$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: uqkO2UbpxurEr0ECB8/XzAnUdEgZUCue6NerffYrXxs= Subject key identifier: 4D:F1:AD:92:5F:33:86:38:BA:45:4F:F2:47:1C:7E:59:F2:C9:BC:39 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 031B Signing time: Fri 25 Jul 2025 01:35:08 +0000 Manifest this update: Fri 25 Jul 2025 01:35:07 +0000 Manifest next update: Fri 01 Aug 2025 01:35:07 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: DtENmghonTrV2s3Cwlo23aCww0IkhQTj82qpymWlUhc=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: BkyDK7N8MqPzb7yz7N5nQ1LHqHZV+xDxLFOlL/0hv/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 01:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Jul 25 01:35:07 2025 GMT Not After : Aug 1 01:35:07 2025 GMT Subject: CN=6882df4c-7d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:37:2c:8a:e1:99:53:8a:db:02:e1:81:f6: 02:fb:1a:ab:3b:d8:07:2e:14:e4:d8:e2:94:76:94: 02:61:b0:30:ce:5b:5c:10:ed:aa:d2:b1:59:7d:8f: 09:f4:b5:58:2f:8e:7b:fb:c4:d2:95:91:b4:ca:b2: 66:cb:0e:5a:50:d5:b4:8c:ff:71:19:60:0f:35:e3: 3d:cd:40:34:6b:42:3e:50:64:2e:8a:26:77:86:4d: 69:6b:ce:39:ee:05:b3:ef:19:69:bf:7e:74:86:94: fd:5a:5d:f5:65:1f:80:4d:c2:b1:d7:b5:b3:c6:a9: fd:7c:d3:73:b5:09:1b:77:56:df:de:d0:32:d3:19: 30:6e:29:a6:76:63:04:ad:3d:be:0b:c4:b1:72:1b: d4:77:3d:81:ef:f9:5a:4f:ce:1e:aa:21:34:d7:77: f0:49:24:7a:d0:19:b3:80:58:54:8f:f1:b0:7e:0f: 34:d2:c8:7c:10:4f:5d:cd:73:f7:0a:9b:1d:0a:7c: 5a:4b:a3:71:97:a5:ad:ce:5a:c3:4a:1e:f8:32:f3: e1:00:a7:9a:bf:5e:df:4c:a9:36:d7:b8:1f:9a:86: 3c:c9:c7:cf:1c:71:7d:15:08:2c:ba:f3:8e:53:98: d6:6d:02:1d:66:c9:d2:01:0d:22:33:43:2c:e9:11: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F1:AD:92:5F:33:86:38:BA:45:4F:F2:47:1C:7E:59:F2:C9:BC:39 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:1e:21:34:1c:9d:09:f9:f6:7d:97:e5:ae:7a:97:d5:4a:43: 0d:a9:8b:96:fb:9c:00:4a:7c:b4:cd:34:b1:51:ce:5f:2a:ea: ae:18:91:5a:e3:44:25:1f:60:b9:c2:57:8b:cc:09:95:73:b9: 7f:a3:22:c7:ae:02:bf:2d:fa:4d:c3:e7:5f:af:2f:81:e0:62: 6d:ae:bb:bd:58:22:e1:c3:2e:c3:59:1d:00:05:08:3d:b3:fd: e4:84:2f:60:de:b0:8a:b0:75:7a:37:b4:e4:2e:49:9c:b7:72: 73:1d:1d:6a:e5:b9:3f:e4:36:2e:48:8e:0b:5a:73:89:66:21: 7e:1b:de:31:cd:21:34:ee:64:a1:30:8d:60:aa:ef:06:57:31: e1:a3:a3:00:2b:26:a1:d3:2c:de:57:c6:ca:84:0f:b5:c8:02: eb:a3:64:53:97:c6:e6:0d:d9:37:cc:57:82:76:b9:b7:e9:a5: cc:74:87:33:fd:ee:24:e9:13:70:d5:9c:48:ee:9c:32:6a:eb: fe:a3:74:68:95:ce:a8:88:25:26:01:b5:1c:4d:ee:05:fa:03: d8:a2:8a:30:ae:05:75:d5:6b:75:65:66:04:76:60:bc:cc:48: de:64:b1:4e:8b:a7:03:b9:2b:47:bb:fa:89:69:61:d9:ba:30: 8b:6a:8d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjUwNzI1MDEzNTA3WhcNMjUwODAxMDEzNTA3WjAYMRYwFAYD VQQDEw02ODgyZGY0Yy03ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZU3LIrhmVOK2wLhgfYC+xqrO9gHLhTk2OKUdpQCYbAwzltcEO2q0rFZfY8J 9LVYL457+8TSlZG0yrJmyw5aUNW0jP9xGWAPNeM9zUA0a0I+UGQuiiZ3hk1pa845 7gWz7xlpv350hpT9Wl31ZR+ATcKx17Wzxqn9fNNztQkbd1bf3tAy0xkwbimmdmME rT2+C8SxchvUdz2B7/laT84eqiE013fwSSR60BmzgFhUj/Gwfg800sh8EE9dzXP3 CpsdCnxaS6Nxl6WtzlrDSh74MvPhAKeav17fTKk217gfmoY8ycfPHHF9FQgsuvOO U5jWbQIdZsnSAQ0iM0Ms6RHHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3xrZJf M4Y4ukVP8kccflnyybw5MB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKHiE0HJ0J+fZ9l+WuepfVSkMNqYuW+5wASny0zTSxUc5fKuquGJFa 40QlH2C5wleLzAmVc7l/oyLHrgK/LfpNw+dfry+B4GJtrru9WCLhwy7DWR0ABQg9 s/3khC9g3rCKsHV6N7TkLkmct3JzHR1q5bk/5DYuSI4LWnOJZiF+G94xzSE07mSh MI1gqu8GVzHho6MAKyah0yzeV8bKhA+1yALro2RTl8bmDdk3zFeCdrm36aXMdIcz /e4k6RNw1ZxI7pwyauv+o3Rolc6oiCUmAbUcTe4F+gPYooowrgV11Wt1ZWYEdmC8 zEjeZLFOi6cDuStHu/qJaWHZujCLao3T -----END CERTIFICATE-----Generated at Fri Jul 25 07:08:01 2025 by rpki-client