$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft File: 3SNdNwiQmzPViUtMzckQXGH9Fq4.mft (raw, json) Hash identifier: BD3WqQz/aOAUCQP/DgUFEZImjdGF16/XEtHi89MVFQE= Subject key identifier: 7B:91:5E:6A:6F:09:D9:E6:30:EF:73:4F:D7:25:33:6C:19:EA:F9:35 Authority key identifier: DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE Certificate issuer: /CN=A91B8C13/serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft Manifest number: 018F Signing time: Sun 20 Jul 2025 15:19:43 +0000 Manifest this update: Sun 20 Jul 2025 15:19:42 +0000 Manifest next update: Sun 27 Jul 2025 15:19:42 +0000 Files and hashes: 1: 3SNdNwiQmzPViUtMzckQXGH9Fq4.crl (hash: 2hm3a88zDWLTAwtG18Udx5/+I1bKNyrpXUWEDz9p3lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Validity Not Before: Jul 20 15:19:42 2025 GMT Not After : Jul 27 15:19:42 2025 GMT Subject: CN=687d090f-5dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:59:65:10:af:38:64:c0:90:47:ff:22:eb: 0f:56:dd:81:20:51:ad:02:50:35:6a:12:bf:14:62: 28:bc:e2:1e:34:36:88:60:0a:21:a3:86:ee:ab:32: c8:7a:79:1b:52:71:ec:5a:9a:f0:48:e5:d9:35:d9: b6:d9:3c:b8:1e:81:5f:03:b5:cf:8b:10:fc:29:30: b4:45:da:61:00:d1:98:bd:18:3d:dc:e3:3e:fc:38: b3:95:26:d7:71:b9:ad:b6:e3:6f:7b:43:28:38:70: 69:14:3b:88:50:ec:b8:fe:a3:07:b0:8c:f0:18:62: 86:98:2f:aa:b6:a8:09:eb:99:f1:be:a2:56:6f:8a: bd:d8:9a:f6:3f:34:7d:b8:6b:c2:32:43:ba:e1:e2: 38:3d:ee:c3:94:30:fe:ab:7c:79:24:dc:06:94:54: e6:3d:b5:60:50:3b:33:f3:a5:bd:4a:89:b1:3d:2e: 10:c2:89:14:44:9c:02:47:63:bc:b8:ca:90:4b:31: b2:e5:51:d7:7f:fe:43:d1:f2:08:44:eb:27:15:2e: cb:c4:ab:39:58:f6:16:a6:9b:87:61:d6:9d:22:ef: 87:ee:f3:92:99:42:e9:2b:f9:d1:55:a0:04:c1:ea: 8e:4e:95:9e:e5:23:1b:d8:74:1d:ef:6c:77:35:94: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:91:5E:6A:6F:09:D9:E6:30:EF:73:4F:D7:25:33:6C:19:EA:F9:35 X509v3 Authority Key Identifier: keyid:DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b5:71:27:ea:20:75:7c:0a:b9:ae:fe:d5:a0:ae:a5:b8:e4: 27:b0:17:a7:5f:b2:bf:22:84:dc:63:b6:7b:45:cc:89:04:66: eb:fd:0d:97:fb:96:81:ea:83:e5:82:0c:9f:36:f6:ee:66:63: 18:1d:fc:3b:a4:14:13:8b:b8:fc:ad:0b:4a:45:ee:52:11:ea: 14:c0:94:79:bb:40:a8:ad:48:38:ef:19:e8:f8:a0:77:50:b6: 83:92:bb:45:79:42:36:f2:3c:bf:0a:16:d6:47:82:60:d0:6e: 97:f9:eb:3a:32:6e:0f:f2:c3:6a:3d:68:00:5b:e5:8c:10:da: 86:42:e6:6c:e9:e7:a3:0e:42:e4:42:23:50:7c:70:5e:33:85: f5:39:01:e9:03:6e:3c:30:2a:bc:c3:60:57:3f:16:9e:45:1b: ab:52:b3:0b:33:8e:b2:75:bf:3a:9b:cb:72:42:f0:1f:10:e0: 97:dc:3c:cd:b9:93:b7:da:48:6b:0e:ac:05:2f:47:d3:0f:d3: 37:fe:fb:fc:2f:3c:6c:c1:c3:14:d4:03:30:a3:17:41:3e:58: c2:1b:87:35:50:a2:c1:ea:e7:aa:67:0d:37:d5:29:cd:0d:f0: 65:e8:7a:b2:38:27:59:20:6a:be:e6:c2:79:db:c4:aa:72:91: bf:8b:8d:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEREMjM1RDM3MDg5MDlCMzNENTg5NEI0Q0NEQzkxMDVD NjFGRDE2QUUwHhcNMjUwNzIwMTUxOTQyWhcNMjUwNzI3MTUxOTQyWjAYMRYwFAYD VQQDEw02ODdkMDkwZi01ZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtARZZRCvOGTAkEf/IusPVt2BIFGtAlA1ahK/FGIovOIeNDaIYAoho4buqzLI enkbUnHsWprwSOXZNdm22Ty4HoFfA7XPixD8KTC0RdphANGYvRg93OM+/DizlSbX cbmttuNve0MoOHBpFDuIUOy4/qMHsIzwGGKGmC+qtqgJ65nxvqJWb4q92Jr2PzR9 uGvCMkO64eI4Pe7DlDD+q3x5JNwGlFTmPbVgUDsz86W9SomxPS4QwokURJwCR2O8 uMqQSzGy5VHXf/5D0fIIROsnFS7LxKs5WPYWppuHYdadIu+H7vOSmULpK/nRVaAE weqOTpWe5SMb2HQd72x3NZS5rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuRXmpv CdnmMO9zT9clM2wZ6vk1MB8GA1UdIwQYMBaAFN0jXTcIkJsz1YlLTM3JEFxh/Rau MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9EMDYxMTcxNjBC MkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16UFZpVXRNemNrUVhHSDlG cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNTTmROd2lRbXpQVmlVdE16Y2tRWEdIOUZxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9EMDYxMTcxNjBCMkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16 UFZpVXRNemNrUVhHSDlGcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2tXEn6iB1fAq5rv7VoK6luOQnsBenX7K/IoTcY7Z7RcyJBGbr/Q2X +5aB6oPlggyfNvbuZmMYHfw7pBQTi7j8rQtKRe5SEeoUwJR5u0CorUg47xno+KB3 ULaDkrtFeUI28jy/ChbWR4Jg0G6X+es6Mm4P8sNqPWgAW+WMENqGQuZs6eejDkLk QiNQfHBeM4X1OQHpA248MCq8w2BXPxaeRRurUrMLM46ydb86m8tyQvAfEOCX3DzN uZO32khrDqwFL0fTD9M3/vv8LzxswcMU1AMwoxdBPljCG4c1UKLB6ueqZw031SnN DfBl6HqyOCdZIGq+5sJ528SqcpG/i40V -----END CERTIFICATE-----Generated at Mon Jul 21 05:42:46 2025 by rpki-client