$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json) Hash identifier: gJpTDQukNv0qw3oDVY3qnd5J5wiT0LL6R2jnfh/lUYc= Subject key identifier: AF:79:72:BB:7B:8B:3B:D9:43:3C:73:DE:8A:B0:6A:D3:38:80:28:41 Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft Manifest number: 06AC Signing time: Thu 18 Sep 2025 22:33:42 +0000 Manifest this update: Thu 18 Sep 2025 22:33:42 +0000 Manifest next update: Thu 25 Sep 2025 22:33:42 +0000 Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: GoLWQywCKpZZX2IxNkDJD2N2NriNBqb8z+yzZ9RK6kE=) 2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: FOS9hpfhSMJ/5W+e+NFkrecUhC86TAOPH0uxsIPYP4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Validity Not Before: Sep 18 22:33:42 2025 GMT Not After : Sep 25 22:33:42 2025 GMT Subject: CN=68cc88c6-f2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1d:da:16:94:ca:2e:7c:fd:50:c4:f7:ce:e4: 37:57:4c:7a:1f:28:8f:7f:0d:e7:8a:6e:c8:a2:32: 2e:af:af:06:c5:94:d0:82:4a:76:5d:10:2f:e3:f6: ba:aa:c0:be:b1:cd:61:53:31:37:6c:bc:c7:ed:88: ba:b7:c3:c0:62:4b:96:34:9d:d8:61:8a:6d:b8:6b: a7:75:f5:42:9c:01:6b:85:8f:22:80:8f:0e:42:6f: 16:a6:10:15:30:c9:a2:ab:de:84:32:5c:51:a9:92: d3:21:b8:66:5c:b7:32:0a:7e:8a:bd:af:c2:89:bc: 8e:90:0a:b0:bc:38:b1:27:ff:dd:6b:39:18:ed:1d: c0:5c:d9:8b:d4:3b:29:2e:98:9a:a4:9d:4e:d4:4f: 4c:4e:d8:23:1a:d1:da:3d:04:38:d4:80:ce:69:9d: 24:77:53:0d:1f:eb:bb:8e:6c:11:c9:6a:bf:12:2f: 7e:1a:de:91:7b:68:a0:ab:73:27:b4:9d:e8:b3:26: 2a:a8:25:a6:5d:85:25:21:c7:be:8f:d8:3b:d7:09: e1:9c:18:f9:65:82:38:86:7b:cb:6d:b9:95:01:0b: 08:4e:bc:f3:cf:c3:d2:63:82:cf:b1:94:c3:3c:11: 2b:a4:9e:5c:de:17:f7:48:a6:31:1c:4e:f2:a7:5d: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:79:72:BB:7B:8B:3B:D9:43:3C:73:DE:8A:B0:6A:D3:38:80:28:41 X509v3 Authority Key Identifier: keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cb:8b:27:6c:03:90:eb:71:77:10:bb:81:43:04:4d:e1:2c: 04:d9:72:40:ab:95:7f:60:be:40:ee:c7:93:9d:c4:64:ba:09: 88:b8:43:fc:b1:9c:a4:7b:f0:2d:fd:52:05:f1:f4:a4:bb:75: 55:a5:1d:7a:15:fa:7b:9b:3e:84:d0:e8:18:78:ca:67:01:ca: 91:b3:e2:8e:ca:c4:8d:b9:de:ab:6f:3d:37:4b:62:90:5f:d5: a3:cc:e2:05:6f:f2:9b:f1:d3:30:77:ec:95:1d:b6:37:02:4d: 23:a6:91:c5:84:85:d8:22:92:e0:8f:b3:1c:40:f0:7e:e6:48: ac:89:ba:ab:ee:e1:ea:9a:9d:9d:38:9c:82:ff:fd:39:35:9c: 3e:73:92:11:78:e4:6b:f1:9e:ab:85:c3:ce:e2:64:51:d9:f8: 29:9f:b5:fb:da:26:a6:12:7f:a7:0c:df:e4:1f:c3:f1:55:d6: d5:f5:ed:8c:93:f3:5a:29:8f:dd:d2:b0:35:4f:68:83:44:23: 30:80:c4:52:79:8a:e1:3e:39:02:0c:a5:53:46:29:47:9d:00: 75:5f:37:e3:0e:fe:53:50:4c:6f:dc:a8:91:04:bc:41:1d:e2: af:03:71:4e:ce:38:40:42:7b:6f:f8:51:27:51:87:a9:07:83: 27:06:58:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5 NTZBN0Q5RTMwHhcNMjUwOTE4MjIzMzQyWhcNMjUwOTI1MjIzMzQyWjAYMRYwFAYD VQQDEw02OGNjODhjNi1mMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5h3aFpTKLnz9UMT3zuQ3V0x6HyiPfw3nim7IojIur68GxZTQgkp2XRAv4/a6 qsC+sc1hUzE3bLzH7Yi6t8PAYkuWNJ3YYYptuGundfVCnAFrhY8igI8OQm8WphAV MMmiq96EMlxRqZLTIbhmXLcyCn6Kva/CibyOkAqwvDixJ//dazkY7R3AXNmL1Dsp LpiapJ1O1E9MTtgjGtHaPQQ41IDOaZ0kd1MNH+u7jmwRyWq/Ei9+Gt6Re2igq3Mn tJ3osyYqqCWmXYUlIce+j9g71wnhnBj5ZYI4hnvLbbmVAQsITrzzz8PSY4LPsZTD PBErpJ5c3hf3SKYxHE7yp10NEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK95crt7 izvZQzxz3oqwatM4gChBMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1 dkg3UFo1czdMVHlWYW4yZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCby4snbAOQ63F3ELuBQwRN4SwE2XJAq5V/YL5A7seTncRkugmIuEP8 sZyke/At/VIF8fSku3VVpR16Ffp7mz6E0OgYeMpnAcqRs+KOysSNud6rbz03S2KQ X9WjzOIFb/Kb8dMwd+yVHbY3Ak0jppHFhIXYIpLgj7McQPB+5kisibqr7uHqmp2d OJyC//05NZw+c5IReORr8Z6rhcPO4mRR2fgpn7X72iamEn+nDN/kH8PxVdbV9e2M k/NaKY/d0rA1T2iDRCMwgMRSeYrhPjkCDKVTRilHnQB1XzfjDv5TUExv3KiRBLxB HeKvA3FOzjhAQntv+FEnUYepB4MnBliu -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:48 2025 by rpki-client