$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: EBciAKy8Jp3P9TVxq61FlVy8esvv79CGd1NLXUNCVmE= Subject key identifier: D1:77:8F:2A:7C:28:A1:AE:F2:D3:B9:DA:4E:F1:04:53:99:66:94:10 Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 0120 Signing time: Sun 03 Aug 2025 05:08:07 +0000 Manifest this update: Sun 03 Aug 2025 05:08:07 +0000 Manifest next update: Sun 10 Aug 2025 05:08:07 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: phjTj/2vUaQj6h6woqNGBh+Q7wr85fFo7BVRWuyrhUg=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Aug 3 05:08:07 2025 GMT Not After : Aug 10 05:08:07 2025 GMT Subject: CN=688eeeb7-34cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:5c:6d:01:b5:1e:9b:e4:a0:e3:c0:11:ee: 59:6e:17:fc:71:91:10:d6:72:24:52:b7:21:4f:43: ff:21:6c:df:b8:aa:61:2f:7d:ce:ee:56:65:35:b9: d1:05:30:35:0a:c4:7d:1a:d0:df:40:34:fa:c3:51: 64:a0:b6:73:1d:da:1d:7d:06:df:a9:bd:67:93:a9: a8:cd:c7:1e:42:a7:91:ff:65:3b:91:94:23:13:b9: 49:8e:7f:70:5c:61:9c:46:48:5b:4c:21:2c:31:62: e9:2d:bd:b4:fb:28:68:78:a6:1a:a8:24:31:95:a9: d3:c5:3c:8b:db:99:ee:c2:51:bd:e5:11:22:8e:4c: 04:a1:d8:fa:8d:8b:7e:3d:92:53:a6:83:89:12:39: 85:86:1c:84:e6:8a:35:bc:ab:e4:a8:cc:e9:f0:a2: 4e:7f:19:0e:d9:13:05:c3:51:b8:a0:9b:a9:a6:03: b0:34:35:26:3a:b2:5f:63:37:0e:a7:20:f6:78:33: 72:8d:34:52:56:07:c4:23:71:bc:5f:33:ed:3d:be: cb:ef:39:c3:6d:9b:61:5c:bd:11:7d:45:02:bd:e3: 1b:3d:fd:98:84:80:49:91:30:fd:70:1c:f3:71:ce: 60:45:4a:92:43:34:c9:cb:6a:a4:b7:96:fa:d5:04: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:77:8F:2A:7C:28:A1:AE:F2:D3:B9:DA:4E:F1:04:53:99:66:94:10 X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:db:0d:24:fa:e5:37:78:11:33:e2:1e:9d:82:25:ed:8d:1f: 49:39:1c:81:55:89:02:76:18:18:f8:5d:db:65:13:fd:d3:68: 29:a2:7e:61:63:5c:fa:0a:ee:7a:94:2b:51:00:88:79:87:12: 03:66:ba:67:2b:b7:ca:16:55:d8:e6:6f:fc:b5:35:bf:e2:25: d6:10:2b:08:6e:93:2e:53:b5:a2:a2:4a:07:53:7a:89:16:c7: 1e:b6:29:67:ad:0a:c1:3a:5a:42:89:f0:46:b6:f7:7f:b4:0a: af:21:85:5f:b2:a7:c5:fd:45:e4:e6:d6:e8:cd:ac:21:2a:1b: ef:54:63:b7:ac:02:8c:ee:59:19:7a:c1:e7:b9:b2:b4:14:2f: 2c:fe:91:73:6c:05:a9:58:77:ee:dc:f5:17:bf:15:e7:8d:93: 95:67:7b:e7:81:e3:42:ac:ca:9f:bb:8d:0e:2a:1a:b3:e1:46: 20:0c:6b:01:44:d5:10:8d:0e:f9:ac:1f:4d:c6:7a:d8:09:de: 4e:7e:38:2e:40:8a:d6:41:6d:71:8c:2a:c6:f3:89:fa:43:bf: 04:30:e2:0b:92:4c:67:63:d7:b6:08:d1:ff:36:26:cf:50:f8: 02:e7:ad:52:5d:96:df:2a:06:18:ae:4c:fb:54:b8:4e:16:a0: 0e:63:70:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUwODAzMDUwODA3WhcNMjUwODEwMDUwODA3WjAYMRYwFAYD VQQDEw02ODhlZWViNy0zNGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNFcbQG1HpvkoOPAEe5Zbhf8cZEQ1nIkUrchT0P/IWzfuKphL33O7lZlNbnR BTA1CsR9GtDfQDT6w1FkoLZzHdodfQbfqb1nk6mozcceQqeR/2U7kZQjE7lJjn9w XGGcRkhbTCEsMWLpLb20+yhoeKYaqCQxlanTxTyL25nuwlG95REijkwEodj6jYt+ PZJTpoOJEjmFhhyE5oo1vKvkqMzp8KJOfxkO2RMFw1G4oJuppgOwNDUmOrJfYzcO pyD2eDNyjTRSVgfEI3G8XzPtPb7L7znDbZthXL0RfUUCveMbPf2YhIBJkTD9cBzz cc5gRUqSQzTJy2qkt5b61QTiFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF3jyp8 KKGu8tO52k7xBFOZZpQQMB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv2w0k+uU3eBEz4h6dgiXtjR9JORyBVYkCdhgY+F3bZRP902gpon5h Y1z6Cu56lCtRAIh5hxIDZrpnK7fKFlXY5m/8tTW/4iXWECsIbpMuU7WiokoHU3qJ FscetilnrQrBOlpCifBGtvd/tAqvIYVfsqfF/UXk5tbozawhKhvvVGO3rAKM7lkZ esHnubK0FC8s/pFzbAWpWHfu3PUXvxXnjZOVZ3vngeNCrMqfu40OKhqz4UYgDGsB RNUQjQ75rB9NxnrYCd5OfjguQIrWQW1xjCrG84n6Q78EMOILkkxnY9e2CNH/NibP UPgC561SXZbfKgYYrkz7VLhOFqAOY3Bq -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:15 2025 by rpki-client