$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: jYShK76S1uEPc1/id1gJuzj5wN2T1ZLpMHpi+Fs7dG0= Subject key identifier: D6:AE:69:0A:ED:FB:F7:D6:5E:5E:44:63:D0:31:5D:36:1B:90:89:A4 Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 03BE Signing time: Wed 17 Sep 2025 01:08:36 +0000 Manifest this update: Wed 17 Sep 2025 01:08:36 +0000 Manifest next update: Wed 24 Sep 2025 01:08:36 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: DcQb6myt5N4NHFIdNQnZdXuCuw0eUH49EqTkX3HMMVk=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vZ/WaADoEuy2hBBHTZfwXR0fuTeB5hZjwEti8AL2NUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: Sep 17 01:08:36 2025 GMT Not After : Sep 24 01:08:36 2025 GMT Subject: CN=68ca0a14-15e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:6a:d0:2b:55:e0:69:fe:57:db:0e:9e:bd: 61:ae:4d:4d:c9:36:3c:67:f4:62:02:47:b7:d3:9a: ce:9c:7a:13:32:ae:c2:29:c1:98:f1:7f:61:08:20: 80:ea:ab:89:68:5c:b3:32:35:0e:c0:60:32:f4:7b: 3b:1c:28:3f:b3:72:f8:91:22:9d:82:cd:67:e2:7c: 62:4e:e6:43:00:99:f8:33:16:e9:ce:ca:2f:5d:20: 8f:25:2b:47:d1:f0:b9:f2:25:69:1a:08:ca:88:30: fb:ec:ad:c2:60:e0:bc:6d:a9:ba:78:05:29:eb:c5: 6b:13:96:94:17:d9:b6:ed:68:73:1c:f2:38:09:d9: 13:80:c8:f5:ab:86:e7:f8:6b:21:d8:ef:81:99:cf: d7:93:2d:b4:41:83:da:5e:4d:bf:cd:1b:5e:42:ac: d0:e4:fc:41:78:4a:f7:dc:3d:f3:65:59:ed:6b:da: f7:71:21:61:82:8e:b6:cf:5a:6d:a2:19:7c:c6:e3: 0b:0d:bb:f2:ac:ad:31:37:1e:06:17:5e:0a:e8:c2: 09:b5:2f:61:1f:cf:e5:77:73:1c:f2:54:e5:a8:f3: 6c:6e:49:16:27:d1:a0:ea:cf:8b:c2:f3:36:66:ee: d6:ce:fc:37:10:9a:36:c5:00:c0:52:e1:49:0b:71: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AE:69:0A:ED:FB:F7:D6:5E:5E:44:63:D0:31:5D:36:1B:90:89:A4 X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:97:9e:96:74:0c:b1:b5:d2:41:81:7a:0c:ec:b0:79:97:ff: 56:a6:bf:fa:8a:61:15:c5:1a:50:b0:e8:0e:a9:f0:63:2e:13: d2:1a:1b:75:f5:ed:0e:44:7c:7c:a1:f0:c1:a2:ee:42:62:36: b6:f3:28:d5:23:ae:08:93:8b:f8:e7:fc:43:29:8b:5e:5f:13: 49:cb:9d:ac:a7:ad:30:03:2e:e5:9c:1e:40:77:0c:35:6b:1c: b4:c6:5d:0b:5b:c9:4d:54:3e:8b:e4:d9:b5:a8:a6:42:0c:42: d2:8e:a4:54:a5:08:d2:6c:c0:e4:72:ee:a5:17:81:54:e0:c4: cf:fe:cf:04:f0:35:80:58:cc:9f:32:99:12:ce:88:70:f9:2d: a5:12:13:4a:6b:7a:f3:25:d0:2c:e2:50:05:83:35:78:e4:4b: ba:9b:9b:26:2c:ce:6b:17:eb:f5:41:3b:e7:65:4c:44:34:ee: 82:5d:2c:b4:9e:13:e6:be:54:63:5d:71:dc:e2:e2:96:21:5d: a0:04:11:15:01:4c:19:81:cf:13:f3:16:99:e1:ac:72:09:96: 34:3e:84:2b:6c:b7:25:5e:86:40:71:fc:51:9d:72:7e:88:74: 3c:fa:b4:e4:dd:e6:c9:91:a3:37:49:a0:d5:b6:b0:6a:a6:ff: 36:e2:ab:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjUwOTE3MDEwODM2WhcNMjUwOTI0MDEwODM2WjAYMRYwFAYD VQQDEw02OGNhMGExNC0xNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PZq0CtV4Gn+V9sOnr1hrk1NyTY8Z/RiAke305rOnHoTMq7CKcGY8X9hCCCA 6quJaFyzMjUOwGAy9Hs7HCg/s3L4kSKdgs1n4nxiTuZDAJn4MxbpzsovXSCPJStH 0fC58iVpGgjKiDD77K3CYOC8bam6eAUp68VrE5aUF9m27WhzHPI4CdkTgMj1q4bn +Gsh2O+Bmc/Xky20QYPaXk2/zRteQqzQ5PxBeEr33D3zZVnta9r3cSFhgo62z1pt ohl8xuMLDbvyrK0xNx4GF14K6MIJtS9hH8/ld3Mc8lTlqPNsbkkWJ9Gg6s+LwvM2 Zu7Wzvw3EJo2xQDAUuFJC3GFDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNauaQrt +/fWXl5EY9AxXTYbkImkMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAll56WdAyxtdJBgXoM7LB5l/9Wpr/6imEVxRpQsOgOqfBjLhPSGht1 9e0ORHx8ofDBou5CYja28yjVI64Ik4v45/xDKYteXxNJy52sp60wAy7lnB5Adww1 axy0xl0LW8lNVD6L5Nm1qKZCDELSjqRUpQjSbMDkcu6lF4FU4MTP/s8E8DWAWMyf MpkSzohw+S2lEhNKa3rzJdAs4lAFgzV45Eu6m5smLM5rF+v1QTvnZUxENO6CXSy0 nhPmvlRjXXHc4uKWIV2gBBEVAUwZgc8T8xaZ4axyCZY0PoQrbLclXoZAcfxRnXJ+ iHQ8+rTk3ebJkaM3SaDVtrBqpv824quw -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:49 2025 by rpki-client