$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: 2rXaW6HTp8FTQvJUXv3SKBJ7/5ndHnkE7O59gi+8cLs= Subject key identifier: 77:70:E6:09:FE:A4:85:80:43:22:7E:AD:EF:50:09:A5:71:42:28:DC Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 018F Signing time: Sat 09 Aug 2025 03:57:07 +0000 Manifest this update: Sat 09 Aug 2025 03:57:06 +0000 Manifest next update: Sat 16 Aug 2025 03:57:06 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: liIjWJVzSVc6d1U8Z0QptFfLzE4Vadh1OlHPuRoCDGA=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: 7UGzCq6Cb6amiBq87W5KeE/DUZqLNVV6OVzp45wF3WQ=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: ACKLgoePLs3Ke5FTi4aaIlytoIlfeMfpdj0hhLm4rHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Aug 9 03:57:06 2025 GMT Not After : Aug 16 03:57:06 2025 GMT Subject: CN=6896c712-9bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:4b:82:19:82:1a:ee:59:4b:c1:76:9f:45: 8b:31:cf:75:f1:0e:1a:06:7d:5e:a4:c7:9a:4a:6f: 6c:7f:14:11:0b:73:e5:06:ae:fa:06:17:bb:0e:08: 9a:6f:7a:99:18:73:1c:fb:da:24:a4:2a:f2:f5:b6: 9b:2a:49:ea:13:65:44:09:2c:da:de:42:e0:e6:3a: 93:22:3c:25:99:3f:ca:53:32:c9:2a:da:9e:24:73: 1f:f6:8b:55:d7:cf:96:63:a2:7e:b7:da:05:95:7d: 44:ab:63:f9:6b:20:bb:88:96:c5:f8:3c:c6:50:92: 4b:aa:30:ec:33:cc:b6:83:00:c5:1c:64:c2:9a:d2: a9:94:7c:c7:6e:ea:cf:c5:d2:5b:85:d5:cb:f5:3d: 77:6c:81:2c:7f:e8:ea:1c:93:c4:42:a1:07:09:b3: 76:c4:d3:1a:bb:b3:dd:8c:51:18:43:b9:93:3d:c2: 09:e5:a0:9f:25:57:89:07:12:4c:74:20:f5:99:c9: a5:cc:b8:ea:c6:38:92:15:76:4e:d4:1c:63:be:55: 37:d5:74:d0:3c:c8:a5:41:0c:9e:7d:75:9a:f7:e9: 15:1a:67:b1:ae:58:de:d2:ad:c3:e2:7d:61:0a:22: c9:17:be:12:e9:6b:f5:bd:65:5c:4b:83:9c:29:8b: a8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:E6:09:FE:A4:85:80:43:22:7E:AD:EF:50:09:A5:71:42:28:DC X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d3:a7:e5:f4:10:93:e5:5a:8f:4b:bc:ee:0b:27:f4:f8:fd: ba:89:0c:f6:63:f3:f7:c3:0e:45:b2:fe:05:eb:67:ec:4e:ec: 2f:d1:2f:01:44:a9:0f:09:54:75:47:cc:58:92:69:55:e7:a6: 0e:49:7a:38:37:2f:7f:df:e3:08:60:91:21:37:3a:45:eb:16: 1c:cf:b8:8c:91:3e:8e:f0:82:d6:ee:0e:bf:7f:5a:3f:eb:72: 83:48:f3:d9:5f:e3:56:b3:fc:06:0c:5f:87:f0:d0:d2:97:6d: 03:7a:8c:e1:0f:2c:e0:63:26:86:50:83:61:01:15:7c:7a:b0: 2b:d5:1e:94:c1:73:c4:70:c8:c4:87:3e:da:92:d6:f9:91:2b: aa:e0:68:fc:db:39:27:79:52:63:c8:9c:77:b0:77:8f:cc:b5: 28:c2:ba:ac:39:d4:3a:4a:ad:5d:6c:d0:c2:5d:43:95:f2:7d: 11:06:00:e8:10:e2:91:26:fd:b9:63:a7:a7:ec:a3:f7:d6:b5: 76:17:20:19:21:3f:93:eb:58:42:e8:ea:50:1a:2e:c2:b7:ea: 96:95:8d:7f:e0:69:5d:10:86:bc:00:43:8f:c7:3a:14:3c:af: 6a:97:4b:a6:9e:8c:0f:e7:67:53:c2:be:2a:82:d3:1e:f3:cc: 91:4c:c5:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjUwODA5MDM1NzA2WhcNMjUwODE2MDM1NzA2WjAYMRYwFAYD VQQDEw02ODk2YzcxMi05YmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBBLghmCGu5ZS8F2n0WLMc918Q4aBn1epMeaSm9sfxQRC3PlBq76Bhe7Dgia b3qZGHMc+9okpCry9babKknqE2VECSza3kLg5jqTIjwlmT/KUzLJKtqeJHMf9otV 18+WY6J+t9oFlX1Eq2P5ayC7iJbF+DzGUJJLqjDsM8y2gwDFHGTCmtKplHzHburP xdJbhdXL9T13bIEsf+jqHJPEQqEHCbN2xNMau7PdjFEYQ7mTPcIJ5aCfJVeJBxJM dCD1mcmlzLjqxjiSFXZO1BxjvlU31XTQPMilQQyefXWa9+kVGmexrlje0q3D4n1h CiLJF74S6Wv1vWVcS4OcKYuoIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdw5gn+ pIWAQyJ+re9QCaVxQijcMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj06fl9BCT5VqPS7zuCyf0+P26iQz2Y/P3ww5Fsv4F62fsTuwv0S8B RKkPCVR1R8xYkmlV56YOSXo4Ny9/3+MIYJEhNzpF6xYcz7iMkT6O8ILW7g6/f1o/ 63KDSPPZX+NWs/wGDF+H8NDSl20DeozhDyzgYyaGUINhARV8erAr1R6UwXPEcMjE hz7aktb5kSuq4Gj82zkneVJjyJx3sHePzLUowrqsOdQ6Sq1dbNDCXUOV8n0RBgDo EOKRJv25Y6en7KP31rV2FyAZIT+T61hC6OpQGi7Ct+qWlY1/4GldEIa8AEOPxzoU PK9ql0umnowP52dTwr4qgtMe88yRTMVO -----END CERTIFICATE-----Generated at Sun Aug 10 04:26:21 2025 by rpki-client