$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json) Hash identifier: reJ5u4cZqBbgwiabdgvJAzKITYFUg/ylIRYDkpjA6c0= Subject key identifier: C6:B6:75:79:92:74:F0:3C:17:7A:66:DA:39:37:73:CA:40:7E:7C:71 Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft Manifest number: 7E Signing time: Wed 03 Sep 2025 07:22:27 +0000 Manifest this update: Wed 03 Sep 2025 07:22:26 +0000 Manifest next update: Wed 10 Sep 2025 07:22:26 +0000 Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: PNvpzE7ZaHH+7pV4LM5dvqS8am0vLMIkKMe9+KoiGag=) 2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Validity Not Before: Sep 3 07:22:26 2025 GMT Not After : Sep 10 07:22:26 2025 GMT Subject: CN=68b7ecb2-f5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:42:a9:40:c4:3c:64:f5:ae:62:15:d4:e7: 34:88:9d:a8:e7:17:c8:74:3e:ce:99:ea:91:3c:a3: fb:a5:f5:41:d9:c8:45:c3:a0:c6:34:f5:7b:57:66: 5b:8d:55:89:51:57:81:f8:4b:66:04:be:e6:fa:e6: ad:e4:d0:ca:92:36:9b:1f:b5:84:79:e3:67:c9:52: 22:c3:87:59:4a:cd:df:0b:78:8d:fb:f8:6e:38:d8: 6c:5a:8c:24:2f:e4:bb:20:22:b2:bf:b0:5b:d8:8f: db:5d:4a:a3:3d:4d:c9:cf:4c:02:6d:78:4e:02:46: 50:1b:9c:c6:dc:fd:f0:24:34:79:2b:2e:ee:33:f8: 2b:f5:97:a5:e4:d7:52:2a:f9:24:e8:0d:40:26:f3: 57:36:04:d3:c7:56:d8:95:79:83:70:b7:9b:cc:38: 51:ff:c1:b4:88:25:ec:60:84:b4:d3:53:c8:89:ce: a5:63:3a:0a:08:ea:ed:15:31:c7:bf:83:e9:cd:04: 79:d9:e9:34:16:22:1f:0f:1b:e7:48:3b:33:bc:20: 78:44:c2:d4:ec:bf:19:e4:05:6b:d8:b1:0a:b0:16: 4d:50:26:88:fc:ec:a6:bb:86:e0:92:68:56:39:9f: a1:0d:1c:f3:60:c9:a7:3e:2d:55:94:d5:68:67:20: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B6:75:79:92:74:F0:3C:17:7A:66:DA:39:37:73:CA:40:7E:7C:71 X509v3 Authority Key Identifier: keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:88:ba:b4:9c:26:7d:d5:21:2b:78:5f:86:c2:70:a8:5d:ef: c5:28:9d:20:ee:9f:00:01:17:ad:89:80:eb:51:2d:29:50:0a: 36:3d:6b:76:d6:c8:d3:ff:95:74:1d:2e:51:ee:a1:10:44:6e: 72:08:46:97:ce:50:44:3e:03:b1:99:c4:71:55:44:83:db:bc: e6:c6:ce:a9:c5:1a:5d:e1:43:f4:4a:3c:98:33:22:f8:bb:5d: a6:01:66:11:55:9a:03:ea:22:34:f8:f3:ad:57:28:d5:24:d8: 00:98:f8:9a:2b:11:27:c9:53:6e:09:92:d1:ed:f2:74:9c:d1: 73:ae:30:91:e3:61:f6:5d:a6:0c:a5:bd:1f:dc:11:7b:56:e0: 13:43:7c:92:e7:c0:0b:6f:36:0b:6a:8b:24:87:d5:dd:a5:24: 1d:26:dc:ee:9f:33:91:ad:56:92:66:ff:14:67:85:d1:67:0e: 60:42:0c:f9:3c:41:34:72:37:36:af:ca:67:e8:a8:4e:6f:e9: ed:bd:0e:c2:7a:7f:b0:d4:5f:4b:c2:d9:68:c0:75:71:e3:9e: 34:b5:63:b6:e2:a0:ab:81:ea:fe:2d:d0:50:01:7f:9c:80:9e: f4:33:eb:29:01:5f:78:04:4e:8f:7e:75:78:22:11:e9:f7:7b: b1:47:cb:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxMjUxMTAvBgNVBAUTKDZGNzdDMTlGMTFEMzJBQUFBNDJFMjY5MTZGNzQ4MkVG QjhGOTdBMUMwHhcNMjUwOTAzMDcyMjI2WhcNMjUwOTEwMDcyMjI2WjAYMRYwFAYD VQQDEw02OGI3ZWNiMi1mNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YJCqUDEPGT1rmIV1Oc0iJ2o5xfIdD7OmeqRPKP7pfVB2chFw6DGNPV7V2Zb jVWJUVeB+EtmBL7m+uat5NDKkjabH7WEeeNnyVIiw4dZSs3fC3iN+/huONhsWowk L+S7ICKyv7Bb2I/bXUqjPU3Jz0wCbXhOAkZQG5zG3P3wJDR5Ky7uM/gr9Zel5NdS Kvkk6A1AJvNXNgTTx1bYlXmDcLebzDhR/8G0iCXsYIS001PIic6lYzoKCOrtFTHH v4PpzQR52ek0FiIfDxvnSDszvCB4RMLU7L8Z5AVr2LEKsBZNUCaI/Oymu4bgkmhW OZ+hDRzzYMmnPi1VlNVoZyCkMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMa2dXmS dPA8F3pm2jk3c8pAfnxxMB8GA1UdIwQYMBaAFG93wZ8R0yqqpC4mkW90gu+4+Xoc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDEyNS9GNUY3ODc4QUND MTAxMUVGODczOTZBNkVDNEY5QUUwMi9iM2ZCbnhIVEtxcWtMaWFSYjNTQzc3ajVl aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2IzZkJueEhUS3Fxa0xpYVJiM1NDNzdqNWVody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDEyNS9GNUY3ODc4QUNDMTAxMUVGODczOTZBNkVDNEY5QUUwMi9iM2ZCbnhIVEtx cWtMaWFSYjNTQzc3ajVlaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZiLq0nCZ91SEreF+GwnCoXe/FKJ0g7p8AARetiYDrUS0pUAo2PWt2 1sjT/5V0HS5R7qEQRG5yCEaXzlBEPgOxmcRxVUSD27zmxs6pxRpd4UP0SjyYMyL4 u12mAWYRVZoD6iI0+POtVyjVJNgAmPiaKxEnyVNuCZLR7fJ0nNFzrjCR42H2XaYM pb0f3BF7VuATQ3yS58ALbzYLaoskh9XdpSQdJtzunzORrVaSZv8UZ4XRZw5gQgz5 PEE0cjc2r8pn6KhOb+ntvQ7Cen+w1F9LwtlowHVx4540tWO24qCrger+LdBQAX+c gJ70M+spAV94BE6PfnV4IhHp93uxR8uq -----END CERTIFICATE-----Generated at Thu Sep 4 13:58:36 2025 by rpki-client