$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json) Hash identifier: 5qpHo/wbgtYWJcy2fbI7M/dETjf4p3YC3PhnUhB/jt0= Subject key identifier: 48:0C:72:4A:6C:3B:38:6F:D2:35:52:D9:6B:CF:18:E1:29:C4:10:FA Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Certificate serial: 18B7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft Manifest number: 18B1 Signing time: Sun 10 Aug 2025 15:45:55 +0000 Manifest this update: Sun 10 Aug 2025 15:45:55 +0000 Manifest next update: Sun 17 Aug 2025 15:45:55 +0000 Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: OX/N78XXbNdgE4WxhEkzZlBf0oTUtndc8qGwD0GvziA=) 2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: WuIJH5EmbtRmJmFCN//mGN8XhCDwfYBWN+2IltuHvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6327 (0x18b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Validity Not Before: Aug 10 15:45:55 2025 GMT Not After : Aug 17 15:45:55 2025 GMT Subject: CN=6898beb3-0c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:ad:cf:69:54:8a:e5:85:b2:ed:df:51:c6: 6b:e6:87:75:29:92:ed:3f:43:ad:c6:fd:0b:b2:dd: f1:0e:43:c8:65:3d:69:12:c9:bf:ec:87:c1:75:05: 37:3b:9f:cd:e8:d1:09:31:f8:91:24:30:1f:84:d9: 28:b2:0c:fd:9f:63:5d:e9:9f:eb:ec:96:bc:a0:9e: 3e:68:90:32:d2:c9:99:17:1d:35:e1:2c:81:d1:f7: ac:7e:00:7d:df:d8:11:9f:f1:51:cf:2e:28:d5:07: ec:29:65:d7:58:17:3e:aa:d2:b3:74:67:0d:e2:b9: 25:d3:ec:8f:e8:69:fa:51:ea:68:03:39:a4:f8:cd: 93:5c:51:8f:6d:6e:3c:18:67:33:1b:28:18:f0:be: 28:6a:53:c9:77:16:87:ca:3c:8a:27:4f:a4:d8:dc: c7:e9:f8:7f:a6:f1:d2:de:31:04:51:27:b9:ef:3a: 2e:d7:0c:13:c4:de:20:15:0e:f5:33:61:c9:62:c4: 63:ba:ef:b2:07:56:51:58:ed:fc:23:45:2f:08:cf: 43:17:97:e0:a9:e1:8d:93:7e:80:7a:2c:3b:f1:93: dc:29:0a:35:a8:b2:67:19:23:0c:01:da:a1:7a:55: de:e7:d1:64:3c:18:98:b2:b5:b4:98:ca:d0:43:3d: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0C:72:4A:6C:3B:38:6F:D2:35:52:D9:6B:CF:18:E1:29:C4:10:FA X509v3 Authority Key Identifier: keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e7:0d:4c:2d:9a:df:6c:c1:ad:9a:7d:73:23:c7:cc:b7:71: b8:51:30:ca:ea:44:94:0d:65:32:33:48:3a:9d:a8:63:44:45: 5a:74:bb:a9:30:20:61:fa:9e:ca:0e:d4:1a:5c:16:1d:8a:0d: 7b:8c:44:1b:1c:5b:ab:5b:9f:b6:57:26:b2:8d:2d:91:07:77: 09:b6:da:01:65:99:01:27:83:da:d4:4d:76:3d:88:a5:43:37: 56:65:15:ca:e0:bf:5f:a2:05:35:f4:f5:02:69:90:14:09:a9: 14:7b:36:45:c6:fd:10:3a:8e:d5:ac:5d:bc:48:26:0b:6d:95: 29:de:2e:4a:38:57:a4:88:e5:c4:27:36:7e:06:d2:0b:58:81: 2f:2e:1f:c5:bb:5d:6d:41:d2:e4:db:f2:13:04:b8:05:17:c4: 24:fc:cc:bd:50:01:27:c8:b6:be:d9:35:bf:ea:d9:cb:29:69: 1a:f5:20:43:8d:1d:96:7f:fb:fe:aa:48:a5:0e:c7:ea:11:78: ca:8d:21:24:43:19:2e:30:50:9b:7a:6b:f8:35:56:25:54:85: d0:b0:31:71:af:1e:0c:75:c7:ce:54:db:86:cc:54:e8:e4:61: ad:4b:45:22:15:c9:1d:95:12:52:96:bc:c8:2d:2e:9a:d4:5b: d3:ea:88:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2 MTFDQURBNTEwHhcNMjUwODEwMTU0NTU1WhcNMjUwODE3MTU0NTU1WjAYMRYwFAYD VQQDEw02ODk4YmViMy0wYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsditz2lUiuWFsu3fUcZr5od1KZLtP0Otxv0Lst3xDkPIZT1pEsm/7IfBdQU3 O5/N6NEJMfiRJDAfhNkosgz9n2Nd6Z/r7Ja8oJ4+aJAy0smZFx014SyB0fesfgB9 39gRn/FRzy4o1QfsKWXXWBc+qtKzdGcN4rkl0+yP6Gn6UepoAzmk+M2TXFGPbW48 GGczGygY8L4oalPJdxaHyjyKJ0+k2NzH6fh/pvHS3jEEUSe57zou1wwTxN4gFQ71 M2HJYsRjuu+yB1ZRWO38I0UvCM9DF5fgqeGNk36Aeiw78ZPcKQo1qLJnGSMMAdqh elXe59FkPBiYsrW0mMrQQz36awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgMckps Ozhv0jVS2WvPGOEpxBD6MB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs Z3ZGYTNlN254b0poSEsybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB35w1MLZrfbMGtmn1zI8fMt3G4UTDK6kSUDWUyM0g6nahjREVadLup MCBh+p7KDtQaXBYdig17jEQbHFurW5+2VyayjS2RB3cJttoBZZkBJ4Pa1E12PYil QzdWZRXK4L9fogU19PUCaZAUCakUezZFxv0QOo7VrF28SCYLbZUp3i5KOFekiOXE JzZ+BtILWIEvLh/Fu11tQdLk2/ITBLgFF8Qk/My9UAEnyLa+2TW/6tnLKWka9SBD jR2Wf/v+qkilDsfqEXjKjSEkQxkuMFCbemv4NVYlVIXQsDFxrx4MdcfOVNuGzFTo 5GGtS0UiFckdlRJSlrzILS6a1FvT6ojx -----END CERTIFICATE-----Generated at Mon Aug 11 07:30:43 2025 by rpki-client