$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: kCT3TUOHK9hb88Cp2+icJFrnLcmOH/AIXOwCSV2PM+I= Subject key identifier: F3:F8:48:1C:C7:07:85:C1:87:0B:62:4B:80:45:09:D9:0A:37:19:90 Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 01CE Signing time: Mon 11 Aug 2025 03:28:12 +0000 Manifest this update: Mon 11 Aug 2025 03:28:12 +0000 Manifest next update: Mon 18 Aug 2025 03:28:12 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: wLw7sOhMZDW1KWKhCukgpV79cJc86gRbfKk98BS7+mo=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: 1rn4Wmde7kGNFrAVDEQrba6TR24KGnYlOqVrJVhqYEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Aug 11 03:28:12 2025 GMT Not After : Aug 18 03:28:12 2025 GMT Subject: CN=6899634c-5874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:d3:c4:e9:6f:6a:04:93:42:58:c5:d9:ca: cd:82:3d:58:41:a5:6f:e5:f8:52:27:98:c6:84:86: 84:dc:cf:78:c6:b8:09:7e:a8:ad:f5:d9:91:62:d0: 89:a3:09:1d:96:e9:48:de:91:d7:ea:db:62:a2:7e: 8d:c6:c5:8d:5f:b9:c8:c0:a4:35:8c:6f:ee:e2:a5: e5:82:35:6b:b9:7f:c9:77:73:a5:6a:98:83:97:7a: 1c:fb:34:9f:69:d9:9e:68:f6:20:cc:f3:8b:c4:a5: fb:40:9f:78:48:40:30:f5:fd:27:f9:ba:dc:43:23: 85:ce:a2:8b:82:2b:29:65:64:e3:d4:45:6f:90:cd: 42:7e:1f:41:60:67:fe:33:74:db:a6:78:ff:53:0a: ba:3d:4e:e6:b2:4b:f7:bc:cb:07:3a:f6:b0:c5:72: b4:dc:c7:48:f6:06:31:a2:0a:03:43:39:3b:bb:e2: 45:c5:fb:e6:d0:d7:1f:2d:e7:64:f4:89:a8:6d:b4: 26:9e:eb:16:08:42:01:02:05:a6:13:ff:d1:89:16: e3:ca:bc:63:e9:96:96:7f:89:42:fb:00:d7:94:9a: e5:1f:6a:5a:26:41:44:49:67:ce:43:b4:98:bd:66: 2e:a8:f0:6f:92:85:15:59:7e:e8:71:fb:ae:34:67: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F8:48:1C:C7:07:85:C1:87:0B:62:4B:80:45:09:D9:0A:37:19:90 X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:90:ae:2a:73:69:98:9e:90:2f:24:4e:55:ad:59:77:01:b5: 12:20:a8:b1:8e:d4:72:8e:83:2b:d4:14:5f:eb:29:2f:f7:11: 0d:51:c3:98:d5:44:55:89:5c:03:ed:2d:48:9b:15:f5:b3:ab: 1b:c8:45:f7:5a:ed:34:a1:1a:37:bd:4d:db:e4:b9:30:a5:b7: c1:04:01:e0:56:27:b5:8a:96:4f:df:dd:72:c2:8e:7f:f8:52: 46:f1:fd:96:f0:af:c3:6f:42:43:76:7a:13:39:2e:c8:a7:06: bb:d9:5a:76:07:1d:42:e6:34:8e:a9:9f:34:1c:af:e6:5a:5d: e2:df:ba:ea:8f:b4:e9:99:b5:99:84:a9:57:0c:54:e0:0c:0d: fe:d2:52:fe:d0:3b:62:0f:fb:3d:7b:48:69:2b:2c:e1:6b:41: 77:83:4b:a7:53:2c:09:c8:ad:f1:32:6d:3f:3f:a3:7f:48:0c: cc:22:40:2e:b3:ca:6e:96:d5:1c:81:fb:b2:43:6b:53:31:16: c5:49:8e:45:88:68:cf:2d:6f:3e:e8:2c:5c:b1:51:18:29:92: 35:a8:79:9d:85:e7:08:8a:96:aa:85:31:df:d3:a0:05:1d:c1: 4b:cc:55:51:86:bc:70:50:06:2f:e8:55:49:5a:18:92:8a:dc: 52:28:f8:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjUwODExMDMyODEyWhcNMjUwODE4MDMyODEyWjAYMRYwFAYD VQQDEw02ODk5NjM0Yy01ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxXTxOlvagSTQljF2crNgj1YQaVv5fhSJ5jGhIaE3M94xrgJfqit9dmRYtCJ owkdlulI3pHX6ttion6NxsWNX7nIwKQ1jG/u4qXlgjVruX/Jd3OlapiDl3oc+zSf admeaPYgzPOLxKX7QJ94SEAw9f0n+brcQyOFzqKLgispZWTj1EVvkM1Cfh9BYGf+ M3Tbpnj/Uwq6PU7mskv3vMsHOvawxXK03MdI9gYxogoDQzk7u+JFxfvm0NcfLedk 9ImobbQmnusWCEIBAgWmE//RiRbjyrxj6ZaWf4lC+wDXlJrlH2paJkFESWfOQ7SY vWYuqPBvkoUVWX7ocfuuNGceIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPP4SBzH B4XBhwtiS4BFCdkKNxmQMB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKkK4qc2mYnpAvJE5VrVl3AbUSIKixjtRyjoMr1BRf6ykv9xENUcOY 1URViVwD7S1ImxX1s6sbyEX3Wu00oRo3vU3b5LkwpbfBBAHgVie1ipZP391ywo5/ +FJG8f2W8K/Db0JDdnoTOS7Ipwa72Vp2Bx1C5jSOqZ80HK/mWl3i37rqj7TpmbWZ hKlXDFTgDA3+0lL+0DtiD/s9e0hpKyzha0F3g0unUywJyK3xMm0/P6N/SAzMIkAu s8pultUcgfuyQ2tTMRbFSY5FiGjPLW8+6CxcsVEYKZI1qHmdhecIipaqhTHf06AF HcFLzFVRhrxwUAYv6FVJWhiSitxSKPjG -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:35 2025 by rpki-client