$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json) Hash identifier: cwEIkWUshIu1bUostrxopsCsFb+6dAPNSlM06qjoCUw= Subject key identifier: F5:96:4E:9B:76:CF:62:83:F1:58:B0:B4:BB:B5:5C:33:8F:FE:D9:9B Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft Manifest number: 0658 Signing time: Fri 08 Aug 2025 23:00:08 +0000 Manifest this update: Fri 08 Aug 2025 23:00:07 +0000 Manifest next update: Fri 15 Aug 2025 23:00:07 +0000 Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: GOBH30UgjC4xD6tLxGgAJjslArMhYAkwpmJzuvsGG4I=) 2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: 4nQWYZbXWSJ3PqE4ZBiXzBzUwOjlbjDx0Oq7v5W8vCQ=) 3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: MzEQJvzOJlRcf4tMcorSrwSuzHCC7BZBlDirsliZQdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Validity Not Before: Aug 8 23:00:07 2025 GMT Not After : Aug 15 23:00:07 2025 GMT Subject: CN=68968178-4b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:fd:8d:d3:15:47:5b:cb:32:78:6e:69:eb: 57:d6:9a:09:b1:26:0d:7a:22:67:8d:90:56:de:dc: 50:11:d1:9f:f6:70:43:fb:15:2b:f8:11:14:e1:5d: 9e:5c:17:b8:0a:39:a0:e9:ab:03:47:89:51:e6:50: 22:b2:21:f7:c6:78:c3:69:c3:ba:5a:c5:50:f1:de: 13:bb:79:ee:32:d9:4f:c1:e6:c6:bf:71:cb:56:ec: ed:07:7d:1b:79:1e:b3:75:18:e8:00:af:0e:6b:a9: 3c:1c:7b:37:89:35:1f:09:c3:ca:ec:45:99:ae:57: f2:f4:76:55:e8:cf:a1:30:6a:d7:37:f2:a8:54:9f: 79:a1:56:74:12:6e:51:15:0e:3f:97:84:76:af:96: a6:6e:c6:41:cb:ef:06:9f:3b:ec:9f:e0:49:bb:e8: 08:0d:16:b5:40:03:af:48:2f:0d:f3:4d:ed:c8:1d: 30:19:90:17:a7:55:89:72:61:76:89:c6:2f:fd:cf: ee:d6:7e:77:d7:c9:8b:36:7b:1c:95:41:e6:4a:59: 40:23:71:04:7a:0a:f8:80:e8:26:95:b4:fc:53:14: 8b:c6:98:76:7c:1b:6d:d5:55:39:c1:15:d3:cb:7f: d7:c4:1c:56:0a:f6:e8:4a:c6:f1:14:04:28:02:85: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:96:4E:9B:76:CF:62:83:F1:58:B0:B4:BB:B5:5C:33:8F:FE:D9:9B X509v3 Authority Key Identifier: keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e3:06:c7:d5:b6:a2:a4:af:a7:66:c4:43:64:46:41:30:40: 23:5e:ea:f0:0c:1e:24:32:ca:dc:84:42:3f:88:75:bf:9a:6b: 9c:14:ef:1a:84:ff:d7:ca:ec:25:bb:48:59:e2:e6:63:97:1a: 54:db:2e:e0:34:90:90:66:d2:9f:5b:7b:1b:d9:7f:24:ca:a3: 57:8d:47:d9:78:0b:c0:f5:0e:82:8f:35:3a:a3:49:33:56:ee: 84:33:37:25:67:56:35:f5:70:15:3f:7f:55:e9:05:1c:11:32: c1:ee:e1:56:15:91:67:a5:93:4c:83:bd:0d:6b:8d:fa:ca:77: 3f:64:8d:16:85:d3:27:ad:4e:aa:16:86:e4:b2:51:96:ec:c9: a8:e3:40:16:df:3f:54:a9:2f:db:cc:59:13:55:91:f9:b5:f7: 72:5b:b5:99:00:b5:44:ba:0f:15:cd:17:26:9e:a7:be:d8:a7: 44:7a:b0:ff:78:ff:ca:3d:16:c1:21:d9:bc:d7:df:f1:0d:24: ea:6b:5d:1e:70:90:c4:d2:3d:3d:8d:ad:13:5e:42:76:bd:f7: 42:35:17:14:6b:5a:76:7c:4b:f9:c2:55:d0:86:89:15:28:42: 73:9f:9f:99:48:ec:a2:95:e2:03:22:52:81:3f:9c:8f:67:b6: a0:b5:8b:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQxM0JEMzRGRjM4 NzhFNEVFRDAwHhcNMjUwODA4MjMwMDA3WhcNMjUwODE1MjMwMDA3WjAYMRYwFAYD VQQDEw02ODk2ODE3OC00YjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzX9jdMVR1vLMnhuaetX1poJsSYNeiJnjZBW3txQEdGf9nBD+xUr+BEU4V2e XBe4Cjmg6asDR4lR5lAisiH3xnjDacO6WsVQ8d4Tu3nuMtlPwebGv3HLVuztB30b eR6zdRjoAK8Oa6k8HHs3iTUfCcPK7EWZrlfy9HZV6M+hMGrXN/KoVJ95oVZ0Em5R FQ4/l4R2r5ambsZBy+8Gnzvsn+BJu+gIDRa1QAOvSC8N803tyB0wGZAXp1WJcmF2 icYv/c/u1n5318mLNnsclUHmSllAI3EEegr4gOgmlbT8UxSLxph2fBtt1VU5wRXT y3/XxBxWCvboSsbxFAQoAoVoDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWWTpt2 z2KD8ViwtLu1XDOP/tmbMB8GA1UdIwQYMBaAFN8R6SaNBq5Tuvt0E700/zh45O7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0RC9CMkVGM0UzNDk1 RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3JsTzYtM1FUdlRUX09Iams3 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4SHBKbzBHcmxPNi0zUVR2VFRfT0hqazd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0RC9CMkVGM0UzNDk1RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3Js TzYtM1FUdlRUX09Iams3dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH4wbH1baipK+nZsRDZEZBMEAjXurwDB4kMsrchEI/iHW/mmucFO8a hP/Xyuwlu0hZ4uZjlxpU2y7gNJCQZtKfW3sb2X8kyqNXjUfZeAvA9Q6CjzU6o0kz Vu6EMzclZ1Y19XAVP39V6QUcETLB7uFWFZFnpZNMg70Na436ync/ZI0WhdMnrU6q FobkslGW7Mmo40AW3z9UqS/bzFkTVZH5tfdyW7WZALVEug8VzRcmnqe+2KdEerD/ eP/KPRbBIdm819/xDSTqa10ecJDE0j09ja0TXkJ2vfdCNRcUa1p2fEv5wlXQhokV KEJzn5+ZSOyileIDIlKBP5yPZ7agtYuk -----END CERTIFICATE-----Generated at Sun Aug 10 20:03:35 2025 by rpki-client