$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: +ItKwn6mPNUwGMx6++bwgQrPIWK/NxlYnOs5jeJinYU= Subject key identifier: 19:14:E2:65:65:C1:F1:60:D8:79:2D:30:65:83:1B:EE:A0:FC:FF:D8 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 012B Signing time: Fri 19 Sep 2025 05:13:23 +0000 Manifest this update: Fri 19 Sep 2025 05:13:22 +0000 Manifest next update: Fri 26 Sep 2025 05:13:22 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: f/mvOP6d0vd6c9uWuXSkd8joC7o3DhMGkhIiXnGC+OE=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 1uxD9+JBsmHAELgtODtowZ9H7bGY5PrdUNrrDTftS4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Sep 19 05:13:22 2025 GMT Not After : Sep 26 05:13:22 2025 GMT Subject: CN=68cce673-bba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bb:7b:a8:78:ce:2d:fd:6b:3f:9b:11:b8:06: 70:5b:9c:d3:b5:1f:1b:6b:f2:b8:16:6b:ba:4c:22: 41:55:de:e6:3e:e4:c7:3f:10:e0:ea:44:bf:72:4c: d1:63:7c:d4:f0:7c:03:5f:a2:c5:69:21:29:45:c3: c2:93:1c:12:40:54:b9:09:b8:3d:0a:a2:00:01:13: b1:5b:ce:46:d6:8d:04:17:10:6b:e4:8f:24:e5:82: 21:6d:c7:3f:77:7c:bd:f4:df:65:5c:ae:80:e2:bc: 51:60:a4:be:d1:2b:94:af:5f:37:7c:f6:9e:e8:5b: 68:7c:fa:06:d7:cc:94:d7:71:25:0b:c7:e3:d3:33: 50:76:f5:34:ad:16:3d:8d:74:de:c8:a3:1c:c7:1a: 88:d3:ed:cc:37:0a:70:1d:8a:ed:f1:25:14:fe:17: 35:f4:af:0d:77:64:f2:b4:2a:4b:78:57:ad:48:15: 81:2e:95:cf:44:a9:61:d8:f8:51:00:e2:48:50:11: 86:9d:df:76:1a:38:76:dd:27:bb:c5:fc:e1:6f:90: b3:df:12:1c:85:2b:49:78:6b:00:77:67:38:c8:95: 14:cd:a8:c4:6e:87:3c:c2:18:a0:fa:c9:d5:32:fd: 46:96:8e:db:57:3f:f8:72:ed:c5:01:be:e1:ec:f0: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:14:E2:65:65:C1:F1:60:D8:79:2D:30:65:83:1B:EE:A0:FC:FF:D8 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5b:14:c7:a1:56:ba:c1:de:37:53:db:3b:38:9f:7c:a7:d8: 55:81:8e:a3:86:cd:78:a4:03:47:c6:4e:e0:b4:e4:88:e1:d9: 45:cd:d3:6a:8c:4e:04:38:a1:f8:60:73:b7:1f:25:a4:eb:3f: a4:00:1b:be:a9:96:b7:8d:9e:d8:87:04:60:c5:77:7c:d1:ff: f1:29:9a:b0:90:86:aa:9b:9d:96:28:a6:74:fc:fe:72:6c:50: cf:1d:1c:6b:e3:36:f3:62:c1:d4:8a:24:d4:61:73:01:51:c1: f5:9e:46:5e:81:d6:b9:52:4a:d6:31:c5:3b:3c:0e:d3:91:7e: e8:d0:f3:d7:a0:e2:1a:57:5d:8e:5b:e6:04:31:48:03:8a:51: 60:38:86:4c:e4:2e:54:05:1b:09:c8:0c:3a:99:8b:9d:29:03: dd:4c:34:fa:fe:e7:c0:de:f4:08:3e:6d:df:6a:f6:ec:ec:c8: 9d:e1:85:ad:d5:2f:bc:1a:12:46:02:bc:e3:93:3d:08:a3:ec: 17:c4:2e:a3:f5:c1:28:94:ef:0d:0d:b5:2d:db:10:e8:01:3f: 73:5d:54:96:4e:21:f7:0c:e3:ac:c0:74:07:c0:41:48:54:51: 98:e1:63:b7:3f:e1:5e:86:5f:98:59:74:c8:3e:18:8d:c0:df: 3d:77:78:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUwOTE5MDUxMzIyWhcNMjUwOTI2MDUxMzIyWjAYMRYwFAYD VQQDEw02OGNjZTY3My1iYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bt7qHjOLf1rP5sRuAZwW5zTtR8ba/K4Fmu6TCJBVd7mPuTHPxDg6kS/ckzR Y3zU8HwDX6LFaSEpRcPCkxwSQFS5Cbg9CqIAAROxW85G1o0EFxBr5I8k5YIhbcc/ d3y99N9lXK6A4rxRYKS+0SuUr183fPae6FtofPoG18yU13ElC8fj0zNQdvU0rRY9 jXTeyKMcxxqI0+3MNwpwHYrt8SUU/hc19K8Nd2TytCpLeFetSBWBLpXPRKlh2PhR AOJIUBGGnd92Gjh23Se7xfzhb5Cz3xIchStJeGsAd2c4yJUUzajEboc8whig+snV Mv1Glo7bVz/4cu3FAb7h7PDgxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkU4mVl wfFg2HktMGWDG+6g/P/YMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiWxTHoVa6wd43U9s7OJ98p9hVgY6jhs14pANHxk7gtOSI4dlFzdNq jE4EOKH4YHO3HyWk6z+kABu+qZa3jZ7YhwRgxXd80f/xKZqwkIaqm52WKKZ0/P5y bFDPHRxr4zbzYsHUiiTUYXMBUcH1nkZegda5UkrWMcU7PA7TkX7o0PPXoOIaV12O W+YEMUgDilFgOIZM5C5UBRsJyAw6mYudKQPdTDT6/ufA3vQIPm3favbs7Mid4YWt 1S+8GhJGArzjkz0Io+wXxC6j9cEolO8NDbUt2xDoAT9zXVSWTiH3DOOswHQHwEFI VFGY4WO3P+Fehl+YWXTIPhiNwN89d3ga -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:43 2025 by rpki-client