$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: Z4erR2KYpVTVQqT0eH4bMri08Ov2mijbZL1vR+/3D5Y= Subject key identifier: 2F:9F:9D:C4:59:C3:AD:0C:23:EB:4C:0F:44:4B:DD:2D:6B:5C:49:76 Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 04E8 Signing time: Wed 17 Sep 2025 00:07:29 +0000 Manifest this update: Wed 17 Sep 2025 00:07:28 +0000 Manifest next update: Wed 24 Sep 2025 00:07:28 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: PjRqWYurIf3WH8jMwqmvRpO9oVmiO+9scFvy9QvkYRs=) 2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: ES0KtplnGhM27Vh/hroAKpFu+jIJhHlyayZgnN5P/Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: Sep 17 00:07:28 2025 GMT Not After : Sep 24 00:07:28 2025 GMT Subject: CN=68c9fbc0-e47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:30:be:be:ff:62:7d:68:71:53:76:05:24:f8: 32:fa:c1:ed:07:e5:e1:da:44:cf:f2:2a:07:72:f4: e4:32:24:33:17:da:ed:2f:f5:76:25:cb:c6:f0:8d: 3c:f2:e6:76:b0:30:72:5c:ef:38:4f:4c:9e:cf:72: 0f:94:c8:bf:88:60:5a:3e:75:69:e1:3b:5b:c8:0a: 1e:eb:f4:4b:4c:ae:f0:0b:3c:fb:90:a5:d8:f5:aa: c1:f6:44:43:b6:bb:fc:d2:09:7c:44:8c:81:3b:7f: 73:f7:89:ca:4f:e2:36:b9:3a:53:32:c7:96:9b:12: 1a:32:ee:8f:b2:b4:1e:b6:dc:ca:64:90:ae:af:f4: 27:71:90:77:23:c6:9a:72:ef:c7:9c:74:f3:ed:a7: b4:ab:30:d2:e7:1f:27:a4:f9:66:f9:77:08:05:4f: e7:7e:74:05:a2:b7:1b:d7:c7:b4:7e:33:d2:1c:fb: c4:ff:45:76:35:0a:5d:87:ab:c2:66:7f:fd:01:d8: c9:06:2d:8c:9b:aa:f8:4e:93:f0:cd:7a:2a:77:ec: 82:f4:a3:9c:f6:ee:bc:c7:79:e0:8c:97:4e:fc:07: 11:75:10:90:ed:8e:9a:87:07:5a:a3:82:a7:f1:10: 6e:a8:a2:a4:3f:6a:5c:b6:62:c5:c3:1a:a8:b9:a6: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9F:9D:C4:59:C3:AD:0C:23:EB:4C:0F:44:4B:DD:2D:6B:5C:49:76 X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7a:f5:5a:9a:3a:38:6c:db:3d:21:80:0c:d0:41:f2:08:87: 33:fc:0f:0a:b3:45:94:e3:c6:b7:6c:9e:73:15:82:c6:8e:07: f1:34:e0:f8:55:3e:f1:97:f4:ed:38:83:9b:ba:ed:73:99:08: e5:7e:93:0e:a3:9b:04:9b:0a:7a:89:29:a4:8f:ec:c6:e3:f0: 09:89:7e:10:d8:e2:7e:f6:9c:cc:a4:83:aa:9f:20:10:60:cf: e9:71:3d:53:2b:36:bf:24:9f:dd:9e:5d:b1:29:6d:f9:be:28: d4:98:15:18:20:de:1f:97:e3:52:c4:91:d9:76:13:ef:a6:b4: af:c4:ba:fe:d4:02:cc:a1:ec:f6:55:e9:c4:db:17:4a:90:86: 83:45:e7:1d:cd:f5:3b:20:f8:8e:f2:ec:46:49:34:6b:6e:a0: 89:b3:75:41:ad:71:ef:e2:b5:e2:ed:78:71:e9:99:9f:e0:c5: 43:47:d6:f4:c4:af:d6:7e:03:78:35:a4:13:04:40:f3:44:b7: 4b:c4:52:55:a0:ab:d5:c4:a7:bb:fb:68:d4:66:db:c1:0a:8d: 5c:27:fd:4b:41:fb:19:06:53:94:7e:7e:89:2f:a0:23:0b:77: 2c:80:4a:9e:25:8d:ca:af:8f:85:27:95:7c:e2:2b:67:19:17: ad:be:31:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjUwOTE3MDAwNzI4WhcNMjUwOTI0MDAwNzI4WjAYMRYwFAYD VQQDEw02OGM5ZmJjMC1lNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTC+vv9ifWhxU3YFJPgy+sHtB+Xh2kTP8ioHcvTkMiQzF9rtL/V2JcvG8I08 8uZ2sDByXO84T0yez3IPlMi/iGBaPnVp4TtbyAoe6/RLTK7wCzz7kKXY9arB9kRD trv80gl8RIyBO39z94nKT+I2uTpTMseWmxIaMu6PsrQettzKZJCur/QncZB3I8aa cu/HnHTz7ae0qzDS5x8npPlm+XcIBU/nfnQForcb18e0fjPSHPvE/0V2NQpdh6vC Zn/9AdjJBi2Mm6r4TpPwzXoqd+yC9KOc9u68x3ngjJdO/AcRdRCQ7Y6ahwdao4Kn 8RBuqKKkP2pctmLFwxqouaYCcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+fncRZ w60MI+tMD0RL3S1rXEl2MB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjevVamjo4bNs9IYAM0EHyCIcz/A8Ks0WU48a3bJ5zFYLGjgfxNOD4 VT7xl/TtOIObuu1zmQjlfpMOo5sEmwp6iSmkj+zG4/AJiX4Q2OJ+9pzMpIOqnyAQ YM/pcT1TKza/JJ/dnl2xKW35vijUmBUYIN4fl+NSxJHZdhPvprSvxLr+1ALMoez2 VenE2xdKkIaDRecdzfU7IPiO8uxGSTRrbqCJs3VBrXHv4rXi7Xhx6Zmf4MVDR9b0 xK/WfgN4NaQTBEDzRLdLxFJVoKvVxKe7+2jUZtvBCo1cJ/1LQfsZBlOUfn6JL6Aj C3csgEqeJY3Kr4+FJ5V84itnGRetvjHM -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:56 2025 by rpki-client