$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: DybfUeJ8OUfP3IU7L8n6nNrlk0Et/vF7WBUXDQqPOrU= Subject key identifier: F1:65:18:E3:37:29:3D:A8:86:9B:8F:90:EC:24:81:89:13:B5:EC:8B Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 0151 Signing time: Mon 21 Jul 2025 04:14:19 +0000 Manifest this update: Mon 21 Jul 2025 04:14:19 +0000 Manifest next update: Mon 28 Jul 2025 04:14:19 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: w1slPRTEhG/Wio1kebjqOfGzyBOmB8BQrWmtcf0LCnM=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: aEwpt3FN/b3agcSqsy028NBcRbgaV2C2DNdzwhDgaUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Jul 21 04:14:19 2025 GMT Not After : Jul 28 04:14:19 2025 GMT Subject: CN=687dbe9b-83e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:e9:1c:3e:47:d4:20:12:70:d3:97:23:f8: a2:bd:c6:6f:a3:fc:41:de:42:42:b8:b2:7c:39:32: 2e:6e:b8:0d:6f:4f:15:f1:69:b9:9e:9e:3e:19:e4: 97:42:f4:be:33:52:f4:c0:29:1a:3d:49:97:f7:63: 99:f3:8a:fd:aa:ef:a4:62:e9:c0:ab:92:bc:cd:37: 9a:ff:11:29:4f:71:70:df:58:81:0d:5b:19:b6:7f: ab:54:63:0d:a1:3a:c6:df:2d:5c:aa:cc:ca:2b:29: 21:d9:72:d9:81:22:6c:f9:ef:36:90:57:73:73:fe: 3b:7b:3a:13:3b:31:c6:55:03:33:84:be:cb:db:45: 9f:ce:57:ed:41:0c:d3:06:96:51:5e:d5:da:c5:4f: 33:e3:08:b1:32:ee:67:4c:1a:56:8e:64:5e:f9:48: c7:1d:ad:0f:6f:a1:30:a1:53:eb:bd:2d:bd:7e:d8: dd:29:b1:d6:05:de:68:17:40:9d:df:a6:2b:ec:b7: 3b:cb:80:bd:2e:74:6a:dd:24:9b:f9:5e:e1:21:f5: 05:40:c1:af:de:e9:69:4b:84:ed:df:c4:9b:df:d5: 32:57:ab:89:88:2f:a5:cc:fe:9c:24:07:0c:4d:5f: 72:78:ee:6a:91:51:98:2e:83:ff:6c:56:08:99:0a: e1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:18:E3:37:29:3D:A8:86:9B:8F:90:EC:24:81:89:13:B5:EC:8B X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:9d:77:b7:ee:dc:5f:08:7c:2b:f9:20:19:0b:d8:cc:73:2a: 33:81:79:25:36:1e:dd:27:8d:35:eb:fd:ae:13:f2:f1:06:4b: d3:9b:61:16:ed:1f:97:03:d0:96:ae:3e:33:cd:8c:77:db:53: b4:2e:57:cd:c9:6b:c9:55:64:bb:19:19:12:d5:91:96:1b:ee: 3f:26:b1:ff:6f:36:85:b1:ee:d0:71:38:48:09:a9:94:d6:7f: 81:87:1f:24:8d:39:e3:f4:31:8a:a5:6f:f0:45:a9:e1:a7:51: 3c:8c:1b:3c:7f:55:c6:34:5f:49:b4:c0:be:e0:ce:5e:be:bf: 29:44:ee:b2:96:5e:69:39:4a:73:5c:59:af:99:6a:ed:78:5d: ca:fe:b8:e5:a2:4e:4b:37:8e:80:b7:e2:0b:ed:a6:a1:fe:e1: e0:ab:32:f9:4a:77:aa:90:1f:ee:44:2a:38:80:7d:ec:86:42: b0:25:e4:d9:b1:41:f6:4f:57:6d:93:32:05:3b:f6:ea:d1:6e: 30:96:92:87:77:59:35:a1:39:82:a3:ea:9d:0f:6a:41:f6:24: 7a:0b:e0:d7:23:ff:65:88:f3:08:cf:fa:0b:9f:06:b0:c0:08: 10:74:ac:9d:f1:f9:e2:6a:f5:74:d8:ea:92:6e:63:c0:b4:67: 5b:d6:05:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjUwNzIxMDQxNDE5WhcNMjUwNzI4MDQxNDE5WjAYMRYwFAYD VQQDEw02ODdkYmU5Yi04M2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqjpHD5H1CAScNOXI/iivcZvo/xB3kJCuLJ8OTIubrgNb08V8Wm5np4+GeSX QvS+M1L0wCkaPUmX92OZ84r9qu+kYunAq5K8zTea/xEpT3Fw31iBDVsZtn+rVGMN oTrG3y1cqszKKykh2XLZgSJs+e82kFdzc/47ezoTOzHGVQMzhL7L20WfzlftQQzT BpZRXtXaxU8z4wixMu5nTBpWjmRe+UjHHa0Pb6EwoVPrvS29ftjdKbHWBd5oF0Cd 36Yr7Lc7y4C9LnRq3SSb+V7hIfUFQMGv3ulpS4Tt38Sb39UyV6uJiC+lzP6cJAcM TV9yeO5qkVGYLoP/bFYImQrhWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFlGOM3 KT2ohpuPkOwkgYkTteyLMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBznXe37txfCHwr+SAZC9jMcyozgXklNh7dJ4016/2uE/LxBkvTm2EW 7R+XA9CWrj4zzYx321O0LlfNyWvJVWS7GRkS1ZGWG+4/JrH/bzaFse7QcThICamU 1n+Bhx8kjTnj9DGKpW/wRanhp1E8jBs8f1XGNF9JtMC+4M5evr8pRO6yll5pOUpz XFmvmWrteF3K/rjlok5LN46At+IL7aah/uHgqzL5SneqkB/uRCo4gH3shkKwJeTZ sUH2T1dtkzIFO/bq0W4wlpKHd1k1oTmCo+qdD2pB9iR6C+DXI/9liPMIz/oLnwaw wAgQdKyd8fniavV02OqSbmPAtGdb1gWm -----END CERTIFICATE-----Generated at Mon Jul 21 05:51:07 2025 by rpki-client