$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json) Hash identifier: vuVSJPEWUV5v/Bpcv98DGIZ2Ggj1mNf6Wrr7eSkFMMY= Subject key identifier: D5:2A:EA:7D:BC:3B:9D:E4:A8:A4:EC:68:40:CC:98:28:E1:D9:B2:02 Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft Manifest number: 0826 Signing time: Tue 16 Sep 2025 21:06:30 +0000 Manifest this update: Tue 16 Sep 2025 21:06:29 +0000 Manifest next update: Tue 23 Sep 2025 21:06:29 +0000 Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: dGr1Y9tI6ZOvdGZGPbPoxkQrQ2IPGaeaDJtNGye8dRM=) 2: E54ED53A8D7311F0B0F9AE62C4F9AE02.roa (hash: kCttRVelhifi2+xn8lX8sDzotW7sKg4IQjl8UZrUGt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 21:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Validity Not Before: Sep 16 21:06:29 2025 GMT Not After : Sep 23 21:06:29 2025 GMT Subject: CN=68c9d155-58b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:e8:49:8e:ce:83:c8:4b:3f:f5:14:73:4c: a2:1e:2c:a3:82:71:e1:0d:99:96:30:6f:86:a6:36: 24:2e:63:5f:00:1a:50:69:a6:8b:bc:7e:5d:61:2a: c2:b4:57:cf:4a:2b:0a:d7:9a:9d:4a:06:f9:df:57: 8c:d2:10:f6:47:6e:ee:3a:15:7e:fd:d2:69:3a:fa: f9:e6:15:86:9b:5d:73:db:4d:f0:ce:bc:79:69:2c: 5b:33:89:73:8e:e4:b5:21:8a:c4:fd:66:18:9d:81: 1a:5b:65:49:c0:ff:13:1e:cb:44:fc:86:30:a1:b5: c0:ae:27:e4:71:bc:2f:02:da:58:70:f7:18:2b:0d: 38:98:12:19:de:76:05:f1:cd:1c:e8:ed:e9:ed:87: 17:4a:6c:53:fe:7e:8f:6c:dc:85:54:f2:2a:3f:29: 9f:c7:c3:87:83:4d:46:69:d2:9e:bd:fe:6d:84:fd: 6e:91:72:59:62:46:6d:3b:83:1d:10:97:2f:19:2b: 27:9d:76:c7:17:1c:64:44:40:47:fd:d0:9d:4b:fa: 92:2f:37:d0:74:18:99:bf:78:5d:7b:68:34:6c:ae: 10:41:76:42:58:7a:24:27:e3:79:e4:cb:27:2a:3a: 32:96:4c:24:e1:54:21:9b:47:09:00:84:13:61:b5: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:EA:7D:BC:3B:9D:E4:A8:A4:EC:68:40:CC:98:28:E1:D9:B2:02 X509v3 Authority Key Identifier: keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7b:1e:00:75:2a:c4:c2:79:00:1c:47:21:07:80:bc:83:88: df:54:15:7a:f8:41:52:a7:45:10:4a:42:72:31:c9:2f:2c:01: 90:31:b6:6b:cd:6e:ec:72:5a:83:a2:23:e3:23:c7:74:a2:a9: 7e:bd:fd:2f:83:ec:f6:3f:97:1b:8e:38:10:fd:8c:04:b6:0c: ff:af:e9:a2:be:54:96:19:58:b5:3e:f0:85:35:3f:af:97:2d: 52:00:e5:f4:fa:8b:c6:8c:bc:3b:f2:27:41:35:1a:a1:90:ce: 6d:91:59:fc:a8:bb:19:72:84:b9:5e:d7:16:12:ba:2b:c2:85: bc:63:b1:7b:47:22:6a:1f:7e:da:c0:2b:50:df:37:33:04:70: 4c:92:d5:6a:a4:b3:31:0f:29:e4:43:58:8b:4e:32:aa:6f:ae: 17:01:5f:c6:ef:fd:07:b4:d9:c6:a9:66:03:f8:74:51:8b:e0: c5:6d:5a:c2:70:13:76:09:00:ac:6f:4f:8d:2b:a4:1e:86:fc: f0:3a:85:fb:67:89:de:5f:f8:f4:22:a6:80:88:4c:18:00:d6: aa:2b:23:4d:83:e2:6b:54:23:e2:f5:3b:c3:89:6c:1f:ae:9c: b2:98:ad:e5:94:bb:81:bf:4d:52:86:04:e2:ff:b3:cc:c1:dd: 49:af:e3:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG RUU0MDZDMTgwHhcNMjUwOTE2MjEwNjI5WhcNMjUwOTIzMjEwNjI5WjAYMRYwFAYD VQQDEw02OGM5ZDE1NS01OGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmToSY7Og8hLP/UUc0yiHiyjgnHhDZmWMG+GpjYkLmNfABpQaaaLvH5dYSrC tFfPSisK15qdSgb531eM0hD2R27uOhV+/dJpOvr55hWGm11z203wzrx5aSxbM4lz juS1IYrE/WYYnYEaW2VJwP8THstE/IYwobXArifkcbwvAtpYcPcYKw04mBIZ3nYF 8c0c6O3p7YcXSmxT/n6PbNyFVPIqPymfx8OHg01GadKevf5thP1ukXJZYkZtO4Md EJcvGSsnnXbHFxxkREBH/dCdS/qSLzfQdBiZv3hde2g0bK4QQXZCWHokJ+N55Msn Kjoylkwk4VQhm0cJAIQTYbXY5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUq6n28 O53kqKTsaEDMmCjh2bICMB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE4Qi83RTBDRUVGQUVFQjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2 M2plREVxZFotc3ItNUFiQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfex4AdSrEwnkAHEchB4C8g4jfVBV6+EFSp0UQSkJyMckvLAGQMbZr zW7sclqDoiPjI8d0oql+vf0vg+z2P5cbjjgQ/YwEtgz/r+mivlSWGVi1PvCFNT+v ly1SAOX0+ovGjLw78idBNRqhkM5tkVn8qLsZcoS5XtcWErorwoW8Y7F7RyJqH37a wCtQ3zczBHBMktVqpLMxDynkQ1iLTjKqb64XAV/G7/0HtNnGqWYD+HRRi+DFbVrC cBN2CQCsb0+NK6QehvzwOoX7Z4neX/j0IqaAiEwYANaqKyNNg+JrVCPi9TvDiWwf rpyymK3llLuBv01ShgTi/7PMwd1Jr+M/ -----END CERTIFICATE-----Generated at Thu Sep 18 20:35:38 2025 by rpki-client