$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json) Hash identifier: pYGbNAI3lqSj9waSWwUgdjbES4ZqD6fZME42sdeqkV8= Subject key identifier: E3:FD:14:29:9A:7D:AB:99:76:86:4F:AE:DA:3F:DD:52:26:03:19:1C Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft Manifest number: 77 Signing time: Fri 05 Sep 2025 07:17:34 +0000 Manifest this update: Fri 05 Sep 2025 07:17:33 +0000 Manifest next update: Fri 12 Sep 2025 07:17:33 +0000 Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: xHWn2sB4cGKgrZhSoAjtlk6wKhRidBBZ7AW3NmG4T2w=) 2: BE052770702E11F0A0DEEA12C4F9AE02.roa (hash: OHC1Lai90kPZXbPjZNHQeH48NvGag/35uNyXO/kBwSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Validity Not Before: Sep 5 07:17:33 2025 GMT Not After : Sep 12 07:17:33 2025 GMT Subject: CN=68ba8e8e-b1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3a:99:12:7c:ef:f5:23:63:e0:c3:7f:8f:08: 48:4f:ee:8a:8a:5d:8c:34:ae:9a:5f:4a:75:80:17: b8:bf:36:ff:ee:c1:dd:cb:c1:f5:cb:c4:0e:94:69: 24:33:d2:c2:5d:93:b5:65:1e:99:f8:d1:33:46:00: f3:4d:1c:9a:b4:7f:63:c0:51:91:56:62:04:59:79: 51:9d:01:dd:30:25:8a:d6:e2:9d:82:14:1e:cd:2a: dd:f7:cb:55:be:f7:9b:a8:6a:86:92:27:ea:68:e0: af:8d:9d:c9:7c:36:d6:33:0a:e9:f7:81:7e:88:e2: 9d:c4:0a:7e:de:3f:56:ec:0c:67:77:fe:c5:91:48: e4:07:36:15:21:0b:74:88:c8:5f:23:08:72:3c:62: 60:71:96:c8:5f:2a:69:30:61:19:35:0d:61:76:b9: e1:14:4b:d7:a2:46:76:2d:31:7e:fc:9b:71:43:17: 1f:70:47:86:20:cb:e3:ef:46:9b:ff:1c:8c:53:3d: be:bd:89:8d:e0:c2:90:38:af:a5:e3:11:81:52:e8: bc:5f:1b:a5:8d:72:83:fd:0f:36:83:93:6b:de:03: 42:ed:b7:be:5e:41:c7:91:b5:1b:60:b0:ea:08:5f: 49:12:bc:36:59:92:95:94:02:ac:d1:68:c2:6f:0c: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FD:14:29:9A:7D:AB:99:76:86:4F:AE:DA:3F:DD:52:26:03:19:1C X509v3 Authority Key Identifier: keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:92:42:85:ec:ca:3a:28:d6:2b:4d:b0:80:75:78:01:eb:7e: 87:0c:53:ab:c7:fa:69:9b:33:84:e6:6f:27:82:c0:35:95:c8: 44:4d:3e:f5:cf:6d:0b:ca:47:71:51:c7:97:94:12:f6:51:e1: 8e:99:33:44:e3:84:46:45:17:79:10:43:fc:75:02:61:71:1a: a0:ca:65:e7:8f:05:20:a1:0a:b0:66:fe:25:b9:ee:e9:a1:88: 91:50:3c:cf:eb:da:a0:ed:b9:c5:a0:f5:3a:c6:f9:b6:cc:d9: 53:ef:ae:02:cc:93:80:ab:4c:ad:6d:d3:b3:06:86:25:dd:4f: 27:64:1e:4e:52:6a:23:af:08:98:55:0f:39:39:36:4d:d2:94: 48:0f:01:0b:2c:fd:61:0b:78:b3:98:d7:0c:6a:8f:67:27:4b: 92:f8:c6:89:19:ee:61:fc:93:6e:84:2f:63:71:92:87:19:71: ef:41:a2:63:e9:d8:1a:fc:9d:c4:4e:89:88:4a:e3:11:6c:80: d4:92:91:f6:b2:65:9a:fb:07:43:19:45:48:80:e9:b1:7e:53: 9c:8d:93:ec:29:ba:79:8e:cc:7b:94:15:4c:d0:47:dd:20:86: d7:77:9a:41:56:52:73:e5:65:80:7d:8b:88:6e:60:06:ab:65: 10:5e:0e:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkREOTExMC8GA1UEBRMoMDM3ODhFRTJCQUU0RDgwNUVCQ0RDQTY2MThFMkVDMUEx OEE1QzRFMjAeFw0yNTA5MDUwNzE3MzNaFw0yNTA5MTIwNzE3MzNaMBgxFjAUBgNV BAMTDTY4YmE4ZThlLWIxYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjOpkSfO/1I2Pgw3+PCEhP7oqKXYw0rppfSnWAF7i/Nv/uwd3LwfXLxA6UaSQz 0sJdk7VlHpn40TNGAPNNHJq0f2PAUZFWYgRZeVGdAd0wJYrW4p2CFB7NKt33y1W+ 95uoaoaSJ+po4K+Nncl8NtYzCun3gX6I4p3ECn7eP1bsDGd3/sWRSOQHNhUhC3SI yF8jCHI8YmBxlshfKmkwYRk1DWF2ueEUS9eiRnYtMX78m3FDFx9wR4Ygy+PvRpv/ HIxTPb69iY3gwpA4r6XjEYFS6LxfG6WNcoP9DzaDk2veA0Ltt75eQceRtRtgsOoI X0kSvDZZkpWUAqzRaMJvDKZxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4/0UKZp9 q5l2hk+u2j/dUiYDGRwwHwYDVR0jBBgwFoAUA3iO4rrk2AXrzcpmGOLsGhilxOIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREQ5L0JFN0NBQzEyRDZE RTExRUZCMDQ3NEUxQkM0RjlBRTAyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhP SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTNpTzRycmsyQVhyemNwbUdPTHNHaGlseE9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REQ5L0JFN0NBQzEyRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyL0EzaU80cnJrMkFY cnpjcG1HT0xzR2hpbHhPSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJeSQoXsyjoo1itNsIB1eAHrfocMU6vH+mmbM4TmbyeCwDWVyERNPvXP bQvKR3FRx5eUEvZR4Y6ZM0TjhEZFF3kQQ/x1AmFxGqDKZeePBSChCrBm/iW57umh iJFQPM/r2qDtucWg9TrG+bbM2VPvrgLMk4CrTK1t07MGhiXdTydkHk5SaiOvCJhV Dzk5Nk3SlEgPAQss/WELeLOY1wxqj2cnS5L4xokZ7mH8k26EL2NxkocZce9BomPp 2Br8ncROiYhK4xFsgNSSkfayZZr7B0MZRUiA6bF+U5yNk+wpunmOzHuUFUzQR90g htd3mkFWUnPlZYB9i4huYAarZRBeDik= -----END CERTIFICATE-----Generated at Sat Sep 6 14:42:08 2025 by rpki-client