$ rpki-client -vvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft File: 3Bh_yEFs5bNHuvIho2E6O0eCjog.mft (raw, json) Hash identifier: 72G1MXGu31VgNr0OZLcoywC+t4x+r3GmC5oRvns4HvM= Subject key identifier: AD:65:57:A9:BE:B7:86:FA:5B:9B:76:A0:C8:88:77:EB:45:77:4A:6F Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0F21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft Manifest number: 0F13 Signing time: Thu 18 Sep 2025 17:47:16 +0000 Manifest this update: Thu 18 Sep 2025 17:47:15 +0000 Manifest next update: Thu 25 Sep 2025 17:47:15 +0000 Files and hashes: 1: 3Bh_yEFs5bNHuvIho2E6O0eCjog.crl (hash: 0TtL86VJ3VVq9vtXNZwKcicWcDkGCbmNZTMNQxRfFpg=) 2: 085B4576C35711EC9F5ADC3DC4F9AE02.roa (hash: LJ768Cu3JxipfpTsVr1alEqz1iSEePAZhcCKQ/8p8EU=) 3: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (hash: 6UUZGVX+yz33BPFW9zj9LAK08O51N58DNxWBC06Z/8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3873 (0xf21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Sep 18 17:47:15 2025 GMT Not After : Sep 25 17:47:15 2025 GMT Subject: CN=68cc45a4-7668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:01:4c:21:3f:38:a2:83:14:a8:73:fa:42: 21:cb:17:14:dd:8b:b2:16:53:50:59:c9:e9:c8:82: 5c:ae:63:69:0a:5e:1c:9f:d1:50:1f:0e:da:c8:ab: c2:0a:b9:ac:8e:0c:67:2d:4e:74:90:b0:0b:72:7c: 0a:18:4b:45:11:73:52:a4:f0:2a:62:c0:cf:ee:83: f7:3f:9e:ee:ed:3d:ac:5b:b0:3a:e5:3a:00:c4:bb: 88:79:0d:e4:e2:08:40:c4:68:aa:15:64:ce:08:7e: 63:7e:1a:53:2d:41:69:9c:08:72:af:7d:1b:9e:13: 33:4c:72:b0:9f:2b:56:6c:f5:bc:a8:fa:27:f4:98: 68:3a:79:03:47:a6:b4:1c:40:ca:e2:8a:0b:b0:dc: f9:40:8c:d3:16:75:cd:73:f4:91:8f:53:03:f5:73: 1e:52:1d:ad:44:78:29:16:c1:ec:19:d7:13:3d:7a: 85:c9:56:b5:d6:ae:db:29:34:f2:75:74:bb:ea:90: 44:25:ae:65:83:94:37:0a:26:5b:b8:0e:55:13:a4: 88:9b:f2:3b:05:62:6c:d3:60:ab:8e:5d:84:4f:9d: 3a:f7:da:d5:87:01:55:60:41:5a:2c:9c:99:3e:82: 2b:ea:a3:02:20:5c:80:10:02:02:b3:74:df:df:5b: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:65:57:A9:BE:B7:86:FA:5B:9B:76:A0:C8:88:77:EB:45:77:4A:6F X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4d:c8:3d:b0:10:5e:82:41:7b:0a:e1:1f:94:16:c9:7f:64: bb:ba:5b:fb:7d:30:64:f2:ac:31:f9:5a:a0:ba:3d:b1:69:db: 88:6f:2b:86:d8:71:9a:70:ef:32:17:37:d8:a9:18:97:c0:ff: 5c:f2:d6:3e:12:7c:c4:a5:c6:af:18:21:29:70:46:97:29:52: 6d:f4:2d:16:d5:62:60:9b:4d:44:3e:ba:09:e3:b4:92:3a:02: 52:61:77:d9:07:93:56:78:50:d6:03:87:5d:64:40:b9:fa:22: b9:48:9f:81:7b:da:47:de:30:d6:6f:16:16:05:1d:b6:16:19: 6e:c9:6a:21:44:97:24:30:d9:12:56:ef:a9:5f:51:85:2b:95: c4:3f:dc:38:bc:88:f7:41:8c:55:34:1d:10:61:9e:4b:e3:1a: 7f:44:ee:b8:a3:44:bd:1c:a8:5f:96:9d:b8:03:03:57:8e:fd: 13:bc:84:00:b7:27:2d:27:5a:5a:29:17:51:71:9d:29:a6:74: 92:49:47:bf:5b:93:f8:fd:4d:00:8a:9a:8c:77:ec:dc:50:d7: d2:7d:0c:9c:97:ff:ea:f4:d1:41:15:c6:8f:e8:df:90:b7:8e: 2c:7e:55:08:df:99:63:f5:26:0a:f7:28:5c:84:75:50:e0:84: 42:f5:4c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjUwOTE4MTc0NzE1WhcNMjUwOTI1MTc0NzE1WjAYMRYwFAYD VQQDEw02OGNjNDVhNC03NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAoBTCE/OKKDFKhz+kIhyxcU3YuyFlNQWcnpyIJcrmNpCl4cn9FQHw7ayKvC CrmsjgxnLU50kLALcnwKGEtFEXNSpPAqYsDP7oP3P57u7T2sW7A65ToAxLuIeQ3k 4ghAxGiqFWTOCH5jfhpTLUFpnAhyr30bnhMzTHKwnytWbPW8qPon9JhoOnkDR6a0 HEDK4ooLsNz5QIzTFnXNc/SRj1MD9XMeUh2tRHgpFsHsGdcTPXqFyVa11q7bKTTy dXS76pBEJa5lg5Q3CiZbuA5VE6SIm/I7BWJs02Crjl2ET50699rVhwFVYEFaLJyZ PoIr6qMCIFyAEAICs3Tf31u3MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1lV6m+ t4b6W5t2oMiId+tFd0pvMB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdEMS85QTlCNDhBMjgyQTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczVi Tkh1dklobzJFNk8wZUNqb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgTcg9sBBegkF7CuEflBbJf2S7ulv7fTBk8qwx+Vqguj2xaduIbyuG 2HGacO8yFzfYqRiXwP9c8tY+EnzEpcavGCEpcEaXKVJt9C0W1WJgm01EProJ47SS OgJSYXfZB5NWeFDWA4ddZEC5+iK5SJ+Be9pH3jDWbxYWBR22FhluyWohRJckMNkS Vu+pX1GFK5XEP9w4vIj3QYxVNB0QYZ5L4xp/RO64o0S9HKhflp24AwNXjv0TvIQA tyctJ1paKRdRcZ0ppnSSSUe/W5P4/U0AipqMd+zcUNfSfQycl//q9NFBFcaP6N+Q t44sflUI35lj9SYK9yhchHVQ4IRC9UwI -----END CERTIFICATE-----Generated at Fri Sep 19 05:15:17 2025 by rpki-client