$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: yNe39Z5xsRsKxh7zHOTD10//aK6U5sWJn9SvuLiVqSg= Subject key identifier: A0:62:9A:E7:D3:3E:C7:C5:01:DC:BE:6A:47:7D:DC:03:65:36:E3:E7 Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 07A8 Signing time: Sun 20 Jul 2025 21:24:16 +0000 Manifest this update: Sun 20 Jul 2025 21:24:15 +0000 Manifest next update: Sun 27 Jul 2025 21:24:15 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: XT/zW+K1Mr9DCeIVGjIFNOJZTOsWOVMovjvI/C6aePU=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Jul 20 21:24:15 2025 GMT Not After : Jul 27 21:24:15 2025 GMT Subject: CN=687d5e80-104f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:ee:01:fa:df:4c:6b:7a:50:5a:63:5e:88: 8c:62:5a:bd:99:c2:49:34:c8:08:2c:89:df:cb:22: fd:d4:8b:2b:30:39:89:83:64:18:24:f2:16:18:88: 4c:fd:26:c8:ab:f8:86:b3:99:c1:e6:93:7f:dc:85: 78:24:ff:a1:37:0b:0a:62:35:ce:43:9d:61:75:1b: 80:69:1d:f6:5c:cc:f6:a3:a3:c2:98:ab:c4:17:28: 88:db:d3:e9:dc:83:d1:ed:5e:81:5a:3f:1a:3e:f1: 58:14:62:c7:0d:0c:ac:ca:bb:6c:6a:d8:00:5c:79: 12:32:a7:8c:fc:56:b5:9c:ef:da:96:05:d2:1e:2c: 63:6b:8a:bf:00:32:6d:b8:f6:ec:2f:21:80:8f:d6: e0:5d:90:5d:56:b6:f9:29:3e:7a:6e:53:cd:bf:b8: ab:ba:a1:96:70:f1:40:99:e7:81:6c:bb:be:71:65: 17:52:d9:35:53:63:d9:b3:29:de:be:7c:bf:b5:94: 9d:51:58:7a:71:05:ae:00:e5:7e:3e:4b:e4:e6:a9: 2f:c2:eb:da:0f:5e:79:ad:13:08:57:d6:59:af:ba: 32:e8:16:f1:2d:4d:ac:9e:62:97:00:28:36:0d:69: 7b:99:9b:25:6a:30:e8:a8:24:36:27:7a:63:a8:6d: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:62:9A:E7:D3:3E:C7:C5:01:DC:BE:6A:47:7D:DC:03:65:36:E3:E7 X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5b:7d:d9:bb:5f:a6:c6:f1:40:f8:61:3a:f8:43:af:9a:68: 91:ce:47:03:6c:7b:97:5a:ae:53:3e:e6:0d:5a:e9:a2:d9:fc: 82:46:c8:43:da:a0:e0:c9:a0:a6:5e:40:64:af:c5:a3:81:d2: f5:bf:86:f0:e4:1b:9f:03:60:09:86:67:81:07:62:5f:5b:aa: c1:be:69:65:1c:1e:8c:81:d0:26:7e:ce:96:a5:6c:f1:f2:7f: 71:95:26:62:9b:2e:3b:dc:00:ae:97:78:e3:23:c3:df:ba:56: d0:6f:a9:df:a7:cc:2b:c0:e0:2f:65:cb:66:f7:1d:f4:3d:0d: 1b:02:1b:38:e5:cc:18:04:49:1c:59:4b:2c:53:6e:6e:23:8f: a5:0a:4b:7a:65:cb:c1:0c:79:e5:42:e3:59:12:24:42:b0:72: 1b:34:35:5f:74:c3:cd:b0:b0:a5:c3:de:12:79:ab:6e:08:6a: a5:27:97:73:f3:9d:65:33:65:e3:01:8f:9f:3c:49:12:50:70: f4:78:11:ce:dd:36:3f:98:6b:c4:58:bb:0e:69:8b:6f:02:a6: e2:8b:cb:36:99:59:f2:e9:3c:aa:e8:7d:30:3a:35:02:55:20: 1e:9a:ec:cc:f5:56:15:5c:0b:5e:05:08:16:b9:11:fd:37:7d: a2:fd:12:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUwNzIwMjEyNDE1WhcNMjUwNzI3MjEyNDE1WjAYMRYwFAYD VQQDEw02ODdkNWU4MC0xMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0buAfrfTGt6UFpjXoiMYlq9mcJJNMgILInfyyL91IsrMDmJg2QYJPIWGIhM /SbIq/iGs5nB5pN/3IV4JP+hNwsKYjXOQ51hdRuAaR32XMz2o6PCmKvEFyiI29Pp 3IPR7V6BWj8aPvFYFGLHDQysyrtsatgAXHkSMqeM/Fa1nO/algXSHixja4q/ADJt uPbsLyGAj9bgXZBdVrb5KT56blPNv7iruqGWcPFAmeeBbLu+cWUXUtk1U2PZsyne vny/tZSdUVh6cQWuAOV+Pkvk5qkvwuvaD155rRMIV9ZZr7oy6BbxLU2snmKXACg2 DWl7mZslajDoqCQ2J3pjqG1bLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBimufT PsfFAdy+akd93ANlNuPnMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSW33Zu1+mxvFA+GE6+EOvmmiRzkcDbHuXWq5TPuYNWumi2fyCRshD 2qDgyaCmXkBkr8WjgdL1v4bw5BufA2AJhmeBB2JfW6rBvmllHB6MgdAmfs6WpWzx 8n9xlSZimy473ACul3jjI8PfulbQb6nfp8wrwOAvZctm9x30PQ0bAhs45cwYBEkc WUssU25uI4+lCkt6ZcvBDHnlQuNZEiRCsHIbNDVfdMPNsLClw94SeatuCGqlJ5dz 851lM2XjAY+fPEkSUHD0eBHO3TY/mGvEWLsOaYtvAqbii8s2mVny6Tyq6H0wOjUC VSAemuzM9VYVXAteBQgWuRH9N32i/RLA -----END CERTIFICATE-----Generated at Mon Jul 21 07:43:53 2025 by rpki-client