$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: uPVUZiIQcuQlBYQ4GRaoHcASju7EbunYKKW6SGYTEO8= Subject key identifier: C5:94:47:24:06:E3:65:21:0F:38:4E:FB:94:F6:1F:6A:CC:BA:A9:C6 Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: 95 Signing time: Wed 23 Jul 2025 06:42:45 +0000 Manifest this update: Wed 23 Jul 2025 06:42:44 +0000 Manifest next update: Wed 30 Jul 2025 06:42:44 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: 4aiSmxzeHo8t5LM/AW5UeFF3Ybr1XP4AvAZKn25BqI4=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 06:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Jul 23 06:42:44 2025 GMT Not After : Jul 30 06:42:44 2025 GMT Subject: CN=68808464-3452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:f2:b8:1a:db:f4:15:47:0a:93:6a:e0:9f: c6:6e:be:70:71:e5:60:f1:62:c6:10:82:d9:09:59: 9c:7d:16:1d:6b:e0:a3:38:fd:8a:7a:b7:0f:5e:de: c3:8c:c9:00:07:d4:9d:27:fb:68:82:75:9b:47:dd: 23:b2:ab:74:de:9a:74:b4:28:3b:ec:fe:16:f6:2c: 27:9c:91:cf:2b:40:4d:ec:d2:2c:8b:60:ca:e5:bf: 81:13:8b:57:db:b3:ff:51:ad:7c:fd:76:3f:cf:bf: f0:00:6e:90:35:bf:e6:77:5e:04:13:3f:3e:0b:cf: db:86:cc:4d:28:0b:5b:22:5e:e6:f3:5a:a5:1e:ca: 37:e7:4e:32:e9:96:97:58:12:11:0b:4a:a1:85:b5: db:80:3c:be:6d:4b:7f:98:a1:f3:b6:e8:be:36:16: 4d:cc:5f:fd:f2:40:61:fd:6a:06:2e:ad:a0:2d:3d: d3:fc:1f:ca:80:e8:6e:c7:a6:68:dd:ff:05:95:cd: a6:90:29:ad:94:f9:cc:d8:85:4d:4b:73:2b:81:5d: 91:b4:27:12:52:a3:56:0e:5b:71:73:87:5b:95:1f: 44:b0:5a:a1:11:62:ba:cc:7f:1a:ef:71:74:10:e3: eb:bb:75:f5:b6:43:47:99:d7:78:6a:5f:59:3a:d3: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:47:24:06:E3:65:21:0F:38:4E:FB:94:F6:1F:6A:CC:BA:A9:C6 X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f6:10:fc:3c:a9:1a:dc:3f:6a:43:54:97:04:51:14:ff:35: a1:85:bc:ba:9c:31:45:59:ff:b6:aa:19:83:23:8a:07:29:d1: 3a:37:eb:c7:93:74:42:ec:eb:2a:36:09:0e:b8:c1:bb:0e:26: aa:61:2b:35:25:76:f2:4b:98:e3:84:72:95:27:a3:d0:c9:29: c7:4c:0b:fa:ea:e3:6e:78:d4:67:1c:25:de:10:07:40:e1:df: 1d:62:3b:00:f5:6a:7c:9b:c1:da:70:c9:27:82:fb:59:e6:2c: 43:a5:27:df:13:30:62:8d:d9:8e:e3:a1:ea:6c:09:e0:e1:2c: 41:32:bd:ae:63:b2:d4:b2:03:e5:66:7b:92:6b:9c:4a:9d:d3: c7:74:9d:ae:b3:8c:78:f2:24:78:e6:d2:2e:67:a6:fe:2c:b3: de:a8:d4:0e:ba:2f:fa:01:9c:0b:99:00:be:59:57:7c:48:d1: 5e:ec:f5:58:80:cc:74:a0:dc:ef:ae:b2:d8:d9:2c:d1:d7:48: 8a:90:1e:34:cc:f3:12:33:34:b4:83:f4:d0:fa:31:40:8b:43: 9d:34:15:7b:47:5e:ef:2f:0e:a7:68:d6:02:2b:a3:17:f2:a7: c1:71:5e:0b:d9:5a:92:78:34:66:16:be:ea:43:a9:3f:46:61: bc:06:98:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE QTU2ODdCRjAwHhcNMjUwNzIzMDY0MjQ0WhcNMjUwNzMwMDY0MjQ0WjAYMRYwFAYD VQQDEw02ODgwODQ2NC0zNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLryuBrb9BVHCpNq4J/Gbr5wceVg8WLGEILZCVmcfRYda+CjOP2KercPXt7D jMkAB9SdJ/tognWbR90jsqt03pp0tCg77P4W9iwnnJHPK0BN7NIsi2DK5b+BE4tX 27P/Ua18/XY/z7/wAG6QNb/md14EEz8+C8/bhsxNKAtbIl7m81qlHso3504y6ZaX WBIRC0qhhbXbgDy+bUt/mKHztui+NhZNzF/98kBh/WoGLq2gLT3T/B/KgOhux6Zo 3f8Flc2mkCmtlPnM2IVNS3MrgV2RtCcSUqNWDltxc4dblR9EsFqhEWK6zH8a73F0 EOPru3X1tkNHmdd4al9ZOtMY+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWURyQG 42UhDzhO+5T2H2rMuqnGMB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1 MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn VkdFNkwwS1dld2ZhVm9lX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/9hD8PKka3D9qQ1SXBFEU/zWhhby6nDFFWf+2qhmDI4oHKdE6N+vH k3RC7OsqNgkOuMG7DiaqYSs1JXbyS5jjhHKVJ6PQySnHTAv66uNueNRnHCXeEAdA 4d8dYjsA9Wp8m8HacMkngvtZ5ixDpSffEzBijdmO46HqbAng4SxBMr2uY7LUsgPl ZnuSa5xKndPHdJ2us4x48iR45tIuZ6b+LLPeqNQOui/6AZwLmQC+WVd8SNFe7PVY gMx0oNzvrrLY2SzR10iKkB40zPMSMzS0g/TQ+jFAi0OdNBV7R17vLw6naNYCK6MX 8qfBcV4L2VqSeDRmFr7qQ6k/RmG8Bpjw -----END CERTIFICATE-----Generated at Thu Jul 24 08:31:24 2025 by rpki-client