$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: Djvd5aTWKczDp/Aqisczf8NzYwDETZoNjJxpDLuujCI= Subject key identifier: 86:64:12:90:18:B0:72:1A:98:92:05:5A:84:B0:D1:73:1B:E5:E7:79 Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 2568 Signing time: Sun 24 Aug 2025 16:18:40 +0000 Manifest this update: Sun 24 Aug 2025 16:18:40 +0000 Manifest next update: Sun 31 Aug 2025 16:18:40 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: B9XPQaEi2TUD05P1EzJ2aWxs5XkD7WLdnLorW7wCouw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Aug 24 16:18:40 2025 GMT Not After : Aug 31 16:18:40 2025 GMT Subject: CN=68ab3b60-53d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:a8:8e:00:2f:ed:50:84:2c:b6:0a:56:8f: e3:a5:ce:72:0c:62:06:52:70:6d:18:5b:4d:2a:99: 0d:ae:7d:6b:44:83:91:6e:51:6e:60:79:42:be:6b: 65:59:26:48:46:5b:48:55:29:79:8d:37:d6:b6:12: ee:2f:6b:38:19:a5:ba:cd:52:6c:aa:6f:db:59:c4: d2:d9:b8:7d:a2:96:7a:63:b1:5e:9d:0f:5b:66:ed: b7:b4:f5:14:cc:d1:32:98:e4:8b:a0:6c:7c:1b:dd: 1a:e1:a1:59:e7:e1:a8:0b:87:57:96:0c:cc:bf:2c: b3:4a:39:2f:d3:a8:85:3f:05:40:ea:83:74:0f:1a: 4e:12:61:1b:ac:d8:73:dc:39:89:04:bd:a3:c0:3a: 01:a8:bd:42:40:71:91:72:17:b7:58:fe:31:da:9c: b5:99:07:f3:e6:0f:8b:64:e1:f7:59:d5:1f:ee:ac: 08:80:9f:dc:23:51:08:31:95:3b:5f:87:b9:d9:6d: 1d:fd:8f:ae:64:cd:28:bd:f5:d7:f7:b9:e3:d3:13: 64:c1:c1:f7:57:d4:8b:2b:26:36:b5:56:32:f7:f9: c8:9c:f5:60:38:c0:db:e8:01:a7:02:6f:f9:3e:7e: fb:df:18:5e:fe:56:f3:9c:57:49:2d:79:02:0d:87: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:64:12:90:18:B0:72:1A:98:92:05:5A:84:B0:D1:73:1B:E5:E7:79 X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:14:a7:37:b9:58:38:c8:db:76:5f:5b:96:69:3b:b7:2d:74: 59:3a:9e:13:3d:12:11:99:43:0f:c9:bc:53:67:ae:b0:3c:60: b8:84:bc:62:72:84:cb:58:c1:0c:58:67:9e:ad:3e:9c:6f:e7: f0:cb:02:65:bd:9b:92:92:a6:ae:b8:08:9a:1a:04:2e:c2:dc: ea:ff:f2:5e:fa:a5:e1:7e:6d:8c:e5:7d:85:71:b8:7e:ac:a4: 4d:b8:2c:1f:33:69:ce:44:e2:71:5f:52:70:2a:b2:c4:c7:ba: 94:cd:99:31:a4:29:85:2f:7b:33:4f:c4:d9:fb:d5:9b:0d:37: 84:95:85:73:b9:02:f1:9d:70:12:f3:07:9a:5d:20:59:24:15: 7c:18:2d:12:fa:ea:8b:01:21:20:f3:1d:5d:34:64:46:28:f0: be:b6:d2:1b:81:9b:15:ce:01:78:21:9c:94:b0:7d:5b:5c:8e: a4:13:fe:ff:58:3e:98:5f:27:e3:b0:9e:27:4a:7b:03:a4:0c: 01:f6:62:59:e4:ba:54:8c:90:69:bd:f1:ee:c9:77:90:d0:79: 7c:f9:96:6a:5d:4c:85:d0:39:0f:54:17:04:b9:33:86:74:a2: 27:ae:eb:fd:16:73:08:c7:83:7c:51:30:15:e9:19:ab:5b:30: 9c:d6:b0:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUwODI0MTYxODQwWhcNMjUwODMxMTYxODQwWjAYMRYwFAYD VQQDEw02OGFiM2I2MC01M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEyojgAv7VCELLYKVo/jpc5yDGIGUnBtGFtNKpkNrn1rRIORblFuYHlCvmtl WSZIRltIVSl5jTfWthLuL2s4GaW6zVJsqm/bWcTS2bh9opZ6Y7FenQ9bZu23tPUU zNEymOSLoGx8G90a4aFZ5+GoC4dXlgzMvyyzSjkv06iFPwVA6oN0DxpOEmEbrNhz 3DmJBL2jwDoBqL1CQHGRche3WP4x2py1mQfz5g+LZOH3WdUf7qwIgJ/cI1EIMZU7 X4e52W0d/Y+uZM0ovfXX97nj0xNkwcH3V9SLKyY2tVYy9/nInPVgOMDb6AGnAm/5 Pn773xhe/lbznFdJLXkCDYdsyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZkEpAY sHIamJIFWoSw0XMb5ed5MB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeFKc3uVg4yNt2X1uWaTu3LXRZOp4TPRIRmUMPybxTZ66wPGC4hLxi coTLWMEMWGeerT6cb+fwywJlvZuSkqauuAiaGgQuwtzq//Je+qXhfm2M5X2Fcbh+ rKRNuCwfM2nOROJxX1JwKrLEx7qUzZkxpCmFL3szT8TZ+9WbDTeElYVzuQLxnXAS 8weaXSBZJBV8GC0S+uqLASEg8x1dNGRGKPC+ttIbgZsVzgF4IZyUsH1bXI6kE/7/ WD6YXyfjsJ4nSnsDpAwB9mJZ5LpUjJBpvfHuyXeQ0Hl8+ZZqXUyF0DkPVBcEuTOG dKInruv9FnMIx4N8UTAV6RmrWzCc1rBW -----END CERTIFICATE-----Generated at Sun Aug 24 21:44:34 2025 by rpki-client