$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: b+7efsM+C+vknfhrqgwwY22ZdZVW8nSzbgr5isfqWF4= Subject key identifier: B5:58:72:8B:29:DD:BF:ED:CD:4A:6C:4E:55:16:D1:FF:A6:BC:C4:B6 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0C87 Signing time: Sun 24 Aug 2025 18:28:39 +0000 Manifest this update: Sun 24 Aug 2025 18:28:38 +0000 Manifest next update: Sun 31 Aug 2025 18:28:38 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: /MQdZ9jwAc/O+aEFmgCJaQ5yTbdt7d/CveRbWtvmAFQ=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Aug 24 18:28:38 2025 GMT Not After : Aug 31 18:28:38 2025 GMT Subject: CN=68ab59d7-fe45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:b3:30:4e:2d:0d:e6:99:69:1d:30:ca:77: 13:5b:83:41:2d:f8:e6:57:bb:fa:84:0c:fb:da:6f: 5c:ab:62:48:32:73:b3:0e:a3:de:67:f3:79:b1:78: d6:1d:7e:69:0f:04:4e:56:c4:77:e7:09:32:d9:99: ad:2e:00:f5:96:3c:d5:16:b9:42:b7:8d:6c:6c:4c: 6e:c1:ca:2b:ff:8c:7e:cf:1c:1a:77:52:21:fc:56: 23:76:b6:03:0f:22:c5:6f:c5:d0:3e:22:df:b9:a7: 04:6b:76:79:b1:67:47:7b:d0:c9:ef:d2:95:ab:5c: 69:f6:af:f2:6d:07:7d:85:f9:b7:a7:73:52:7e:f0: 6c:3c:e1:ed:a3:a5:13:f5:4a:be:79:c6:10:18:f2: 2d:57:16:82:9f:c2:63:05:c1:66:9d:3b:d8:73:55: bc:27:e6:16:18:56:a6:9a:d8:4d:7e:8f:02:6c:43: b9:ec:9f:e9:9e:3f:2f:96:30:9f:1c:e4:c7:68:1b: 87:73:17:72:8a:2b:1d:fd:49:7d:23:ee:c3:b3:f1: f5:c5:e6:ba:9a:ea:b3:58:f1:f5:28:5a:f5:b0:e0: a7:e7:0c:0e:04:a3:44:77:93:c1:b9:4a:0a:af:ed: 3b:62:1c:11:cb:5b:20:6e:aa:84:0b:1b:23:89:b5: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:58:72:8B:29:DD:BF:ED:CD:4A:6C:4E:55:16:D1:FF:A6:BC:C4:B6 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:09:11:81:c1:a8:d0:12:de:9c:5b:ec:3d:6e:7d:d9:84: d9:61:8d:70:f4:81:15:4f:f0:15:e3:49:87:f3:e0:3e:8d:0a: 70:be:78:dc:65:8e:9f:ab:33:01:3d:41:82:fe:d9:d0:0c:57: 55:17:0d:1a:d6:0e:86:70:e2:8a:8e:ec:9e:d3:0b:19:d1:8b: 34:7e:66:b8:46:fb:23:e5:24:18:04:f9:1a:c7:62:57:7b:f3: 32:5c:f1:56:a7:77:05:04:57:c2:1d:d3:31:00:8b:ec:6b:f3: e6:f6:97:98:99:8c:75:0d:ac:c0:91:0a:b1:f9:03:5c:2a:9e: 90:a5:d8:d2:8d:99:06:e3:21:8d:e7:10:17:92:93:c3:d8:29: bc:55:fa:37:df:0e:02:a4:ca:2a:65:4b:dd:a9:61:03:37:b6: 9b:74:8d:2e:dc:66:46:48:f6:e2:51:85:cf:33:52:4e:fc:e0: 74:7d:82:af:79:f3:b3:05:60:ab:7e:69:33:8a:2b:bb:b5:31: 0e:54:fa:c8:af:f0:59:dc:73:f5:1a:83:40:97:9a:21:c5:85: 84:1b:24:b1:ae:49:f7:6e:4f:ad:2e:fd:cb:fa:5b:b4:e7:c8: d5:f5:dc:69:0f:7d:0d:53:79:94:b8:c9:44:bb:ca:c6:42:66: d0:67:55:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjUwODI0MTgyODM4WhcNMjUwODMxMTgyODM4WjAYMRYwFAYD VQQDEw02OGFiNTlkNy1mZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyOzME4tDeaZaR0wyncTW4NBLfjmV7v6hAz72m9cq2JIMnOzDqPeZ/N5sXjW HX5pDwROVsR35wky2ZmtLgD1ljzVFrlCt41sbExuwcor/4x+zxwad1Ih/FYjdrYD DyLFb8XQPiLfuacEa3Z5sWdHe9DJ79KVq1xp9q/ybQd9hfm3p3NSfvBsPOHto6UT 9Uq+ecYQGPItVxaCn8JjBcFmnTvYc1W8J+YWGFammthNfo8CbEO57J/pnj8vljCf HOTHaBuHcxdyiisd/Ul9I+7Ds/H1xea6muqzWPH1KFr1sOCn5wwOBKNEd5PBuUoK r+07YhwRy1sgbqqECxsjibXJewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVYcosp 3b/tzUpsTlUW0f+mvMS2MB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALiAkRgcGo0BLenFvsPW592YTZYY1w9IEVT/AV40mH8+A+jQpwvnjc ZY6fqzMBPUGC/tnQDFdVFw0a1g6GcOKKjuye0wsZ0Ys0fma4Rvsj5SQYBPkax2JX e/MyXPFWp3cFBFfCHdMxAIvsa/Pm9peYmYx1DazAkQqx+QNcKp6QpdjSjZkG4yGN 5xAXkpPD2Cm8Vfo33w4CpMoqZUvdqWEDN7abdI0u3GZGSPbiUYXPM1JO/OB0fYKv efOzBWCrfmkziiu7tTEOVPrIr/BZ3HP1GoNAl5ohxYWEGySxrkn3bk+tLv3L+lu0 58jV9dxpD30NU3mUuMlEu8rGQmbQZ1XQ -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:43 2025 by rpki-client