$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: 38sUhJ21em/EJiLKaih+BYgURR8xGGRsI5Lug9eGVqk= Subject key identifier: 24:1E:AF:AB:3D:D4:D8:EA:77:03:61:0B:EC:68:EC:74:E5:3E:26:CB Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 04FA Signing time: Wed 17 Sep 2025 00:03:20 +0000 Manifest this update: Wed 17 Sep 2025 00:03:19 +0000 Manifest next update: Wed 24 Sep 2025 00:03:19 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: Zww/jYB5lYbDXZhhQQ/UcoivfoR8J5s3HMvSkYe+zGw=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: wh1NM+NSrXNgk+dMjusznA6q+s8v+UAafuQbIX3k9wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: Sep 17 00:03:19 2025 GMT Not After : Sep 24 00:03:19 2025 GMT Subject: CN=68c9fac8-6050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:0a:33:2a:85:5e:8a:08:ad:81:54:19:91: c2:f2:d3:a2:f1:a0:7d:39:ef:c5:90:e6:61:a2:68: 77:a3:a7:3b:70:a3:bc:26:4d:b0:17:e4:c2:dd:ab: f9:38:40:1a:7b:d0:5f:85:0e:b6:32:25:07:bd:20: a6:09:75:2b:93:f1:1e:17:87:c4:06:ed:b5:b8:c4: fc:eb:bc:dd:82:c7:1b:6c:fa:a7:17:95:8a:ee:37: 10:17:ee:b7:06:1e:22:11:44:62:47:6a:80:d7:ec: 19:33:ef:33:5a:30:9c:42:28:b4:fe:6d:87:eb:8a: 0c:30:dd:af:21:6c:c5:de:fb:a6:12:57:48:c1:15: 5e:b8:23:bb:f6:50:c0:61:23:c6:4d:c5:00:35:fe: 74:bb:ca:7d:0d:42:8b:2d:2a:11:df:14:53:5c:4f: ce:30:ae:22:4b:e2:43:30:d5:16:9c:f4:47:38:e8: fb:97:c6:60:52:c0:25:53:db:42:7d:87:72:b7:b0: 3e:12:37:57:d0:0e:1e:01:24:5a:86:ec:1b:9b:79: c6:1a:44:be:b1:b0:13:0e:45:12:db:d6:62:37:33: 6a:78:cf:f0:77:90:f1:c3:74:20:9a:fa:53:6a:09: 84:f2:16:83:ce:5f:5c:30:3e:37:94:ea:a1:24:68: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1E:AF:AB:3D:D4:D8:EA:77:03:61:0B:EC:68:EC:74:E5:3E:26:CB X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:59:d6:45:01:94:da:bd:75:3c:3f:e2:b4:cb:c1:bf:eb:8f: 37:17:3f:16:a8:08:d1:2c:81:9e:9f:12:e5:2d:bc:5f:20:e2: 5a:b1:b8:c1:71:7a:39:5e:a5:86:cf:93:01:47:c9:29:cf:2c: 9b:f7:ca:0d:78:09:8e:d9:94:c9:57:65:65:e0:31:61:bd:bd: 78:f0:e6:c2:b0:0b:da:f2:50:77:ff:b0:90:7c:db:4a:3a:0b: c0:9e:14:bc:ae:0b:e3:51:26:de:75:91:84:a1:1c:0c:35:f9: cf:71:9d:de:17:6f:19:8d:ce:99:1f:53:0c:cb:97:0d:f3:4f: eb:96:10:f9:11:71:dc:1a:05:cf:7a:f3:08:9a:eb:f2:99:22: 1c:eb:0c:48:52:9c:ad:5a:c2:d3:41:de:9e:56:3f:cf:fd:08: 65:02:44:0b:78:a5:b8:d5:d3:ce:fe:4b:dd:7a:40:15:32:5c: 9a:f7:91:1e:e7:24:c5:19:6c:ad:52:ae:b0:e7:73:66:95:50: a9:e4:39:79:e5:34:2a:90:cf:88:bb:49:bf:1b:2b:52:19:d4: 6f:0c:cd:d8:4f:79:26:58:0f:64:57:7e:6c:c5:a3:40:67:21: 5b:c8:2c:75:0d:99:81:c5:a5:90:91:ad:49:fa:f2:25:24:cd: 5a:93:1b:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjUwOTE3MDAwMzE5WhcNMjUwOTI0MDAwMzE5WjAYMRYwFAYD VQQDEw02OGM5ZmFjOC02MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3G8KMyqFXooIrYFUGZHC8tOi8aB9Oe/FkOZhomh3o6c7cKO8Jk2wF+TC3av5 OEAae9BfhQ62MiUHvSCmCXUrk/EeF4fEBu21uMT867zdgscbbPqnF5WK7jcQF+63 Bh4iEURiR2qA1+wZM+8zWjCcQii0/m2H64oMMN2vIWzF3vumEldIwRVeuCO79lDA YSPGTcUANf50u8p9DUKLLSoR3xRTXE/OMK4iS+JDMNUWnPRHOOj7l8ZgUsAlU9tC fYdyt7A+EjdX0A4eASRahuwbm3nGGkS+sbATDkUS29ZiNzNqeM/wd5Dxw3QgmvpT agmE8haDzl9cMD43lOqhJGiQoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQer6s9 1NjqdwNhC+xo7HTlPibLMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcWdZFAZTavXU8P+K0y8G/6483Fz8WqAjRLIGenxLlLbxfIOJasbjB cXo5XqWGz5MBR8kpzyyb98oNeAmO2ZTJV2Vl4DFhvb148ObCsAva8lB3/7CQfNtK OgvAnhS8rgvjUSbedZGEoRwMNfnPcZ3eF28Zjc6ZH1MMy5cN80/rlhD5EXHcGgXP evMImuvymSIc6wxIUpytWsLTQd6eVj/P/QhlAkQLeKW41dPO/kvdekAVMlya95Ee 5yTFGWytUq6w53NmlVCp5Dl55TQqkM+Iu0m/GytSGdRvDM3YT3kmWA9kV35sxaNA ZyFbyCx1DZmBxaWQka1J+vIlJM1akxtk -----END CERTIFICATE-----Generated at Thu Sep 18 20:53:18 2025 by rpki-client