$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: 5zsnCkCOahjy0khBtKrEyZjopzY1ntoO7Uj4IYKp+oY= Subject key identifier: 28:FC:AB:08:99:36:C7:A1:14:25:9D:75:AF:15:37:CC:BD:C7:BA:A9 Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0C1F Signing time: Wed 10 Sep 2025 18:52:06 +0000 Manifest this update: Wed 10 Sep 2025 18:52:06 +0000 Manifest next update: Wed 17 Sep 2025 18:52:06 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: D4gwdkjei7FelTRg7/nzLTpn4Vma1Q+t89VLWZ6bd2k=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: QTmQ+b0TWigH3ktAvPS5L4JGC6TmpCstJJc/am/VnB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: Sep 10 18:52:06 2025 GMT Not After : Sep 17 18:52:06 2025 GMT Subject: CN=68c1c8d6-490b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a5:78:98:a6:9a:01:21:4f:c1:5b:c4:ce:1a: 11:1a:56:30:75:be:c6:00:3c:49:9f:63:38:52:83: 3d:74:b6:d6:94:aa:c8:88:6a:76:37:7f:7a:19:5b: bb:d2:74:9b:b7:eb:22:ab:fc:7f:24:5b:d5:88:0b: 46:3b:23:cf:fe:74:10:b7:ce:45:e6:4b:60:6a:ee: 04:37:48:c6:d9:9d:4e:93:11:4a:3b:d7:57:ab:54: a8:5b:70:ef:60:62:c8:e6:03:b2:45:2f:0c:9a:ba: 3c:6c:30:f2:4e:4d:38:50:54:7f:b9:93:2a:98:2b: 2f:fc:6a:7f:6d:f4:7d:d9:3d:dd:fd:5b:78:d7:91: d8:51:b1:9e:01:5e:f4:22:25:d4:7c:8e:f9:30:e0: fb:16:83:84:c7:a3:60:c0:c3:34:e4:1c:12:66:d5: 36:5d:54:6a:37:e0:63:30:8a:e3:c7:6c:7c:73:83: 3c:e3:36:6e:e7:2d:52:55:1d:1f:d6:57:26:ff:f3: 9f:d8:c7:89:52:74:b6:9d:7d:4b:29:2b:ad:4b:67: 02:81:82:ef:af:03:6f:81:0b:dc:46:de:47:94:1e: a2:48:0f:29:62:14:b5:6f:6d:d1:4f:b5:12:4d:24: 85:b0:ed:92:6f:50:b8:ce:76:6f:b5:20:40:5b:72: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FC:AB:08:99:36:C7:A1:14:25:9D:75:AF:15:37:CC:BD:C7:BA:A9 X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:0a:d0:21:9a:4d:59:94:4d:7b:f5:f5:51:70:88:d0:cb:32: 62:6e:73:fe:ed:7e:b2:22:04:cd:15:98:5d:12:82:74:ce:83: d1:ed:5e:3e:f4:6b:e1:69:7e:93:71:8e:3b:65:46:fb:fc:e1: 4f:27:b3:98:93:31:b1:b1:c3:21:b4:b0:3a:83:35:5a:fe:0c: 79:fd:ca:d7:46:42:ea:33:6e:51:3f:50:4b:51:b9:f5:44:91: 11:42:74:27:de:bd:06:36:12:03:5f:da:7f:78:68:39:fa:67: cd:17:c7:c8:c1:b5:08:f6:9c:18:ba:75:45:a1:8b:5d:c3:80: 75:cb:c2:fe:95:ba:cb:df:30:67:02:5c:f0:38:48:6c:ec:cc: f5:48:72:84:71:76:9b:76:61:64:a2:ff:85:d9:b0:96:04:8b: 28:91:ab:4c:8c:3f:be:6a:50:21:7c:4c:25:2e:3d:67:76:79: 26:bf:2f:52:13:b8:3f:b6:ed:5d:fc:48:07:ec:bc:a2:31:58: 84:07:d2:32:fa:e8:b1:94:7a:bc:3b:65:1f:f0:50:38:9e:c7: 55:89:dc:fb:23:05:3f:08:1e:45:d1:b8:0a:5f:55:8a:f7:2e: 09:24:d2:96:2b:57:43:99:b1:1d:d0:d9:5d:6e:a8:9b:ca:8a: 54:3f:b5:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjUwOTEwMTg1MjA2WhcNMjUwOTE3MTg1MjA2WjAYMRYwFAYD VQQDEw02OGMxYzhkNi00OTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KV4mKaaASFPwVvEzhoRGlYwdb7GADxJn2M4UoM9dLbWlKrIiGp2N396GVu7 0nSbt+siq/x/JFvViAtGOyPP/nQQt85F5ktgau4EN0jG2Z1OkxFKO9dXq1SoW3Dv YGLI5gOyRS8Mmro8bDDyTk04UFR/uZMqmCsv/Gp/bfR92T3d/Vt415HYUbGeAV70 IiXUfI75MOD7FoOEx6NgwMM05BwSZtU2XVRqN+BjMIrjx2x8c4M84zZu5y1SVR0f 1lcm//Of2MeJUnS2nX1LKSutS2cCgYLvrwNvgQvcRt5HlB6iSA8pYhS1b23RT7US TSSFsO2Sb1C4znZvtSBAW3IL9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCj8qwiZ NsehFCWdda8VN8y9x7qpMB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjCtAhmk1ZlE179fVRcIjQyzJibnP+7X6yIgTNFZhdEoJ0zoPR7V4+ 9GvhaX6TcY47ZUb7/OFPJ7OYkzGxscMhtLA6gzVa/gx5/crXRkLqM25RP1BLUbn1 RJERQnQn3r0GNhIDX9p/eGg5+mfNF8fIwbUI9pwYunVFoYtdw4B1y8L+lbrL3zBn AlzwOEhs7Mz1SHKEcXabdmFkov+F2bCWBIsokatMjD++alAhfEwlLj1ndnkmvy9S E7g/tu1d/EgH7LyiMViEB9Iy+uixlHq8O2Uf8FA4nsdVidz7IwU/CB5F0bgKX1WK 9y4JJNKWK1dDmbEd0NldbqibyopUP7Xj -----END CERTIFICATE-----Generated at Thu Sep 11 22:10:38 2025 by rpki-client