$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: 4/RWHeERQ1ZcuSNQob6yFVy3Aulk1zuVDvccga6Rq6I= Subject key identifier: 7C:85:57:90:C6:2C:36:79:99:11:72:53:CC:C3:00:F8:4C:81:DF:90 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 1659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 1643 Signing time: Sun 24 Aug 2025 16:43:43 +0000 Manifest this update: Sun 24 Aug 2025 16:43:43 +0000 Manifest next update: Sun 31 Aug 2025 16:43:43 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: Vl0GsJPrWXZ6jUMuvLYhMPe0CHkvv+LVs4ixVvYCPqk=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5721 (0x1659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Aug 24 16:43:43 2025 GMT Not After : Aug 31 16:43:43 2025 GMT Subject: CN=68ab413f-9426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:3c:08:e9:86:7c:65:a3:08:9e:76:37:c0: 15:9e:05:df:93:53:b5:93:00:1e:b5:74:be:40:62: 0a:21:37:5e:8a:5a:62:32:a1:c3:e1:b6:9f:7f:5e: d4:2b:81:3c:da:ab:ff:12:57:a2:fd:af:5f:09:7d: f1:2d:8b:16:ea:d3:dd:27:8f:3f:56:25:8f:b3:9b: c2:2c:d0:30:b0:31:8c:df:c3:db:d3:10:58:ef:94: df:82:25:da:87:96:4f:76:7a:9d:20:6c:aa:0f:d8: f6:46:20:9a:70:fe:57:be:58:e9:82:e9:cd:a3:f2: 23:8c:d4:dc:1f:e0:fd:e1:3d:a0:c7:58:21:72:0a: e6:c3:0c:af:8d:e7:cf:19:c9:5f:ea:db:82:e4:c8: 77:81:ac:98:26:59:83:b7:7b:69:8e:18:6e:eb:57: 1f:61:c5:1e:5a:57:84:24:14:37:0f:21:ac:e2:4b: 09:43:38:d7:d5:4a:c8:cf:33:77:42:f3:ca:93:b1: 1b:55:6b:5c:02:c5:d1:03:32:18:7a:97:eb:40:8d: ad:5d:2a:8d:ec:0a:43:95:c8:cc:2c:61:e9:c7:3a: ff:44:79:00:29:e7:e7:41:71:fe:cf:17:7b:a0:5d: 90:e5:92:a2:d5:f7:26:be:24:ca:15:24:90:2e:54: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:85:57:90:C6:2C:36:79:99:11:72:53:CC:C3:00:F8:4C:81:DF:90 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:cb:3f:6f:6b:e3:c9:db:a6:c8:43:02:19:30:bf:0d:6e:8d: e3:44:1b:8b:af:6c:40:00:d9:5c:83:ee:df:69:22:0b:23:47: d8:a5:aa:51:44:c8:32:6d:07:27:d8:85:8f:31:41:55:7e:1b: 88:e6:ab:af:89:9a:b7:4a:48:4b:07:71:01:c0:4d:8a:38:3e: 19:4f:d8:89:d8:fc:e2:8b:c7:b4:28:e8:b3:58:2e:d8:8f:5d: e0:32:6b:1c:fc:cf:49:ed:69:38:81:13:b0:52:06:32:52:7c: 48:81:9b:01:29:91:aa:10:10:87:59:da:5b:90:97:c8:d6:61: 6d:88:19:7f:f9:b6:19:1e:e6:cb:66:b7:c7:7c:99:52:ec:72: c4:7c:80:d6:a8:9d:85:8d:05:4a:64:4a:f0:3b:a0:45:68:76: 36:d7:37:ab:fe:cf:98:de:18:9d:e4:cc:e2:3a:1f:be:05:f1: 70:f5:fc:e8:75:d2:c3:16:03:20:c8:bb:40:a4:ed:a2:1d:3b: 0c:72:a5:53:ea:73:2e:0f:3a:67:25:49:09:60:a2:28:61:03: 70:7b:8f:63:50:b0:96:78:7e:8e:aa:58:eb:4a:95:bd:aa:1b: ae:5b:63:52:c2:89:7b:fd:da:e2:14:c5:2f:27:f0:26:38:5f: 24:84:0c:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUwODI0MTY0MzQzWhcNMjUwODMxMTY0MzQzWjAYMRYwFAYD VQQDEw02OGFiNDEzZi05NDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0k8COmGfGWjCJ52N8AVngXfk1O1kwAetXS+QGIKITdeilpiMqHD4baff17U K4E82qv/Elei/a9fCX3xLYsW6tPdJ48/ViWPs5vCLNAwsDGM38Pb0xBY75TfgiXa h5ZPdnqdIGyqD9j2RiCacP5XvljpgunNo/IjjNTcH+D94T2gx1ghcgrmwwyvjefP Gclf6tuC5Mh3gayYJlmDt3tpjhhu61cfYcUeWleEJBQ3DyGs4ksJQzjX1UrIzzN3 QvPKk7EbVWtcAsXRAzIYepfrQI2tXSqN7ApDlcjMLGHpxzr/RHkAKefnQXH+zxd7 oF2Q5ZKi1fcmviTKFSSQLlSMjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyFV5DG LDZ5mRFyU8zDAPhMgd+QMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxyz9va+PJ26bIQwIZML8Nbo3jRBuLr2xAANlcg+7faSILI0fYpapR RMgybQcn2IWPMUFVfhuI5quviZq3SkhLB3EBwE2KOD4ZT9iJ2Pzii8e0KOizWC7Y j13gMmsc/M9J7Wk4gROwUgYyUnxIgZsBKZGqEBCHWdpbkJfI1mFtiBl/+bYZHubL ZrfHfJlS7HLEfIDWqJ2FjQVKZErwO6BFaHY21zer/s+Y3hid5MziOh++BfFw9fzo ddLDFgMgyLtApO2iHTsMcqVT6nMuDzpnJUkJYKIoYQNwe49jULCWeH6OqljrSpW9 qhuuW2NSwol7/driFMUvJ/AmOF8khAw5 -----END CERTIFICATE-----Generated at Sun Aug 24 21:29:10 2025 by rpki-client