$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json) Hash identifier: hCmHehBaZTIX7H8nP5G6HGw756i8iHVOx06QGCipeog= Subject key identifier: BC:BF:19:70:3C:59:56:DF:A6:CF:A1:D8:83:FF:CB:E4:6E:2B:B2:54 Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4 Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4 Certificate serial: 0B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft Manifest number: 0B2D Signing time: Wed 06 Aug 2025 19:30:08 +0000 Manifest this update: Wed 06 Aug 2025 19:30:07 +0000 Manifest next update: Wed 13 Aug 2025 19:30:07 +0000 Files and hashes: 1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: zBIAPx4TcTbkCmbf3gAfgNNUDOq/CLD1XvEYqcb1WGc=) 2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: F4BgB3+37H1vj4fhyDwAENhQ6lWTOrd3il938AR6caY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4 Validity Not Before: Aug 6 19:30:07 2025 GMT Not After : Aug 13 19:30:07 2025 GMT Subject: CN=6893ad40-e255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:1e:c5:29:83:94:64:09:8f:e4:11:e4:8b: b8:2b:f4:3f:ce:dc:43:44:bf:12:8e:58:75:0a:39: 7d:c4:2c:42:3b:14:2d:e9:46:dd:b4:0c:b6:1e:eb: df:10:a2:1e:a4:ae:f1:7b:5c:2d:16:13:75:c1:af: 12:d4:e6:a0:01:66:f7:5e:31:c3:8d:1e:43:ab:8a: a7:3b:b2:a1:f0:02:85:8e:a1:a1:b2:80:95:4a:23: bd:45:3c:20:69:68:8c:f2:4f:86:48:fa:04:b6:50: ce:88:0b:99:11:d9:9c:9d:0c:76:8f:46:46:8a:f1: fd:ef:1f:27:56:a4:3d:40:28:21:f0:fd:24:35:33: aa:a5:df:58:25:f9:85:d4:84:1b:35:a4:cb:2d:78: 79:d3:8a:42:92:43:f8:35:00:08:3b:bd:08:7e:f3: bd:21:21:02:38:e5:d5:3e:50:a4:63:77:9b:85:25: 34:ca:74:52:a5:26:ce:01:7c:6e:ee:41:c6:cf:68: a4:56:0a:86:75:76:60:3c:50:1d:2b:ed:78:02:e1: b9:72:2a:30:1d:04:f9:fa:23:4b:92:ff:9e:0f:40: ad:1f:af:db:e8:50:5e:89:29:4d:9a:fc:72:4b:29: 18:a5:e0:95:6d:16:2f:66:fa:68:71:c4:6d:73:0b: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BF:19:70:3C:59:56:DF:A6:CF:A1:D8:83:FF:CB:E4:6E:2B:B2:54 X509v3 Authority Key Identifier: keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:0b:24:45:83:96:0b:f3:de:ef:28:64:9b:e9:8d:9f:fb:ae: ba:32:aa:d8:08:99:d2:27:75:27:95:f2:ab:31:19:2d:0d:0a: 9e:e2:1c:ab:20:79:0a:f4:90:49:a1:e3:b0:2d:e6:f5:97:b2: f4:8c:a5:41:b4:cc:2d:3b:12:21:4c:91:66:6d:8d:a5:dd:33: d1:1d:da:d1:65:7f:8d:0e:23:a5:c2:a2:6d:2c:30:61:e6:fa: a7:88:30:a3:7d:5f:16:c4:6b:4d:5b:b1:4c:6f:0f:31:12:6e: e6:23:c4:5f:c0:90:7a:e7:7b:91:88:1b:07:6d:d3:97:73:a2: e6:f0:cb:92:70:04:06:44:08:49:e5:99:99:6d:9d:42:f0:9d: 0a:ba:9f:71:82:a7:63:66:98:5e:9e:e9:1f:3b:cf:d8:c0:08: 23:f7:a8:32:2a:37:8f:3c:53:ed:ee:fe:f7:cd:bf:24:13:35: da:1a:4f:ad:d7:51:24:b4:d7:fc:d0:31:82:89:c0:c6:2e:0e: 83:e1:d8:97:71:ce:f4:e7:78:92:d6:6f:1b:2c:4f:68:81:8b: 42:47:b3:fe:4a:23:3f:e3:4e:35:26:2d:15:a8:59:31:73:ad: fb:49:7e:45:70:7d:a8:a2:76:0e:c2:d8:1c:73:b8:37:dc:94: d2:2c:59:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0NDcxMTAvBgNVBAUTKERDOThCNTQ0QjE2QzQ5QTk4REQwNTg1Q0Y5NjcyNDI2 NDE1NTJFQTQwHhcNMjUwODA2MTkzMDA3WhcNMjUwODEzMTkzMDA3WjAYMRYwFAYD VQQDEw02ODkzYWQ0MC1lMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVgexSmDlGQJj+QR5Iu4K/Q/ztxDRL8Sjlh1Cjl9xCxCOxQt6UbdtAy2Huvf EKIepK7xe1wtFhN1wa8S1OagAWb3XjHDjR5Dq4qnO7Kh8AKFjqGhsoCVSiO9RTwg aWiM8k+GSPoEtlDOiAuZEdmcnQx2j0ZGivH97x8nVqQ9QCgh8P0kNTOqpd9YJfmF 1IQbNaTLLXh504pCkkP4NQAIO70IfvO9ISECOOXVPlCkY3ebhSU0ynRSpSbOAXxu 7kHGz2ikVgqGdXZgPFAdK+14AuG5ciowHQT5+iNLkv+eD0CtH6/b6FBeiSlNmvxy SykYpeCVbRYvZvpoccRtcwuENQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy/GXA8 WVbfps+h2IP/y+RuK7JUMB8GA1UdIwQYMBaAFNyYtUSxbEmpjdBYXPlnJCZBVS6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTQ0Ny81RjRDNkNGMjQy NjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1NhbU4wRmhjLVdja0prRlZM cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKaTFSTEZzU2FtTjBGaGMtV2NrSmtGVkxxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTQ0Ny81RjRDNkNGMjQyNjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1Nh bU4wRmhjLVdja0prRlZMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVCyRFg5YL897vKGSb6Y2f+666MqrYCJnSJ3UnlfKrMRktDQqe4hyr IHkK9JBJoeOwLeb1l7L0jKVBtMwtOxIhTJFmbY2l3TPRHdrRZX+NDiOlwqJtLDBh 5vqniDCjfV8WxGtNW7FMbw8xEm7mI8RfwJB653uRiBsHbdOXc6Lm8MuScAQGRAhJ 5ZmZbZ1C8J0Kup9xgqdjZphenukfO8/YwAgj96gyKjePPFPt7v73zb8kEzXaGk+t 11EktNf80DGCicDGLg6D4diXcc7053iS1m8bLE9ogYtCR7P+SiM/4041Ji0VqFkx c637SX5FcH2oonYOwtgcc7g33JTSLFm+ -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:56 2025 by rpki-client