$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: A3b3H+xEmidPXU8YH9LRhfcFDntChQGa+LdDNFKAYvs= Subject key identifier: 1F:BB:19:99:D5:A8:34:D2:A4:5D:FD:84:41:DF:E6:D1:F0:1E:3E:11 Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: 7A Signing time: Sun 03 Aug 2025 07:08:42 +0000 Manifest this update: Sun 03 Aug 2025 07:08:41 +0000 Manifest next update: Sun 10 Aug 2025 07:08:41 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: 3cwYdqpGijfq+VRodwhSPoYkTC3IHBLxueGS6geHQs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: Aug 3 07:08:41 2025 GMT Not After : Aug 10 07:08:41 2025 GMT Subject: CN=688f0afa-9faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:0e:8c:26:ae:bd:2d:71:58:89:8f:f4:55: 0e:81:7b:3c:20:07:95:36:72:d0:39:a6:f2:95:5d: 78:12:80:3d:6e:6f:6a:a2:42:57:8e:02:f8:44:0b: 5c:d9:5b:bb:26:6b:2c:42:04:b6:df:9f:0f:0d:b6: 33:b9:83:1c:7d:1a:49:99:37:4a:25:ab:87:1f:d9: 06:0c:f7:7f:cb:79:5d:45:f4:08:85:0c:c4:49:0a: 30:44:60:dc:99:22:ef:61:05:9e:bf:aa:c1:f5:38: 9f:55:6b:52:3a:4f:7a:f9:e9:45:f5:ec:a4:99:15: 83:07:b1:f3:83:95:0c:a7:ba:a3:70:37:5f:3c:52: b4:d5:81:55:38:30:10:2a:4f:c7:92:51:f3:ca:30: 3d:b5:0f:26:94:f5:c7:3a:a1:51:2a:f8:7e:30:bd: f4:45:53:0b:42:9a:d8:6d:ff:2f:ec:61:e5:5f:fd: a7:39:8e:fa:ed:5b:11:e8:1f:63:5c:1c:3b:fc:81: fd:21:dc:16:bc:b7:09:6a:07:b2:b2:18:24:b9:37: bc:43:a3:43:33:f8:e4:3d:bf:ab:ed:35:d0:06:f0: 14:bd:b9:cb:1d:06:c8:9d:48:24:77:62:78:08:98: 2b:17:bd:81:6b:f0:2a:bb:b9:98:bf:eb:90:e7:03: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BB:19:99:D5:A8:34:D2:A4:5D:FD:84:41:DF:E6:D1:F0:1E:3E:11 X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:21:a1:c5:90:32:80:3f:62:6a:7b:a0:7d:24:6b:ce:86:e2: 72:8c:32:01:56:1c:ab:c0:91:a8:04:d9:80:29:fa:60:0e:26: 3c:47:17:cb:61:f8:a9:be:22:b5:04:2d:28:d0:39:66:98:93: 7c:d7:6a:3f:30:1b:9a:2b:00:13:39:3b:8f:68:6a:1f:f6:77: b1:70:b0:f5:1d:9a:ab:61:4b:a5:15:6c:9a:14:f8:7c:c5:92: 41:0e:ef:6c:73:44:5b:c7:9e:69:05:cc:89:bd:39:87:5b:83: 6f:c0:36:38:8b:47:f5:24:ab:6f:02:ec:36:a2:a7:aa:7f:8c: 68:fe:69:3d:7a:66:91:77:b2:f7:a7:ea:c8:22:a2:24:f6:cd: d8:d8:ab:ca:c8:61:2e:02:33:2c:b0:9b:44:a5:64:10:fa:be: 97:b1:bf:01:a0:17:37:38:69:82:3c:55:5c:ac:fc:1d:b3:2f: 10:8e:67:50:70:38:0f:22:6c:72:92:51:d3:60:8e:cb:90:45: 93:6a:bc:88:b1:95:53:94:f8:2e:a9:7d:d4:7d:06:6a:24:8d: 98:7c:c6:bd:59:68:05:47:2b:84:60:23:8f:62:56:8b:5a:73: 5a:b7:0d:d0:21:6f:0c:09:0f:1f:cf:72:3e:4a:0f:91:29:a6: d2:d6:71:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzMyQTExMC8GA1UEBRMoREMxMTMwRDg2MTZCQUJDNkNFMDg4RjVGMjBFNjk3MTlB OTlDMzJCQjAeFw0yNTA4MDMwNzA4NDFaFw0yNTA4MTAwNzA4NDFaMBgxFjAUBgNV BAMTDTY4OGYwYWZhLTlmYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBvg6MJq69LXFYiY/0VQ6BezwgB5U2ctA5pvKVXXgSgD1ub2qiQleOAvhEC1zZ W7smayxCBLbfnw8NtjO5gxx9GkmZN0olq4cf2QYM93/LeV1F9AiFDMRJCjBEYNyZ Iu9hBZ6/qsH1OJ9Va1I6T3r56UX17KSZFYMHsfODlQynuqNwN188UrTVgVU4MBAq T8eSUfPKMD21DyaU9cc6oVEq+H4wvfRFUwtCmtht/y/sYeVf/ac5jvrtWxHoH2Nc HDv8gf0h3Ba8twlqB7KyGCS5N7xDo0Mz+OQ9v6vtNdAG8BS9ucsdBsidSCR3YngI mCsXvYFr8Cq7uZi/65DnA3wrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH7sZmdWo NNKkXf2EQd/m0fAePhEwHwYDVR0jBBgwFoAU3BEw2GFrq8bOCI9fIOaXGamcMrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MzJBLzA4OUJDNEU2QjYz MTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01y cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0JFdzJHRnJxOGJPQ0k5ZklPYVhHYW1jTXJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MzJBLzA4OUJDNEU2QjYzMTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThi T0NJOWZJT2FYR2FtY01ycy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ8hocWQMoA/Ymp7oH0ka86G4nKMMgFWHKvAkagE2YAp+mAOJjxHF8th +Km+IrUELSjQOWaYk3zXaj8wG5orABM5O49oah/2d7FwsPUdmqthS6UVbJoU+HzF kkEO72xzRFvHnmkFzIm9OYdbg2/ANjiLR/Ukq28C7Daip6p/jGj+aT16ZpF3sven 6sgioiT2zdjYq8rIYS4CMyywm0SlZBD6vpexvwGgFzc4aYI8VVys/B2zLxCOZ1Bw OA8ibHKSUdNgjsuQRZNqvIixlVOU+C6pfdR9BmokjZh8xr1ZaAVHK4RgI49iVota c1q3DdAhbwwJDx/Pcj5KD5EpptLWcYY= -----END CERTIFICATE-----Generated at Mon Aug 4 11:23:14 2025 by rpki-client