$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json) Hash identifier: lMn9eh1PoO86NP0PrDwh5C8ygXUHBzzFeQNuSMbdkVI= Subject key identifier: 0C:00:13:71:8E:C2:E3:F0:3F:20:AC:F8:99:B6:B4:D3:2D:F5:58:8A Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft Manifest number: 30 Signing time: Mon 11 Aug 2025 08:03:15 +0000 Manifest this update: Mon 11 Aug 2025 08:03:15 +0000 Manifest next update: Mon 18 Aug 2025 08:03:15 +0000 Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: 4NIUlSgGUwRluT+tYmC469mcAYjOqec3CAvgruHQRzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Validity Not Before: Aug 11 08:03:15 2025 GMT Not After : Aug 18 08:03:15 2025 GMT Subject: CN=6899a3c3-d70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:96:c8:b8:48:c0:d7:2d:36:81:7c:34:55: 06:17:58:79:c3:b5:7f:68:38:bd:72:5e:e0:f1:12: bd:92:e7:82:c0:cb:b2:fe:0f:29:5b:49:b1:b7:ac: 9f:1b:42:50:68:2b:6d:c6:7e:33:08:7a:ca:54:03: 44:c2:f3:3b:1c:23:02:13:49:08:fb:8b:94:5f:d1: fa:85:3b:2b:6d:1f:a3:60:98:6c:0e:e3:26:bd:46: 1d:7f:a3:8b:34:2d:5e:5d:ed:13:44:66:d0:79:60: e2:25:1a:5c:e8:80:50:ec:76:52:be:c5:12:10:dd: a2:45:94:2d:2d:b2:fb:d8:eb:5e:fa:2b:d6:48:14: 55:17:ac:9b:47:73:06:a8:e2:34:c0:11:43:4e:ce: 3b:3e:e9:ec:1a:06:f2:c9:8f:b5:36:6a:be:64:2e: 78:86:99:1f:a4:2b:e9:5b:f5:0e:f0:8d:09:57:d8: a3:17:de:50:fa:11:c3:78:e0:d2:cd:39:fc:5a:33: 9c:a9:90:86:09:d3:72:8f:b0:06:33:bd:b1:d9:ba: 35:eb:d4:ba:80:22:25:93:fc:01:92:83:d0:0a:6f: 4b:e7:07:1b:98:56:9a:a4:fb:85:f8:65:ab:51:56: 98:41:d5:72:6a:3c:56:4c:79:1d:0e:6e:99:48:c6: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:00:13:71:8E:C2:E3:F0:3F:20:AC:F8:99:B6:B4:D3:2D:F5:58:8A X509v3 Authority Key Identifier: keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:96:e5:8e:b5:f1:ad:5a:30:ba:91:5c:34:89:ba:09:5a:3c: 7d:e3:e8:50:df:4e:e0:3a:4d:a2:ba:a6:4c:04:2a:d3:81:fc: 35:6d:9e:f4:da:e5:b6:46:22:f0:64:ac:8f:9c:52:c7:ba:45: e1:9f:a9:b8:c1:60:81:4f:05:a0:2e:3f:6e:6a:54:42:d4:7a: 03:3d:0a:51:a7:59:ae:10:07:78:92:a8:7e:a1:b5:52:a8:eb: 23:0d:1c:48:8c:70:35:a4:03:0d:ca:72:1c:43:0a:d5:5a:6a: 4e:bb:ae:44:fa:74:ae:ec:20:79:7d:96:7d:f6:5e:d5:39:c7: 94:6e:dc:57:83:4c:68:35:bb:c6:4e:00:f6:48:17:25:36:04: 18:01:5e:38:dd:81:e6:45:d7:85:ef:46:23:cc:d7:cf:df:43: ea:7d:ac:6c:8b:fd:9c:0f:1f:55:3e:e5:12:aa:35:56:26:6e: 50:2d:9f:0e:26:c5:ca:fa:37:05:82:22:ea:34:39:b0:d9:a5: e6:6d:66:59:30:1d:54:d1:82:cf:10:32:9a:07:0e:6a:64:10: 14:5e:4a:73:dd:4d:c9:11:94:78:56:b0:14:44:8d:4c:6e:69: 2a:63:00:07:0b:0b:e6:98:fe:3b:0e:57:cb:05:37:41:1a:3b: dd:be:ad:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTgyRDExMC8GA1UEBRMoRENDQjQ2RUFBRERDRDczRjVBQUZBRTBCM0YwMDJFRDky MEMwRTg3RTAeFw0yNTA4MTEwODAzMTVaFw0yNTA4MTgwODAzMTVaMBgxFjAUBgNV BAMTDTY4OTlhM2MzLWQ3MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG/pbIuEjA1y02gXw0VQYXWHnDtX9oOL1yXuDxEr2S54LAy7L+DylbSbG3rJ8b QlBoK23GfjMIespUA0TC8zscIwITSQj7i5Rf0fqFOyttH6NgmGwO4ya9Rh1/o4s0 LV5d7RNEZtB5YOIlGlzogFDsdlK+xRIQ3aJFlC0tsvvY6176K9ZIFFUXrJtHcwao 4jTAEUNOzjs+6ewaBvLJj7U2ar5kLniGmR+kK+lb9Q7wjQlX2KMX3lD6EcN44NLN OfxaM5ypkIYJ03KPsAYzvbHZujXr1LqAIiWT/AGSg9AKb0vnBxuYVpqk+4X4ZatR VphB1XJqPFZMeR0ObplIxhJxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDAATcY7C 4/A/IKz4mba00y31WIowHwYDVR0jBBgwFoAU3MtG6q3c1z9ar64LPwAu2SDA6H4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxODJELzQwNzQ0OEJBM0I4 NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5YXI2NExQd0F1MlNEQTZI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM010RzZxM2MxejlhcjY0TFB3QXUyU0RBNkg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx ODJELzQwNzQ0OEJBM0I4NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5 YXI2NExQd0F1MlNEQTZINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuW5Y618a1aMLqRXDSJuglaPH3j6FDfTuA6TaK6pkwEKtOB/DVtnvTa 5bZGIvBkrI+cUse6ReGfqbjBYIFPBaAuP25qVELUegM9ClGnWa4QB3iSqH6htVKo 6yMNHEiMcDWkAw3KchxDCtVaak67rkT6dK7sIHl9ln32XtU5x5Ru3FeDTGg1u8ZO APZIFyU2BBgBXjjdgeZF14XvRiPM18/fQ+p9rGyL/ZwPH1U+5RKqNVYmblAtnw4m xcr6NwWCIuo0ObDZpeZtZlkwHVTRgs8QMpoHDmpkEBReSnPdTckRlHhWsBREjUxu aSpjAAcLC+aY/jsOV8sFN0EaO92+rcM= -----END CERTIFICATE-----Generated at Tue Aug 12 19:11:07 2025 by rpki-client