$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: ntIo1gAx80fZcwPrtD09f6Z/kIxyJBA+tPeG6dYSTYw= Subject key identifier: 1E:E2:59:4F:7E:48:B9:98:1D:20:80:CD:DF:43:6A:75:13:FF:72:05 Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 0161 Signing time: Tue 05 Aug 2025 04:23:29 +0000 Manifest this update: Tue 05 Aug 2025 04:23:29 +0000 Manifest next update: Tue 12 Aug 2025 04:23:29 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: BydfZDud5KUVIkQs6bclkbZ0kE2QQqhyByMRZSpx9SE=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: Aug 5 04:23:29 2025 GMT Not After : Aug 12 04:23:29 2025 GMT Subject: CN=68918741-3645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:c6:e4:53:eb:09:e1:41:49:3c:cd:f2:35: 10:a2:bc:a6:b5:35:df:90:2c:b2:7d:c8:fd:72:2d: 5d:eb:8f:08:d2:26:7d:5d:fa:3a:02:3f:4b:58:94: f3:19:b1:0b:84:38:b9:49:d4:f6:8f:6f:43:00:4c: a0:7a:49:d9:aa:47:92:ef:65:91:55:41:51:18:ec: 0e:9e:3f:c8:b2:75:52:00:fc:b3:3b:1d:5a:9d:fc: be:37:b7:98:87:50:0f:b5:8f:00:d8:1d:3b:ac:9e: 86:4d:36:37:57:39:14:00:08:75:08:28:37:0e:50: d8:e1:31:fe:d7:1c:ab:b9:69:b4:22:f1:15:c7:82: e6:fa:38:61:8a:9a:0c:e1:0a:ac:75:b7:9a:2f:b1: 42:3f:6d:bd:3e:17:8a:eb:8a:41:2d:ce:36:38:eb: fa:31:80:fe:cb:39:16:cb:0d:f6:b7:5e:56:d0:28: a8:2e:53:b8:2a:fa:90:25:ce:04:b3:67:dd:aa:38: 18:ab:0e:6f:db:5b:a3:cc:cd:b9:1a:36:4e:d1:8e: e4:5f:b0:ff:58:f5:7d:40:19:d0:ac:fa:de:62:a4: a6:0e:d4:54:49:49:18:c6:b0:8a:b6:a8:e9:67:7c: 40:92:fc:2a:66:b8:85:b4:e0:51:4e:06:39:3b:10: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E2:59:4F:7E:48:B9:98:1D:20:80:CD:DF:43:6A:75:13:FF:72:05 X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:d0:5b:02:46:19:f0:5d:fa:f9:00:36:c4:13:d8:21:9b: 77:8f:f7:2c:bf:ff:89:e7:d4:0a:c4:b3:cc:10:b5:c3:f4:db: 87:75:8e:2f:38:7e:ad:16:44:78:5c:4a:a8:b8:d1:3a:43:14: e7:80:68:60:c0:5e:99:bd:f0:0c:5d:20:49:42:6f:e2:db:7d: 59:cc:81:d8:3d:60:a4:eb:fb:b8:3f:cb:9d:e4:4a:e2:96:c5: e3:8f:80:0f:c6:ea:c4:90:08:e3:0b:71:ca:d8:22:cf:e8:49: 4f:78:fc:4d:08:f9:6c:7b:43:a3:b5:05:a7:36:4d:9a:93:91: 47:68:f0:c4:1b:7a:eb:75:60:b6:85:cc:08:09:9c:6d:51:5f: 54:43:57:1f:b2:92:c3:f9:13:6e:1d:7d:64:67:47:e2:b2:3a: 1f:cb:96:b8:d4:9e:b6:7f:d8:e3:e7:33:a9:07:e5:f3:ee:ac: 54:27:a0:14:3f:5d:5b:07:9a:c8:ee:6e:97:ea:15:c8:4e:29: 2f:41:77:25:ba:79:ae:bf:75:73:c8:4f:ec:22:06:5f:b3:43: 21:24:7f:a2:69:c5:14:df:cd:83:b1:42:af:c6:3b:e0:22:d0: cf:a3:b3:1c:dc:fb:40:08:bf:ff:0a:f8:fb:c9:ca:19:ae:bd: 42:6a:de:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUwODA1MDQyMzI5WhcNMjUwODEyMDQyMzI5WjAYMRYwFAYD VQQDEw02ODkxODc0MS0zNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqjG5FPrCeFBSTzN8jUQorymtTXfkCyyfcj9ci1d648I0iZ9Xfo6Aj9LWJTz GbELhDi5SdT2j29DAEygeknZqkeS72WRVUFRGOwOnj/IsnVSAPyzOx1anfy+N7eY h1APtY8A2B07rJ6GTTY3VzkUAAh1CCg3DlDY4TH+1xyruWm0IvEVx4Lm+jhhipoM 4QqsdbeaL7FCP229PheK64pBLc42OOv6MYD+yzkWyw32t15W0CioLlO4KvqQJc4E s2fdqjgYqw5v21ujzM25GjZO0Y7kX7D/WPV9QBnQrPreYqSmDtRUSUkYxrCKtqjp Z3xAkvwqZriFtOBRTgY5OxCjfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7iWU9+ SLmYHSCAzd9DanUT/3IFMB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANvtBbAkYZ8F36+QA2xBPYIZt3j/csv/+J59QKxLPMELXD9NuHdY4v OH6tFkR4XEqouNE6QxTngGhgwF6ZvfAMXSBJQm/i231ZzIHYPWCk6/u4P8ud5Eri lsXjj4APxurEkAjjC3HK2CLP6ElPePxNCPlse0OjtQWnNk2ak5FHaPDEG3rrdWC2 hcwICZxtUV9UQ1cfspLD+RNuHX1kZ0fisjofy5a41J62f9jj5zOpB+Xz7qxUJ6AU P11bB5rI7m6X6hXITikvQXclunmuv3VzyE/sIgZfs0MhJH+iacUU382DsUKvxjvg ItDPo7Mc3PtACL//Cvj7ycoZrr1Cat6J -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:07 2025 by rpki-client