKW9hjQG9lmYnQqhjrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Aug 9 03:51:45 2025 GMT Not After : Aug 16 03:51:45 2025 GMT Subject: CN=6896c5d1-3674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:be:97:20:3a:87:78:26:aa:3c:73:68:59:2c: ca:25:41:f9:3a:67:6e:83:02:3a:36:94:8b:42:65: 29:c1:a6:2a:be:b0:f5:49:7c:0c:74:06:1c:60:cb: 1e:04:a5:d1:67:94:f3:87:be:43:17:9d:59:c4:97: c1:c3:3d:3a:23:bb:22:6e:9b:5b:ab:4f:3d:bf:b3: 4d:c9:85:a3:e0:aa:de:65:c7:dd:04:9a:48:9a:7c: a2:c9:33:7b:b5:ab:43:e9:8d:cd:3d:62:e8:76:9d: c2:7b:1c:41:c4:d0:a3:77:bc:81:2a:30:24:69:81: 48:eb:06:f4:b9:60:f0:99:a1:3a:0e:c3:72:43:07: 4d:29:60:ec:6f:2a:9e:52:9b:b7:5d:d1:dc:ec:c3: d8:01:0b:9e:f8:f1:fc:83:16:6d:58:d0:43:81:dc: 10:f7:9e:1a:80:5b:26:27:74:ec:cc:a0:a9:47:3d: 0d:46:eb:29:19:53:5a:0d:a3:22:92:41:2f:b5:42: cd:df:0d:0f:e0:50:36:5b:11:2a:1a:1b:2f:23:5f: 70:5e:61:20:4c:1b:a9:b5:cc:8f:2f:b2:2c:4b:b4: c6:f8:81:0c:ad:76:d5:5a:33:85:c4:1e:f9:b2:ed: b7:f2:7d:6e:75:82:d6:1e:40:fc:aa:f9:1e:d1:77: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0C:23:DE:CC:D6:4C:80:07:B6:B9:90:C0:2F:56:7D:D1:40:23:BD X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7c:8e:15:9b:71:5c:71:95:7b:40:b6:80:ec:f6:e7:a4:27: 3e:df:ff:2d:17:fa:1e:1a:80:18:6b:48:dd:e9:68:1d:b4:6c: b3:51:ba:28:6b:26:fe:80:1f:23:28:5a:93:03:9b:93:9d:4d: ed:34:ef:3d:b2:15:96:21:b9:95:7c:36:bb:1e:cc:73:20:7f: 90:26:47:fc:7e:0f:49:da:1d:58:41:0e:a8:40:99:38:d6:93: c6:9f:be:6f:78:90:ba:41:29:16:7a:ff:1e:b0:2d:85:17:17: ea:8a:5a:35:88:db:1d:4d:06:63:ba:3a:40:78:87:2b:e3:de: 70:69:1d:35:9d:fb:1d:f9:4a:1e:f6:1a:05:c8:f9:c8:17:ba: 73:0d:75:5a:62:a7:19:39:61:20:e3:d1:ec:f3:27:75:99:6a: a2:e7:cc:64:f1:8a:6d:30:31:d6:f7:32:5f:e2:3c:4e:cb:07: 2a:4f:7a:4d:dd:e3:04:5d:20:5c:60:22:51:3c:c1:5b:b3:01: ca:82:f3:d2:52:0b:ed:be:37:c0:fe:37:52:5c:fb:f0:9d:14: 9b:4a:d4:9a:09:81:4e:66:09:fb:54:3e:f6:f2:db:ab:b7:a3: cf:ff:c3:77:83:ff:16:8d:ca:3b:c5:2a:6e:9f:3a:38:51:3f: 8c:69:88:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjUwODA5MDM1MTQ1WhcNMjUwODE2MDM1MTQ1WjAYMRYwFAYD VQQDEw02ODk2YzVkMS0zNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5r6XIDqHeCaqPHNoWSzKJUH5OmdugwI6NpSLQmUpwaYqvrD1SXwMdAYcYMse BKXRZ5Tzh75DF51ZxJfBwz06I7sibptbq089v7NNyYWj4KreZcfdBJpImnyiyTN7 tatD6Y3NPWLodp3CexxBxNCjd7yBKjAkaYFI6wb0uWDwmaE6DsNyQwdNKWDsbyqe Upu3XdHc7MPYAQue+PH8gxZtWNBDgdwQ954agFsmJ3TszKCpRz0NRuspGVNaDaMi kkEvtULN3w0P4FA2WxEqGhsvI19wXmEgTBuptcyPL7IsS7TG+IEMrXbVWjOFxB75 su238n1udYLWHkD8qvke0Xe10wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0MI97M 1kyAB7a5kMAvVn3RQCO9MB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUfI4Vm3FccZV7QLaA7PbnpCc+3/8tF/oeGoAYa0jd6WgdtGyzUboo ayb+gB8jKFqTA5uTnU3tNO89shWWIbmVfDa7HsxzIH+QJkf8fg9J2h1YQQ6oQJk4 1pPGn75veJC6QSkWev8esC2FFxfqilo1iNsdTQZjujpAeIcr495waR01nfsd+Uoe 9hoFyPnIF7pzDXVaYqcZOWEg49Hs8yd1mWqi58xk8YptMDHW9zJf4jxOywcqT3pN 3eMEXSBcYCJRPMFbswHKgvPSUgvtvjfA/jdSXPvwnRSbStSaCYFOZgn7VD728tur t6PP/8N3g/8Wjco7xSpunzo4UT+MaYh/ -----END CERTIFICATE-----Generated at Sun Aug 10 18:52:54 2025 by rpki-client