$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: 7N0vGGU1w33MxBwLr9cP9pqizzx3kbsnYeVQL5TkxUU= Subject key identifier: 33:63:2A:91:10:37:D3:F0:04:FB:D4:80:BA:E5:18:C9:81:8E:9D:F6 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1C08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1C08 Signing time: Thu 18 Sep 2025 16:19:20 +0000 Manifest this update: Thu 18 Sep 2025 16:19:19 +0000 Manifest next update: Thu 25 Sep 2025 16:19:19 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: ZL2o3C1We/s9HTqVPqRGsUtVXaLR0kGXEGfVu4CFNh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7176 (0x1c08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Sep 18 16:19:19 2025 GMT Not After : Sep 25 16:19:19 2025 GMT Subject: CN=68cc3107-dd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:90:4a:5b:28:bf:db:be:7f:09:63:fd:6e:48: d3:df:88:55:43:f1:08:a9:5c:c8:ae:e0:0a:bd:cc: 33:84:4f:36:6f:3a:02:5d:37:bf:50:88:87:10:a5: 31:c5:6e:b4:45:6d:4a:7a:3e:01:9d:0d:33:c7:27: 41:aa:48:c2:16:44:1d:b7:c9:6e:a1:00:de:a8:66: 09:9b:a7:ad:49:5b:9d:44:d5:9d:3d:37:b5:00:e0: 9d:95:7c:a6:32:ca:1c:18:b3:f4:3f:af:3c:1a:91: 93:e4:d7:7b:d2:43:88:05:dc:8d:19:4a:ab:22:4e: 40:1e:a1:c2:5e:f2:c6:70:60:7d:13:4f:c9:19:3f: 00:30:a6:61:a2:28:4c:00:f4:8d:fc:84:e0:1b:77: 04:ea:74:2d:cd:a5:8e:59:ff:45:53:02:e2:c9:2a: 13:e4:8e:3a:c7:cb:55:1b:e6:a3:90:cc:66:5b:cf: 55:e5:99:7b:e3:a8:80:87:ca:6d:b3:95:b5:43:19: ac:41:e4:84:aa:06:a5:f3:9b:c2:ae:16:66:6d:0e: 5a:dc:43:8b:37:56:a7:31:03:d3:1a:4f:fa:74:18: 6c:9d:5d:ed:8e:fb:aa:80:e9:2a:9f:7e:56:ab:a8: ed:b5:44:7f:5f:1c:0d:88:07:d2:6b:93:8a:5d:21: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:63:2A:91:10:37:D3:F0:04:FB:D4:80:BA:E5:18:C9:81:8E:9D:F6 X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:1f:a9:03:ee:08:0b:5a:ef:24:d4:09:ca:36:a4:1d:4f:b4: 52:82:47:b4:a0:ba:df:cf:83:94:7e:a7:1a:ef:bc:f4:6c:84: 77:42:68:16:09:91:02:6e:67:5a:27:a8:62:51:00:2c:74:79: 1a:50:6c:9d:7e:70:5b:f9:f5:b0:08:bc:ab:11:ba:4c:cb:6d: 0e:28:7b:b8:91:54:1f:03:36:1f:6f:7f:92:3a:7f:a7:bf:24: e8:35:d4:6c:6c:f1:ce:b5:c0:f8:91:2e:1b:8b:a4:de:ff:1c: b1:e2:0c:06:62:ee:33:c8:61:91:81:74:ea:a7:38:02:32:b3: 37:e5:d9:dd:06:f9:ea:22:7b:75:cb:73:7d:93:b4:31:e2:2b: fe:5e:72:bb:0e:aa:6c:24:e2:fb:75:50:25:5e:c5:bf:e3:9f: 4f:b6:83:33:fa:7f:aa:65:01:8a:50:43:99:87:08:e9:12:e4: 47:bb:a4:e4:23:11:e0:fe:5b:be:46:76:0a:40:4b:ac:d6:4a: 42:c4:6c:dc:db:60:d9:95:c6:f4:94:6f:4c:37:f1:79:5b:3a: 42:34:11:8a:7e:0d:80:a8:f4:57:2c:38:3c:31:d5:cc:88:63: 72:a7:96:e7:1b:13:ed:c7:86:d0:c9:9a:c0:95:54:7b:22:98: d3:dd:61:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUwOTE4MTYxOTE5WhcNMjUwOTI1MTYxOTE5WjAYMRYwFAYD VQQDEw02OGNjMzEwNy1kZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05BKWyi/275/CWP9bkjT34hVQ/EIqVzIruAKvcwzhE82bzoCXTe/UIiHEKUx xW60RW1Kej4BnQ0zxydBqkjCFkQdt8luoQDeqGYJm6etSVudRNWdPTe1AOCdlXym MsocGLP0P688GpGT5Nd70kOIBdyNGUqrIk5AHqHCXvLGcGB9E0/JGT8AMKZhoihM APSN/ITgG3cE6nQtzaWOWf9FUwLiySoT5I46x8tVG+ajkMxmW89V5Zl746iAh8pt s5W1QxmsQeSEqgal85vCrhZmbQ5a3EOLN1anMQPTGk/6dBhsnV3tjvuqgOkqn35W q6jttUR/XxwNiAfSa5OKXSE94QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNjKpEQ N9PwBPvUgLrlGMmBjp32MB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZH6kD7ggLWu8k1AnKNqQdT7RSgke0oLrfz4OUfqca77z0bIR3QmgW CZECbmdaJ6hiUQAsdHkaUGydfnBb+fWwCLyrEbpMy20OKHu4kVQfAzYfb3+SOn+n vyToNdRsbPHOtcD4kS4bi6Te/xyx4gwGYu4zyGGRgXTqpzgCMrM35dndBvnqInt1 y3N9k7Qx4iv+XnK7DqpsJOL7dVAlXsW/459PtoMz+n+qZQGKUEOZhwjpEuRHu6Tk IxHg/lu+RnYKQEus1kpCxGzc22DZlcb0lG9MN/F5WzpCNBGKfg2AqPRXLDg8MdXM iGNyp5bnGxPtx4bQyZrAlVR7IpjT3WGc -----END CERTIFICATE-----Generated at Fri Sep 19 05:30:18 2025 by rpki-client