$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json) Hash identifier: UazmoomfAqr/VtpN/E7LGrZDvW3xnZ/QBCzv6VktIYw= Subject key identifier: 9A:2B:87:D1:5F:92:99:3E:98:69:22:2C:F4:D3:56:E3:5D:4A:B7:14 Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft Manifest number: 07EC Signing time: Sun 10 Aug 2025 21:01:42 +0000 Manifest this update: Sun 10 Aug 2025 21:01:42 +0000 Manifest next update: Sun 17 Aug 2025 21:01:42 +0000 Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: Wx37A55yP4w7DirSjOyJneaF0SxJgcSr1aGPt5A/DXY=) 2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: AWPlkT/VPOlTrND3SaqX87pYECk2GQcIiP0u70mzoFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Validity Not Before: Aug 10 21:01:42 2025 GMT Not After : Aug 17 21:01:42 2025 GMT Subject: CN=689908b6-2dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:21:e5:7e:23:ab:ad:4c:eb:9f:d5:b3:ba: ef:58:e5:5a:77:a4:0f:fc:d0:bb:b8:f2:c9:d4:eb: 1f:bc:f8:b8:94:ee:c9:c1:a6:b9:46:00:ed:86:09: 91:60:57:f9:5d:23:a0:8f:51:00:5c:2f:79:e6:db: b2:00:ee:41:7f:75:53:aa:d9:09:27:78:50:0c:89: 41:3e:28:69:be:8e:92:78:bf:98:a0:de:d9:1e:b7: 74:18:1f:72:e3:af:a5:92:0d:07:55:fa:e3:bc:a7: ff:72:04:eb:2e:cd:b4:77:c5:45:ee:e8:db:e0:48: 4f:8d:bb:8f:e2:bb:08:a6:6c:61:90:60:6a:69:b7: 31:6c:f9:6e:21:08:5d:f6:3c:85:d0:5a:97:42:b1: 41:c5:69:c0:71:d3:4d:f5:83:d1:8d:95:e4:c5:b7: ad:87:7c:b0:a5:fe:46:46:21:26:7a:bf:44:cf:6d: 63:c7:f9:52:da:0c:81:50:2a:4e:78:8b:d0:8f:db: f8:06:3a:8d:c2:b5:99:dd:92:20:d0:d5:9a:cb:0e: f7:d2:30:ea:48:b9:6b:df:69:67:59:75:ce:d2:69: 54:e2:7a:f4:40:b6:c5:06:0d:21:12:5d:a2:e5:73: 9b:85:5f:c7:3b:20:a2:d8:36:98:31:10:8e:44:9c: 72:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2B:87:D1:5F:92:99:3E:98:69:22:2C:F4:D3:56:E3:5D:4A:B7:14 X509v3 Authority Key Identifier: keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:e5:1b:f7:b0:8e:67:14:62:70:78:d9:41:71:6c:a8:bd:55: ab:ec:1f:ef:bc:d4:a9:a1:70:1b:80:77:12:c4:61:84:29:c7: 37:79:3c:62:8e:89:bb:2b:76:86:4f:7f:47:c0:36:98:cf:45: 08:59:6c:0b:fb:f7:d1:fa:3d:2e:58:59:fe:ae:b2:f9:83:0c: 9e:26:0c:c5:64:b9:26:06:bf:dc:50:cc:30:3b:10:7d:0a:e6: c4:28:bf:f8:eb:8a:d0:cf:7a:fb:f1:4f:6d:e0:d9:86:b8:a9: 37:2b:8b:25:3b:cc:7e:44:f2:1d:92:be:ac:b3:b9:71:8c:26: 90:37:72:c1:58:7e:6d:cc:97:d3:75:98:bb:52:a6:ae:4c:94: e6:b4:80:ec:0a:6a:84:78:3f:fb:ac:94:d5:6a:40:53:eb:9b: ca:56:5b:c2:49:2a:76:16:6f:1d:42:0e:56:e8:1b:9a:e2:6f: 3c:bd:29:84:26:d2:80:19:1c:98:13:20:58:8a:8f:43:4d:19: 98:3a:45:85:f8:dc:ad:c3:fd:ad:12:d7:1d:de:67:98:85:00: a4:4e:e4:4c:7d:3e:04:b9:6e:74:39:37:c3:84:38:9d:3f:83: 56:21:39:22:07:5c:9a:b9:c6:ed:3a:cc:dc:6d:e0:e6:ce:75: 4b:bc:0d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0NTgxMTAvBgNVBAUTKERENkYwMTRGOEFENDVEQTg1RDBFMTZGMkIzNzY4NzY3 OTQ0NDg1QjMwHhcNMjUwODEwMjEwMTQyWhcNMjUwODE3MjEwMTQyWjAYMRYwFAYD VQQDEw02ODk5MDhiNi0yZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQEh5X4jq61M65/Vs7rvWOVad6QP/NC7uPLJ1OsfvPi4lO7Jwaa5RgDthgmR YFf5XSOgj1EAXC955tuyAO5Bf3VTqtkJJ3hQDIlBPihpvo6SeL+YoN7ZHrd0GB9y 46+lkg0HVfrjvKf/cgTrLs20d8VF7ujb4EhPjbuP4rsIpmxhkGBqabcxbPluIQhd 9jyF0FqXQrFBxWnAcdNN9YPRjZXkxbeth3ywpf5GRiEmer9Ez21jx/lS2gyBUCpO eIvQj9v4BjqNwrWZ3ZIg0NWayw730jDqSLlr32lnWXXO0mlU4nr0QLbFBg0hEl2i 5XObhV/HOyCi2DaYMRCORJxy1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJorh9Ff kpk+mGkiLPTTVuNdSrcUMB8GA1UdIwQYMBaAFN1vAU+K1F2oXQ4W8rN2h2eURIWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQ1OC9GOEFGMTIwMkY2 MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhhaGREaGJ5czNhSFo1UkVo Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXOEJUNHJVWGFoZERoYnlzM2FIWjVSRWhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQ1OC9GOEFGMTIwMkY2MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhh aGREaGJ5czNhSFo1UkVoYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC75Rv3sI5nFGJweNlBcWyovVWr7B/vvNSpoXAbgHcSxGGEKcc3eTxi jom7K3aGT39HwDaYz0UIWWwL+/fR+j0uWFn+rrL5gwyeJgzFZLkmBr/cUMwwOxB9 CubEKL/464rQz3r78U9t4NmGuKk3K4slO8x+RPIdkr6ss7lxjCaQN3LBWH5tzJfT dZi7UqauTJTmtIDsCmqEeD/7rJTVakBT65vKVlvCSSp2Fm8dQg5W6Bua4m88vSmE JtKAGRyYEyBYio9DTRmYOkWF+Nytw/2tEtcd3meYhQCkTuRMfT4EuW50OTfDhDid P4NWITkiB1yaucbtOszcbeDmznVLvA3q -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:27 2025 by rpki-client