$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: /266KnvDcC1cWtbC8plqpH75QYA6GJJGapD3l3umEik= Subject key identifier: 4B:43:E2:EB:B0:D3:32:FC:EB:8D:61:78:90:BE:5F:77:6E:7F:02:8F Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: F1 Signing time: Sat 19 Jul 2025 05:29:30 +0000 Manifest this update: Sat 19 Jul 2025 05:29:29 +0000 Manifest next update: Sat 26 Jul 2025 05:29:29 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: vCxhcM2hPmecAbTLbO3B96WinpOZRBy3eK33VODA42w=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: oRCouiUpGQ/m6gpchET77aGzx6bi1ujY4xCm3A9vvYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Jul 19 05:29:29 2025 GMT Not After : Jul 26 05:29:29 2025 GMT Subject: CN=687b2d3a-1778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:ec:1d:fa:8b:61:e5:31:14:cc:25:d2:d8: 3e:11:cc:f1:b4:56:6d:89:2b:1f:cd:fd:84:3d:85: bd:e9:c3:70:18:18:e3:90:1c:ce:f3:63:49:00:89: 94:66:2b:f9:2a:33:92:4e:db:2f:a3:ab:38:b2:91: 9d:1b:f5:68:0e:56:f1:7a:1d:7c:bb:17:77:a5:5f: 7c:b5:ea:37:b7:d8:46:21:c5:80:ce:9d:e2:4e:d0: 5f:38:24:15:cc:4f:c9:99:19:a4:68:12:ae:f3:13: 08:b9:a3:b3:34:2c:72:35:12:d8:c2:00:8f:a1:41: 6d:72:62:b1:e5:c0:08:f4:ee:01:f2:27:4a:dc:78: e6:13:20:1e:18:f6:d9:a7:f8:35:8b:5e:22:a5:8a: b8:f8:59:84:cf:05:08:95:51:56:45:d1:44:6d:6d: 12:c1:76:60:ac:7c:34:94:08:e5:37:cd:df:f1:56: 12:ca:7c:7c:55:c2:67:a6:ac:09:5d:51:2a:24:2d: c7:15:1b:2a:be:3e:1e:ec:4b:8d:11:9d:db:cc:77: 38:93:52:f2:23:10:0d:14:37:c3:12:08:92:bb:ad: 69:fa:be:51:98:b5:a3:24:78:70:f1:9e:27:70:f3: 8b:c2:04:3f:38:b0:ef:c6:dc:b6:77:84:ba:91:32: 8e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:43:E2:EB:B0:D3:32:FC:EB:8D:61:78:90:BE:5F:77:6E:7F:02:8F X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:3a:40:e8:dd:73:76:c8:5f:90:c5:0d:09:9a:67:16:7a:af: 9b:55:d4:00:fb:dd:41:7c:f1:8d:75:60:c4:77:c9:33:f0:6b: 24:b4:b5:a3:5a:73:89:6a:40:cd:16:c9:16:a5:48:08:41:15: 90:a0:07:30:b1:53:78:65:25:df:05:c2:7c:32:26:78:78:8e: e1:dc:7f:4c:b9:ef:3d:0f:72:44:78:60:a5:9a:95:07:0a:d0: 7b:5e:6f:b5:fb:12:82:8c:20:4b:f2:35:f7:52:a7:b9:95:fb: 4c:71:83:13:60:66:92:ac:fe:cc:5b:14:4e:b0:39:49:91:d0: 2e:0d:bf:f4:39:c5:58:ec:69:1c:be:f9:08:68:8f:a6:5b:5b: ca:4e:9f:1d:c7:66:c4:94:7f:78:08:9a:b6:27:88:6a:cd:95: a4:98:91:36:18:65:d0:a3:76:8d:87:02:49:27:2f:75:a0:29: b2:06:f3:77:63:be:f7:32:51:10:1f:e1:5c:85:14:d3:94:14: ae:aa:91:79:62:88:cd:cc:3e:bf:e6:5b:9a:e4:cf:99:dd:c3: 50:97:57:c6:93:7b:a6:e8:b4:89:bf:b2:df:0e:92:c8:cc:f5: e1:0d:10:c0:2a:3c:6d:a9:e2:42:d4:11:6b:26:46:6b:47:2b: a2:be:e7:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjUwNzE5MDUyOTI5WhcNMjUwNzI2MDUyOTI5WjAYMRYwFAYD VQQDEw02ODdiMmQzYS0xNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDDsHfqLYeUxFMwl0tg+EczxtFZtiSsfzf2EPYW96cNwGBjjkBzO82NJAImU Ziv5KjOSTtsvo6s4spGdG/VoDlbxeh18uxd3pV98teo3t9hGIcWAzp3iTtBfOCQV zE/JmRmkaBKu8xMIuaOzNCxyNRLYwgCPoUFtcmKx5cAI9O4B8idK3HjmEyAeGPbZ p/g1i14ipYq4+FmEzwUIlVFWRdFEbW0SwXZgrHw0lAjlN83f8VYSynx8VcJnpqwJ XVEqJC3HFRsqvj4e7EuNEZ3bzHc4k1LyIxANFDfDEgiSu61p+r5RmLWjJHhw8Z4n cPOLwgQ/OLDvxty2d4S6kTKOjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtD4uuw 0zL8641heJC+X3dufwKPMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmOkDo3XN2yF+QxQ0JmmcWeq+bVdQA+91BfPGNdWDEd8kz8GsktLWj WnOJakDNFskWpUgIQRWQoAcwsVN4ZSXfBcJ8MiZ4eI7h3H9Mue89D3JEeGClmpUH CtB7Xm+1+xKCjCBL8jX3Uqe5lftMcYMTYGaSrP7MWxROsDlJkdAuDb/0OcVY7Gkc vvkIaI+mW1vKTp8dx2bElH94CJq2J4hqzZWkmJE2GGXQo3aNhwJJJy91oCmyBvN3 Y773MlEQH+FchRTTlBSuqpF5YojNzD6/5lua5M+Z3cNQl1fGk3um6LSJv7LfDpLI zPXhDRDAKjxtqeJC1BFrJkZrRyuivue+ -----END CERTIFICATE-----Generated at Mon Jul 21 06:00:53 2025 by rpki-client