$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: wd/I1441m/yLEbT5k4hhZHiLGjSOt0FYi+NkbFYLplY= Subject key identifier: E5:33:05:65:13:BB:52:E2:4F:52:ED:E8:D9:00:5E:D3:EA:DA:DC:98 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 0572 Signing time: Fri 08 Aug 2025 23:45:50 +0000 Manifest this update: Fri 08 Aug 2025 23:45:50 +0000 Manifest next update: Fri 15 Aug 2025 23:45:50 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: 8kL7wvaxdKNQ70zHbgguEhJCtCKlEY1+f31k7oqOyIc=) 2: B52EA19A6E0B11ECA6057963C4F9AE02.roa (hash: sRAPrM6e/yJbsGZwUamXGzz2TWejjmVOjZsdsTU0i6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Aug 8 23:45:50 2025 GMT Not After : Aug 15 23:45:50 2025 GMT Subject: CN=68968c2e-bc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:d2:68:1d:fc:39:f1:12:e1:6e:62:a5:d7: f9:fd:df:3a:0a:e5:ac:3b:92:1c:03:43:2f:f6:11: 70:7a:ba:cf:40:49:46:8c:9f:99:c3:f6:ca:48:4d: bb:bc:fd:c2:af:df:ba:12:fd:fa:fc:d5:26:a6:f1: 0a:3a:ac:d3:24:fa:85:9b:3f:58:6e:45:fc:91:f1: 78:f9:a0:d2:b4:e8:63:37:67:c6:d2:e1:b0:59:3e: c1:65:e0:f4:77:d1:84:1c:86:9c:12:cd:87:49:dc: 6e:24:27:48:d1:fb:03:a8:47:77:fb:cc:52:95:02: cc:95:46:91:d5:54:fa:59:8a:d2:49:e4:32:4c:2a: 07:aa:a7:25:53:d2:a0:93:7b:8b:50:23:3a:ad:6d: 96:06:bd:fa:f7:9d:90:0e:17:72:32:49:af:fd:36: 03:95:e1:8d:30:92:b8:37:ac:a2:30:71:d8:3e:5c: 41:64:ed:ec:10:f5:94:b0:b0:ac:60:28:b0:b9:95: e1:20:06:90:8c:8c:07:e7:27:cd:8e:56:85:76:34: 87:a6:9c:19:8d:da:d7:c1:5a:22:51:26:e9:d0:d4: f5:01:c7:49:cd:2d:cf:92:fd:c5:35:89:04:0b:62: c4:70:3e:ec:39:17:9e:54:6a:03:43:6f:a3:6f:45: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:33:05:65:13:BB:52:E2:4F:52:ED:E8:D9:00:5E:D3:EA:DA:DC:98 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:84:56:ea:c3:a0:80:a9:43:be:bf:68:77:13:b6:3f:90:ca: 2f:89:80:1e:08:e3:88:95:dc:c4:04:0e:1f:9a:91:5f:66:4c: 67:a7:b7:f2:2d:eb:79:08:28:73:57:7b:6f:33:9f:d6:25:e1: b7:40:36:dc:3b:d7:e0:56:cc:51:06:be:ad:fd:ac:1d:8f:8f: bd:c8:ea:a7:88:18:24:6c:a2:ab:09:08:b9:f5:a6:e0:fa:e0: 05:f0:47:92:6d:50:4e:b4:ea:a9:08:79:d5:12:96:c8:a4:1a: 20:a8:a6:b7:61:73:ba:b6:73:45:ce:b2:5a:a3:ee:47:37:9f: e6:66:79:40:b1:81:48:c1:9b:a3:1b:9e:9b:e8:c9:d9:77:18: 48:be:b4:01:fb:d5:d6:b5:8d:5c:02:eb:0e:df:49:26:0e:a7: 3e:78:a0:4b:5d:e3:e3:32:c8:79:d5:ae:93:15:81:a3:94:ab: 8d:d2:44:25:83:6d:74:4b:77:48:22:12:82:b7:b0:67:79:0c: 5b:14:77:19:f6:93:a2:e3:0e:0c:0b:7d:eb:81:b3:16:bb:e1: fe:2f:7d:1a:20:88:af:3d:8a:cd:eb:c1:2d:0b:aa:43:d8:f0: 45:d2:db:81:fa:71:83:40:36:a8:c2:4d:5d:42:0e:8e:98:de: 1d:57:c5:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjUwODA4MjM0NTUwWhcNMjUwODE1MjM0NTUwWjAYMRYwFAYD VQQDEw02ODk2OGMyZS1iYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrfSaB38OfES4W5ipdf5/d86CuWsO5IcA0Mv9hFwerrPQElGjJ+Zw/bKSE27 vP3Cr9+6Ev36/NUmpvEKOqzTJPqFmz9YbkX8kfF4+aDStOhjN2fG0uGwWT7BZeD0 d9GEHIacEs2HSdxuJCdI0fsDqEd3+8xSlQLMlUaR1VT6WYrSSeQyTCoHqqclU9Kg k3uLUCM6rW2WBr36952QDhdyMkmv/TYDleGNMJK4N6yiMHHYPlxBZO3sEPWUsLCs YCiwuZXhIAaQjIwH5yfNjlaFdjSHppwZjdrXwVoiUSbp0NT1AcdJzS3Pkv3FNYkE C2LEcD7sOReeVGoDQ2+jb0UzrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUzBWUT u1LiT1Lt6NkAXtPq2tyYMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlhFbqw6CAqUO+v2h3E7Y/kMoviYAeCOOIldzEBA4fmpFfZkxnp7fy Let5CChzV3tvM5/WJeG3QDbcO9fgVsxRBr6t/awdj4+9yOqniBgkbKKrCQi59abg +uAF8EeSbVBOtOqpCHnVEpbIpBogqKa3YXO6tnNFzrJao+5HN5/mZnlAsYFIwZuj G56b6MnZdxhIvrQB+9XWtY1cAusO30kmDqc+eKBLXePjMsh51a6TFYGjlKuN0kQl g210S3dIIhKCt7BneQxbFHcZ9pOi4w4MC33rgbMWu+H+L30aIIivPYrN68EtC6pD 2PBF0tuB+nGDQDaowk1dQg6OmN4dV8Ug -----END CERTIFICATE-----Generated at Sat Aug 9 14:29:14 2025 by rpki-client