$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json) Hash identifier: cHr65QsY7R4UnVSoIPhfcGrtiuN9pW0FEWJc0cTGq7U= Subject key identifier: 30:43:D5:D2:3A:47:DC:B1:A2:5B:A9:C7:74:4C:4C:1D:E8:C6:20:B5 Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft Manifest number: 7D Signing time: Sat 09 Aug 2025 07:12:48 +0000 Manifest this update: Sat 09 Aug 2025 07:12:48 +0000 Manifest next update: Sat 16 Aug 2025 07:12:48 +0000 Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: 2wlVXTIqVeHQbv1XHHzi3ZPfCxOtzSzcsLukNMYKgJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Validity Not Before: Aug 9 07:12:48 2025 GMT Not After : Aug 16 07:12:48 2025 GMT Subject: CN=6896f4f0-70c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7c:ea:62:d9:4b:9b:ec:9c:50:08:f8:4b:56: e7:d3:de:52:f7:3b:9a:8d:25:7c:97:2c:ee:95:a0: e8:20:a5:94:c1:04:ff:55:94:b9:b4:1b:80:c4:f6: 05:df:dc:33:84:bf:71:d0:e9:c8:d3:65:4f:b0:1f: fe:8a:cf:28:e1:0d:f6:49:14:be:73:34:90:87:20: 5b:7d:d6:7a:f7:40:ff:ca:da:d7:78:db:58:8f:41: b0:6e:ce:e0:a1:a1:c3:85:91:71:43:fa:4e:85:13: cc:4c:cf:6b:43:1e:98:95:2e:f9:71:94:8e:5b:17: c5:ed:4e:37:1a:ef:6f:39:53:59:aa:cd:f6:23:c4: 9f:b7:52:bf:29:e8:f1:63:2b:19:a4:ff:2b:1a:ed: ac:cc:5a:2f:43:1c:dd:8b:e0:6e:40:07:3e:2a:04: 22:f4:1b:25:38:a5:de:92:ec:a1:0f:78:67:bd:cc: 06:8f:3a:f8:6c:e9:0a:f0:d3:4a:fe:ce:04:b7:7e: 6c:f0:8d:c5:2f:4e:c8:1b:24:3e:93:df:39:cc:00: 28:7f:00:d2:34:11:12:8b:c5:45:1d:cf:8b:8f:ad: 39:38:69:81:90:7c:73:19:cf:52:12:e9:bf:90:28: 2b:d0:8e:fe:05:10:33:93:5e:26:45:be:76:77:b6: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:43:D5:D2:3A:47:DC:B1:A2:5B:A9:C7:74:4C:4C:1D:E8:C6:20:B5 X509v3 Authority Key Identifier: keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:71:aa:29:db:d4:5f:fc:d9:b2:6c:35:3f:68:22:ca:01:34: 2c:76:3e:77:aa:05:29:c4:b0:68:c2:56:e6:c7:d6:5c:87:8e: 3e:9b:43:e5:7d:fe:1d:80:07:30:64:23:00:b8:92:52:d6:54: 8b:00:4a:f7:f6:90:98:e8:b1:58:03:86:48:b3:68:7d:66:90: 90:22:fa:83:47:ae:40:0a:81:ce:99:0f:a1:75:d9:d7:f4:92: a8:90:ef:32:7e:98:c8:af:6c:2c:bb:58:50:cb:1f:c4:84:24: c3:da:e4:a7:ff:17:e8:03:40:4d:1f:34:04:3b:4f:d2:45:5c: 69:f2:c0:2b:eb:ca:2c:4d:c1:bf:94:c1:ab:4b:04:00:da:4e: 4c:e4:9d:bf:72:a5:23:d7:28:a2:3e:24:c5:db:d0:79:b0:f0: dd:c2:2e:61:35:92:ab:f1:c9:ae:49:d6:8a:ab:fd:84:ea:fb: df:cd:03:1a:24:0d:ee:1c:0e:39:02:36:87:b4:dd:99:f4:56: 11:91:36:65:bf:da:00:16:a8:bb:f9:30:8c:a1:50:8d:8e:99: 3a:89:50:ef:43:6b:e7:a4:16:80:b9:fa:d4:80:b3:d3:86:80: 28:1d:0a:a3:dc:c8:b7:22:14:1a:2b:bc:a2:ab:ed:6a:6e:b4: 25:59:21:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkM2MTExMC8GA1UEBRMoMEI3N0Y3QkQyM0NCNDI4NThEMEJCRkY2RjdFM0FDNzMx MzU1MzFENTAeFw0yNTA4MDkwNzEyNDhaFw0yNTA4MTYwNzEyNDhaMBgxFjAUBgNV BAMTDTY4OTZmNGYwLTcwYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjfOpi2Uub7JxQCPhLVufT3lL3O5qNJXyXLO6VoOggpZTBBP9VlLm0G4DE9gXf 3DOEv3HQ6cjTZU+wH/6KzyjhDfZJFL5zNJCHIFt91nr3QP/K2td421iPQbBuzuCh ocOFkXFD+k6FE8xMz2tDHpiVLvlxlI5bF8XtTjca7285U1mqzfYjxJ+3Ur8p6PFj Kxmk/ysa7azMWi9DHN2L4G5ABz4qBCL0GyU4pd6S7KEPeGe9zAaPOvhs6Qrw00r+ zgS3fmzwjcUvTsgbJD6T3znMACh/ANI0ERKLxUUdz4uPrTk4aYGQfHMZz1IS6b+Q KCvQjv4FEDOTXiZFvnZ3tmETAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMEPV0jpH 3LGiW6nHdExMHejGILUwHwYDVR0jBBgwFoAUC3f3vSPLQoWNC7/29+OscxNVMdUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQzYxLzRDNkY2ODU2QjZD NDExRUZBMjRBQTYxNkM0RjlBRTAyL0MzZjN2U1BMUW9XTkM3XzI5LU9zY3hOVk1k VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzNmM3ZTUExRb1dOQzdfMjktT3NjeE5WTWRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QzYxLzRDNkY2ODU2QjZDNDExRUZBMjRBQTYxNkM0RjlBRTAyL0MzZjN2U1BMUW9X TkM3XzI5LU9zY3hOVk1kVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACtxqinb1F/82bJsNT9oIsoBNCx2PneqBSnEsGjCVubH1lyHjj6bQ+V9 /h2ABzBkIwC4klLWVIsASvf2kJjosVgDhkizaH1mkJAi+oNHrkAKgc6ZD6F12df0 kqiQ7zJ+mMivbCy7WFDLH8SEJMPa5Kf/F+gDQE0fNAQ7T9JFXGnywCvryixNwb+U watLBADaTkzknb9ypSPXKKI+JMXb0Hmw8N3CLmE1kqvxya5J1oqr/YTq+9/NAxok De4cDjkCNoe03Zn0VhGRNmW/2gAWqLv5MIyhUI2OmTqJUO9Da+ekFoC5+tSAs9OG gCgdCqPcyLciFBorvKKr7WputCVZIQA= -----END CERTIFICATE-----Generated at Sat Aug 9 23:09:05 2025 by rpki-client