$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: Vxb7DAcvHfQnt18IjDIpvPRFpYpOBxKPfnv2GfRf4pg= Subject key identifier: 44:6A:0F:4B:2E:9F:12:A0:F5:3A:CD:6A:8F:55:B7:E8:D7:BB:EE:5E Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 10A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 194D Signing time: Fri 18 Jul 2025 17:30:28 +0000 Manifest this update: Fri 18 Jul 2025 17:30:27 +0000 Manifest next update: Fri 25 Jul 2025 17:30:27 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: Y3MajJgLfKP3gSlP5w1s25c3a0hT9yWazKp8Nl/QMZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4257 (0x10a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Jul 18 17:30:27 2025 GMT Not After : Jul 25 17:30:27 2025 GMT Subject: CN=687a84b3-f4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ac:35:e8:65:20:43:89:e7:60:0b:c6:20:0d: 5d:0f:0e:c4:cd:88:a6:bf:ea:44:00:ac:00:9a:9d: 85:2b:87:65:b9:00:0f:72:5f:34:50:b3:8d:51:fb: 23:ae:90:5f:78:7c:7c:75:31:6f:a1:d5:14:36:10: 06:aa:91:8c:ce:10:25:f6:58:18:e8:f2:6d:8e:7a: 03:5b:f1:dd:b8:81:ef:d5:5e:cf:d7:38:a9:45:4a: 79:26:57:70:cf:e2:dc:07:1f:2a:6b:17:82:41:91: b6:a6:21:eb:08:7c:81:c9:ef:dc:86:0a:00:8a:44: a1:c7:c4:e6:13:8d:c5:3a:2d:27:e2:88:21:4f:10: a2:d1:87:5d:5b:8a:3b:70:8f:2d:ce:62:f2:fd:8c: 40:03:77:1f:5b:c4:62:82:20:0e:b3:8b:e1:d1:63: 6c:99:23:0b:9a:f6:cd:fd:ff:e2:53:52:a8:f3:22: 50:1c:12:54:0c:b9:f1:33:70:44:57:24:d8:61:69: 54:3b:8e:bb:a1:a5:28:01:a7:a9:39:06:75:49:96: 18:82:9c:39:f4:2d:8d:83:bd:7b:54:33:e2:8b:a2: 3b:e8:95:f8:5b:f6:cf:c5:27:62:da:28:2e:6e:ea: 93:7f:0f:df:a9:df:db:19:1a:fc:19:d2:50:f9:bc: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:0F:4B:2E:9F:12:A0:F5:3A:CD:6A:8F:55:B7:E8:D7:BB:EE:5E X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:7d:b7:78:41:cb:2d:a6:56:0d:c8:9b:b1:57:85:be:af:ad: f3:d2:ac:79:60:90:23:64:46:35:29:78:70:e1:70:2f:f4:99: 09:50:56:52:f0:48:cd:dd:31:ec:6e:88:18:f8:24:86:74:1d: 06:3e:6c:02:5e:90:17:05:b1:b1:35:8a:1a:97:3b:b2:0b:f9: 70:c5:c3:d7:20:cd:23:63:e3:0c:f0:93:0b:2a:1d:a7:c1:2b: c4:e4:68:37:d5:47:fc:01:21:4f:bf:a7:1f:32:f2:8e:4c:5e: 25:6a:77:a5:d3:fd:04:69:8c:88:8f:a8:18:25:f5:eb:64:5e: db:09:8d:40:76:c6:0a:56:9c:6b:94:2a:3c:10:61:0c:9f:65: 8d:a2:5a:86:85:0d:9f:c2:7d:b3:2e:04:d3:3a:11:70:f2:3e: 89:6e:d6:3b:94:00:24:8c:91:bf:4e:72:a1:80:80:c2:8c:6f: 0d:93:6e:4b:19:dc:30:8d:25:68:b5:2c:51:da:1b:de:00:bb: 81:f1:bb:89:d2:7f:60:6f:ab:7a:45:11:b6:b0:d9:54:4d:70: af:93:ed:90:5a:f8:e4:4e:f9:d9:b4:57:a5:cf:e5:6f:7e:6a: 56:ae:2a:91:4b:6a:6f:87:21:c1:1f:ea:a6:f2:6c:d9:af:b7: 4c:c2:0a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjUwNzE4MTczMDI3WhcNMjUwNzI1MTczMDI3WjAYMRYwFAYD VQQDEw02ODdhODRiMy1mNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36w16GUgQ4nnYAvGIA1dDw7EzYimv+pEAKwAmp2FK4dluQAPcl80ULONUfsj rpBfeHx8dTFvodUUNhAGqpGMzhAl9lgY6PJtjnoDW/HduIHv1V7P1zipRUp5Jldw z+LcBx8qaxeCQZG2piHrCHyBye/chgoAikShx8TmE43FOi0n4oghTxCi0YddW4o7 cI8tzmLy/YxAA3cfW8RigiAOs4vh0WNsmSMLmvbN/f/iU1Ko8yJQHBJUDLnxM3BE VyTYYWlUO467oaUoAaepOQZ1SZYYgpw59C2Ng717VDPii6I76JX4W/bPxSdi2igu buqTfw/fqd/bGRr8GdJQ+bx9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERqD0su nxKg9TrNao9Vt+jXu+5eMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3fbd4QcstplYNyJuxV4W+r63z0qx5YJAjZEY1KXhw4XAv9JkJUFZS 8EjN3THsbogY+CSGdB0GPmwCXpAXBbGxNYoalzuyC/lwxcPXIM0jY+MM8JMLKh2n wSvE5Gg31Uf8ASFPv6cfMvKOTF4lanel0/0EaYyIj6gYJfXrZF7bCY1AdsYKVpxr lCo8EGEMn2WNolqGhQ2fwn2zLgTTOhFw8j6JbtY7lAAkjJG/TnKhgIDCjG8Nk25L GdwwjSVotSxR2hveALuB8buJ0n9gb6t6RRG2sNlUTXCvk+2QWvjkTvnZtFelz+Vv fmpWriqRS2pvhyHBH+qm8mzZr7dMwgrR -----END CERTIFICATE-----Generated at Sun Jul 20 10:45:20 2025 by rpki-client