$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft File: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft (raw, json) Hash identifier: XJ1vziaODfQaMq2zNqU6E1UXjA5e42Weq3s7ZgUaPp4= Subject key identifier: 1F:F6:38:F8:7D:09:55:A9:D4:30:76:B3:8F:AF:F7:D9:BD:01:A0:AB Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0C1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft Manifest number: 0C05 Signing time: Sun 20 Jul 2025 18:50:53 +0000 Manifest this update: Sun 20 Jul 2025 18:50:52 +0000 Manifest next update: Sun 27 Jul 2025 18:50:52 +0000 Files and hashes: 1: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl (hash: 29smHn0CY/UCUsPtkCKC4ClIUuOPbS4sj9KwGbwCBl0=) 2: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (hash: LcxIbKxK3jutvAgu3ThkdTt7YT68VEQAWEq5z0WaOxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3103 (0xc1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Jul 20 18:50:52 2025 GMT Not After : Jul 27 18:50:52 2025 GMT Subject: CN=687d3a8c-c194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:23:64:ce:ff:eb:9d:51:fb:cb:5f:a5:02: cf:93:8e:70:61:69:44:b3:af:67:15:a8:f5:13:21: b9:8d:8c:22:bd:9a:2b:71:24:05:7b:ca:68:bd:eb: e7:0f:72:1d:aa:df:54:ac:be:0b:cc:84:71:fa:d0: 90:bf:5c:9e:27:9a:17:d2:a5:fb:d7:90:63:f5:84: c9:28:01:ba:27:cc:1a:87:72:a5:b2:8d:e2:e9:f7: 33:1c:09:73:b2:dd:4e:6a:92:a7:79:76:f3:72:88: 19:8a:94:8d:7e:79:2f:8e:86:5c:d1:ea:d5:79:cd: 60:df:3d:7c:18:3f:4a:fd:de:43:72:f5:dc:86:47: 1d:d8:3b:a2:17:c2:4e:49:97:35:e3:4d:c5:47:46: 3f:af:24:69:de:44:7d:da:01:c7:f1:e8:6c:58:d2: 85:50:c7:9f:32:51:f6:07:d7:47:54:10:f5:ed:0e: 50:e0:bf:4e:3b:48:d2:62:8e:56:bf:a5:5f:67:42: 9b:1c:d8:64:06:8c:c1:dc:1c:34:13:fd:47:f6:c7: dd:5d:5d:38:f0:84:2c:2f:52:c4:cf:1e:d7:b3:ad: ab:58:91:65:9c:d4:2c:e4:e1:bc:6f:06:18:0d:1e: be:43:10:11:e8:07:a1:d5:6b:3c:2c:14:d8:f8:bb: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F6:38:F8:7D:09:55:A9:D4:30:76:B3:8F:AF:F7:D9:BD:01:A0:AB X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:76:e0:46:08:77:a1:ec:5b:71:7f:fa:a9:eb:23:8b:98:97: a0:fe:ba:9f:18:29:7a:9b:e1:8f:db:51:47:d5:ef:33:ba:ca: 3f:84:4e:3a:8d:d1:87:41:58:c1:46:d8:ca:f9:39:70:43:80: 32:92:05:d6:fb:a8:8d:9c:aa:d7:eb:6a:7e:d9:88:6b:20:1b: c5:1b:1d:b8:79:f7:eb:6f:92:c5:b0:ec:b3:05:5b:6d:b6:cf: ab:0d:98:c4:14:91:22:7d:33:a3:21:4c:25:7b:b6:8a:b8:f7: b3:1e:62:f5:2e:b0:f5:5e:34:a4:e4:09:30:c6:99:0d:95:23: 83:c1:70:6f:f4:0a:6d:63:84:e9:c7:99:93:d2:25:f2:0a:4c: 8a:00:44:1f:1f:3d:52:13:d2:c3:5d:07:85:6a:8f:5c:1d:07: 4a:e8:84:44:3d:ba:35:a8:20:97:ba:91:87:3c:f1:15:ab:5e: d0:43:d9:b2:ca:97:dd:5d:a5:f9:3d:18:1f:3b:17:14:4d:d2: 93:b2:20:0b:58:56:a9:16:a9:7e:27:a0:c0:b2:38:e4:d0:9b: 90:51:df:9c:aa:a2:9e:42:73:e5:3b:2d:56:b0:99:47:05:73: 38:b4:56:15:31:f0:76:cf:81:f7:ee:7e:29:45:fd:f0:52:9a: ef:2b:b8:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjUwNzIwMTg1MDUyWhcNMjUwNzI3MTg1MDUyWjAYMRYwFAYD VQQDEw02ODdkM2E4Yy1jMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukEjZM7/651R+8tfpQLPk45wYWlEs69nFaj1EyG5jYwivZorcSQFe8povevn D3Idqt9UrL4LzIRx+tCQv1yeJ5oX0qX715Bj9YTJKAG6J8wah3Klso3i6fczHAlz st1OapKneXbzcogZipSNfnkvjoZc0erVec1g3z18GD9K/d5DcvXchkcd2DuiF8JO SZc1403FR0Y/ryRp3kR92gHH8ehsWNKFUMefMlH2B9dHVBD17Q5Q4L9OO0jSYo5W v6VfZ0KbHNhkBozB3Bw0E/1H9sfdXV048IQsL1LEzx7Xs62rWJFlnNQs5OG8bwYY DR6+QxAR6Aeh1Ws8LBTY+LufuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/2OPh9 CVWp1DB2s4+v99m9AaCrMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC9EMzEzMDY3NjE4NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExF RTN5OUhJN1VUWnl5Vlg5RDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPduBGCHeh7Ftxf/qp6yOLmJeg/rqfGCl6m+GP21FH1e8zuso/hE46 jdGHQVjBRtjK+TlwQ4AykgXW+6iNnKrX62p+2YhrIBvFGx24effrb5LFsOyzBVtt ts+rDZjEFJEifTOjIUwle7aKuPezHmL1LrD1XjSk5AkwxpkNlSODwXBv9AptY4Tp x5mT0iXyCkyKAEQfHz1SE9LDXQeFao9cHQdK6IREPbo1qCCXupGHPPEVq17QQ9my ypfdXaX5PRgfOxcUTdKTsiALWFapFql+J6DAsjjk0JuQUd+cqqKeQnPlOy1WsJlH BXM4tFYVMfB2z4H37n4pRf3wUprvK7jW -----END CERTIFICATE-----Generated at Mon Jul 21 08:07:53 2025 by rpki-client