$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: 43IWhXC6DSq1EU16gsDqiW95+2UKIS7tfEevYXYPVh4= Subject key identifier: 30:86:6B:9E:99:10:C9:13:3E:87:A2:B1:44:96:0D:52:5D:19:BA:E5 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 07A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 079E Signing time: Fri 08 Aug 2025 21:44:06 +0000 Manifest this update: Fri 08 Aug 2025 21:44:06 +0000 Manifest next update: Fri 15 Aug 2025 21:44:06 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: WEo2ASFGVxRe59+Y5vF6slEeebNXoN/75Bg2vcZTSW8=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: SiUJ7SYlbA21+yPfD2uZbgHjH4MPfQViyjJFRbUxFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Aug 8 21:44:06 2025 GMT Not After : Aug 15 21:44:06 2025 GMT Subject: CN=68966fa6-9c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:7d:d7:04:ef:5f:e9:da:49:5b:26:a7:26: 8e:f8:cb:c5:80:01:33:42:bd:39:9a:32:25:3b:f3: c8:aa:b6:64:dd:3e:ef:f0:31:76:11:45:c4:22:74: 86:d4:9e:ee:a8:9b:13:19:d8:22:01:b7:6b:05:6e: fb:5c:da:10:3e:0f:00:07:16:55:f4:6c:7a:53:fd: 74:47:7a:be:16:51:e8:8d:62:55:a7:be:51:c8:c3: 04:c7:c7:f1:63:69:ad:a1:93:b4:c6:96:81:9e:2f: 54:3c:4d:54:fa:fc:52:6c:06:93:6d:96:98:ad:fa: cf:d1:ca:fd:c0:7c:d6:5d:63:f7:a9:74:f5:bb:68: 86:30:40:a8:c4:93:3e:41:f9:07:17:80:31:51:5b: 5d:17:2b:e1:ac:28:ef:10:03:53:44:00:52:06:ce: da:2d:9d:81:5a:2e:a0:c9:2b:3b:96:c5:65:f3:24: ef:89:f8:61:5c:98:90:0d:4e:e0:7e:5c:01:61:e9: 04:a2:36:66:7c:5c:90:6a:26:54:4f:e4:b3:c1:dc: 8f:a6:dd:04:5c:76:3a:68:91:1c:89:de:85:b7:75: ca:9b:4f:ef:35:bb:d8:58:6a:6b:e3:55:d6:11:80: e7:90:91:5f:4a:ee:76:f4:fa:73:d7:c0:aa:ef:b6: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:86:6B:9E:99:10:C9:13:3E:87:A2:B1:44:96:0D:52:5D:19:BA:E5 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5c:5f:5f:3c:12:7a:d1:fc:36:84:50:a1:15:ee:a7:7a:1d: 2b:9b:a8:f4:f1:16:75:79:3f:4a:06:d0:d8:e9:6d:63:51:2c: 4c:3c:78:81:cd:88:2b:e5:78:24:04:6f:4f:11:ff:00:e5:6c: 9d:76:d6:71:b8:9b:37:50:d1:44:30:50:98:2c:88:c6:e0:52: 00:d8:fa:e1:66:c3:c7:e3:1e:75:28:dd:49:6c:e7:38:47:85: 69:8c:7f:58:31:1b:7b:8e:0c:67:c4:79:63:d7:9a:23:b3:ff: ec:51:a5:ce:ac:31:7f:77:5f:ea:8c:ec:47:cc:66:bd:fa:2d: 79:09:d3:5b:1c:35:e8:95:5e:59:ae:39:12:2f:5c:41:a1:a1: ec:dd:89:76:a3:05:30:27:b1:d0:ba:d7:e1:99:41:22:cd:3e: ae:f5:41:86:13:5c:49:5c:b1:79:2a:20:44:5d:fb:b0:fb:04: 96:ed:81:95:c6:cc:18:42:cc:29:87:f1:73:c3:14:d6:20:3c: 2a:14:78:21:5e:d1:e9:80:96:56:b8:17:e2:4c:9c:e1:cf:73: 14:95:7a:dd:fc:83:50:02:0f:63:2a:15:28:0d:37:84:cb:3f: 5b:d9:bd:4b:3c:fc:f0:c7:8a:01:69:7c:bc:ea:89:e1:99:66: cc:63:05:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjUwODA4MjE0NDA2WhcNMjUwODE1MjE0NDA2WjAYMRYwFAYD VQQDEw02ODk2NmZhNi05YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvZ91wTvX+naSVsmpyaO+MvFgAEzQr05mjIlO/PIqrZk3T7v8DF2EUXEInSG 1J7uqJsTGdgiAbdrBW77XNoQPg8ABxZV9Gx6U/10R3q+FlHojWJVp75RyMMEx8fx Y2mtoZO0xpaBni9UPE1U+vxSbAaTbZaYrfrP0cr9wHzWXWP3qXT1u2iGMECoxJM+ QfkHF4AxUVtdFyvhrCjvEANTRABSBs7aLZ2BWi6gySs7lsVl8yTvifhhXJiQDU7g flwBYekEojZmfFyQaiZUT+SzwdyPpt0EXHY6aJEcid6Ft3XKm0/vNbvYWGpr41XW EYDnkJFfSu529Ppz18Cq77YnnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCGa56Z EMkTPoeisUSWDVJdGbrlMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALXF9fPBJ60fw2hFChFe6neh0rm6j08RZ1eT9KBtDY6W1jUSxMPHiB zYgr5XgkBG9PEf8A5WyddtZxuJs3UNFEMFCYLIjG4FIA2PrhZsPH4x51KN1JbOc4 R4VpjH9YMRt7jgxnxHlj15ojs//sUaXOrDF/d1/qjOxHzGa9+i15CdNbHDXolV5Z rjkSL1xBoaHs3Yl2owUwJ7HQutfhmUEizT6u9UGGE1xJXLF5KiBEXfuw+wSW7YGV xswYQswph/FzwxTWIDwqFHghXtHpgJZWuBfiTJzhz3MUlXrd/INQAg9jKhUoDTeE yz9b2b1LPPzwx4oBaXy86onhmWbMYwUO -----END CERTIFICATE-----Generated at Sun Aug 10 10:47:36 2025 by rpki-client