$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: xGwkP5jxLVOMEjMMir0snit2t90E2/bSAi76Gvv+yAQ= Subject key identifier: 0F:C8:9C:CC:87:0A:07:B4:71:3C:B5:34:B1:CF:E6:41:0B:73:5E:00 Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: B6 Signing time: Mon 11 Aug 2025 06:13:57 +0000 Manifest this update: Mon 11 Aug 2025 06:13:57 +0000 Manifest next update: Mon 18 Aug 2025 06:13:57 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: 22t87Hs9U+JBuP/e+YUrdmS4mqzvw+cKEeZ+izhtMhg=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Aug 11 06:13:57 2025 GMT Not After : Aug 18 06:13:57 2025 GMT Subject: CN=68998a25-1215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:d9:9f:88:84:e7:77:d7:01:af:fe:21:4a: 0e:16:bb:97:f5:0e:c5:44:16:92:85:c8:4b:82:a1: 42:18:1d:37:35:91:84:7f:b3:84:1c:9b:71:40:c0: 84:b8:51:f0:ac:24:db:af:54:a8:b8:5a:b1:ce:14: 32:52:7a:1c:f3:09:99:02:f7:46:0f:13:af:d7:9b: 4e:bc:aa:81:78:b9:3a:c3:30:c8:67:91:ff:2e:ee: 12:27:eb:4a:51:6f:14:f8:7d:fe:40:53:b0:33:e3: 2b:db:61:2a:44:0d:c7:c4:c2:b9:1f:14:90:e2:c5: d6:19:07:93:74:e8:2e:0e:08:8a:21:cf:ec:6f:e8: dc:a5:68:49:fe:34:45:16:32:3c:61:cc:70:fd:04: 9a:a5:5a:88:57:33:63:58:7f:60:f2:1f:42:f1:be: 9a:3c:39:74:8e:3e:bb:90:dd:da:df:97:1e:74:db: 52:b3:b4:18:d4:82:5d:bc:c7:f0:46:a0:fd:61:9c: 19:b3:68:b1:3a:1d:a7:52:80:88:21:c5:9e:39:be: 8e:da:6d:fd:1f:f9:c0:d3:0f:fe:e1:14:f3:25:ce: b1:51:c6:4e:94:6a:2c:ee:e0:31:f3:a4:35:49:28: 3c:64:82:f4:a1:78:d6:11:48:74:d4:c9:15:86:ff: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:9C:CC:87:0A:07:B4:71:3C:B5:34:B1:CF:E6:41:0B:73:5E:00 X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:98:09:09:76:25:a5:39:ac:b1:0a:c3:e7:c9:16:4c:7f:4e: 6c:95:ad:68:bc:9c:af:c8:93:fd:8e:57:c8:74:3d:13:29:3d: 12:35:b8:f6:96:8e:d2:a2:5d:7e:67:2e:a1:bf:12:2b:f7:66: 79:29:81:2a:3b:da:b7:de:03:b5:38:70:be:75:22:a6:c2:78: 73:09:9a:71:3d:be:03:7a:d9:99:9f:3b:8f:8e:28:77:a7:ba: 97:ef:ba:58:78:e8:c2:05:2d:4c:d3:4d:f8:8c:21:b0:b2:aa: d2:0f:29:e2:84:9a:31:ee:46:ba:d4:8e:9c:bf:4b:db:aa:e7: 18:a8:f3:bd:59:1c:0c:d1:08:67:b4:81:8d:16:88:10:56:02: 79:69:fc:fd:a8:33:db:a7:69:0d:ec:e0:2c:23:b8:0f:1c:f6: 01:d4:02:86:15:d9:3e:9d:ef:65:d2:86:a2:8c:df:d5:10:da: d2:2b:fe:f0:1b:6f:1c:73:7f:4d:ba:24:d1:49:0b:cc:31:05: 0c:5b:5a:9b:6d:3e:2a:99:e5:c1:a7:06:29:eb:f7:c6:c8:62: 97:95:cf:79:fc:db:0f:b5:95:47:be:16:80:b3:03:9f:41:d8: a7:67:4f:07:b3:d1:cc:5b:56:bd:b7:02:36:0b:16:38:81:af: fb:95:a9:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjUwODExMDYxMzU3WhcNMjUwODE4MDYxMzU3WjAYMRYwFAYD VQQDEw02ODk5OGEyNS0xMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvc3Zn4iE53fXAa/+IUoOFruX9Q7FRBaShchLgqFCGB03NZGEf7OEHJtxQMCE uFHwrCTbr1SouFqxzhQyUnoc8wmZAvdGDxOv15tOvKqBeLk6wzDIZ5H/Lu4SJ+tK UW8U+H3+QFOwM+Mr22EqRA3HxMK5HxSQ4sXWGQeTdOguDgiKIc/sb+jcpWhJ/jRF FjI8Ycxw/QSapVqIVzNjWH9g8h9C8b6aPDl0jj67kN3a35cedNtSs7QY1IJdvMfw RqD9YZwZs2ixOh2nUoCIIcWeOb6O2m39H/nA0w/+4RTzJc6xUcZOlGos7uAx86Q1 SSg8ZIL0oXjWEUh01MkVhv/CmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/InMyH Cge0cTy1NLHP5kELc14AMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAImAkJdiWlOayxCsPnyRZMf05sla1ovJyvyJP9jlfIdD0TKT0SNbj2 lo7Sol1+Zy6hvxIr92Z5KYEqO9q33gO1OHC+dSKmwnhzCZpxPb4DetmZnzuPjih3 p7qX77pYeOjCBS1M0034jCGwsqrSDynihJox7ka61I6cv0vbqucYqPO9WRwM0Qhn tIGNFogQVgJ5afz9qDPbp2kN7OAsI7gPHPYB1AKGFdk+ne9l0oaijN/VENrSK/7w G28cc39NuiTRSQvMMQUMW1qbbT4qmeXBpwYp6/fGyGKXlc95/NsPtZVHvhaAswOf QdinZ08Hs9HMW1a9twI2CxY4ga/7lalW -----END CERTIFICATE-----Generated at Mon Aug 11 09:53:48 2025 by rpki-client