$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json) Hash identifier: o002WHocYw9xLai33+9nT5d9AtsoB1wAYwdDRFLrfkY= Subject key identifier: 22:60:85:1D:3D:D6:D0:61:91:DF:A5:73:23:02:90:1B:CC:C1:9F:B2 Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft Manifest number: 66 Signing time: Sat 19 Jul 2025 07:15:16 +0000 Manifest this update: Sat 19 Jul 2025 07:15:15 +0000 Manifest next update: Sat 26 Jul 2025 07:15:15 +0000 Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: mrxES7Zs+NMh+UZciK11x4ZXKKI/g1J3xHuFDinaeaw=) 2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Validity Not Before: Jul 19 07:15:15 2025 GMT Not After : Jul 26 07:15:15 2025 GMT Subject: CN=687b4603-956e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:f0:17:1d:ec:8a:07:4f:0e:f5:74:66:36: 20:33:97:c2:4d:40:22:96:2f:08:7a:1a:03:28:c1: 2f:a1:cb:46:f0:21:eb:a8:d4:ce:4f:32:55:74:5d: c2:30:7a:df:6d:a4:43:19:4e:b6:26:d7:7c:17:46: 7c:67:90:14:83:a8:41:22:a8:51:16:cb:59:6d:a6: a9:f0:70:9d:ba:02:bc:9d:63:ab:7c:5a:fe:7d:cf: 5b:c5:68:65:c7:12:fb:a3:5e:ba:38:b7:0a:ed:27: 2c:2d:bd:18:42:69:1a:23:8b:6d:10:0c:1f:43:fc: a2:cb:34:ae:cd:13:36:6d:d4:45:c3:9c:2b:ae:be: a6:8e:0a:02:67:df:3c:0d:1c:40:f0:89:af:2c:6c: 46:ef:84:28:70:2d:2e:09:38:0a:87:da:bf:b8:8e: d7:36:a6:ca:03:c8:53:bf:10:7d:a4:c4:d8:08:bd: 35:3f:20:fd:2b:8a:22:89:e0:31:64:43:9c:b0:06: 69:d4:be:4b:29:ce:87:88:9c:39:fc:72:94:f9:b0: e1:8a:35:31:ed:f2:d7:a8:c4:78:ae:4f:e4:49:df: 18:b3:10:78:c4:18:cd:cf:d3:69:8e:19:4e:d7:f9: 2f:0a:a2:d9:35:56:d5:68:1b:6d:37:d0:47:2d:71: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:60:85:1D:3D:D6:D0:61:91:DF:A5:73:23:02:90:1B:CC:C1:9F:B2 X509v3 Authority Key Identifier: keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f7:58:30:f0:7d:d1:1a:f6:b7:a5:58:c7:65:52:e6:32:07: ef:73:78:d4:58:36:28:52:d5:52:fa:a2:7d:c3:b7:11:92:37: d8:3b:8a:2a:5c:9f:93:bf:0d:84:77:aa:a6:de:7a:79:b0:5c: 79:13:01:c5:19:d4:44:31:11:73:2a:7e:38:ef:44:b2:15:dc: 4d:2f:0d:dc:33:83:33:95:3d:12:33:bc:52:46:3a:cc:ba:3b: 76:8a:8c:8f:b4:f1:fb:da:82:1a:74:de:80:73:f0:b3:86:5f: a7:1a:30:61:2e:cf:f7:0a:cf:a0:78:12:8f:06:b7:98:c8:3c: ff:63:8f:90:b8:5e:d4:91:92:0d:08:6e:e3:06:22:5a:b9:6c: 8c:35:2a:4a:b3:d6:00:77:81:00:5a:cc:7f:0e:32:5f:a4:8b: fc:2f:98:c0:67:24:a0:14:63:44:c7:71:2d:b9:3b:30:40:3d: 1c:b0:80:dc:e1:2d:38:cc:69:2f:2f:e9:6a:55:f6:f6:ca:3e: eb:29:81:0b:2b:78:cf:f8:3a:1b:c3:a6:84:f4:4c:a5:d1:61: 61:a5:b8:53:fa:9b:61:91:17:ba:ba:5f:38:5a:28:4f:22:09: 02:37:df:ff:0c:f9:77:3d:f9:25:83:d2:e3:af:25:d3:31:ee: 26:02:67:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDEyNTExMC8GA1UEBRMoNkY3N0MxOUYxMUQzMkFBQUE0MkUyNjkxNkY3NDgyRUZC OEY5N0ExQzAeFw0yNTA3MTkwNzE1MTVaFw0yNTA3MjYwNzE1MTVaMBgxFjAUBgNV BAMTDTY4N2I0NjAzLTk1NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFofAXHeyKB08O9XRmNiAzl8JNQCKWLwh6GgMowS+hy0bwIeuo1M5PMlV0XcIw et9tpEMZTrYm13wXRnxnkBSDqEEiqFEWy1ltpqnwcJ26ArydY6t8Wv59z1vFaGXH EvujXro4twrtJywtvRhCaRoji20QDB9D/KLLNK7NEzZt1EXDnCuuvqaOCgJn3zwN HEDwia8sbEbvhChwLS4JOAqH2r+4jtc2psoDyFO/EH2kxNgIvTU/IP0riiKJ4DFk Q5ywBmnUvkspzoeInDn8cpT5sOGKNTHt8teoxHiuT+RJ3xizEHjEGM3P02mOGU7X +S8Kotk1VtVoG2030EctcSn9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUImCFHT3W 0GGR36VzIwKQG8zBn7IwHwYDVR0jBBgwFoAUb3fBnxHTKqqkLiaRb3SC77j5ehww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMTI1L0Y1Rjc4NzhBQ0Mx MDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fxa0xpYVJiM1NDNzdqNWVo dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjNmQm54SFRLcXFrTGlhUmIzU0M3N2o1ZWh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MTI1L0Y1Rjc4NzhBQ0MxMDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fx a0xpYVJiM1NDNzdqNWVody5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJf3WDDwfdEa9relWMdlUuYyB+9zeNRYNihS1VL6on3DtxGSN9g7iipc n5O/DYR3qqbeenmwXHkTAcUZ1EQxEXMqfjjvRLIV3E0vDdwzgzOVPRIzvFJGOsy6 O3aKjI+08fvaghp03oBz8LOGX6caMGEuz/cKz6B4Eo8Gt5jIPP9jj5C4XtSRkg0I buMGIlq5bIw1Kkqz1gB3gQBazH8OMl+ki/wvmMBnJKAUY0THcS25OzBAPRywgNzh LTjMaS8v6WpV9vbKPuspgQsreM/4OhvDpoT0TKXRYWGluFP6m2GRF7q6XzhaKE8i CQI33/8M+Xc9+SWD0uOvJdMx7iYCZ/s= -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:24 2025 by rpki-client