$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: 5iwLin7fWNoz4tV9f0eOPudi04LtEJx3fEQ3r8xm9G4= Subject key identifier: B3:AC:A9:A2:31:E0:F6:F9:1C:C5:75:FD:44:D3:3C:69:FB:2D:51:20 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 03A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 0396 Signing time: Wed 17 Sep 2025 01:15:14 +0000 Manifest this update: Wed 17 Sep 2025 01:15:14 +0000 Manifest next update: Wed 24 Sep 2025 01:15:14 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: jA3yIe5tjRrH087ZhlYmfTTvQ4nIkVYb/L/Nk2cYVu0=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Sep 17 01:15:14 2025 GMT Not After : Sep 24 01:15:14 2025 GMT Subject: CN=68ca0ba2-b8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:32:ed:a2:73:27:29:ae:75:ca:99:a4:cf: a3:22:59:2f:47:25:98:ae:98:28:b2:69:4b:14:e5: 11:fc:83:42:f0:97:81:05:07:a0:8c:1b:85:b9:a1: 08:63:8b:a8:79:fd:ed:f3:f8:fa:43:1f:ee:0d:1e: d0:59:0a:4b:c0:2d:75:6c:3d:97:46:f6:6f:24:d5: cb:84:93:51:d8:7a:cd:5c:0d:07:44:0e:82:45:da: 0e:41:ce:ad:69:ba:8e:30:85:ec:6a:b1:40:88:61: 59:10:32:f6:b4:a1:78:8b:d6:6d:01:69:5e:ea:ea: 2b:e1:64:3c:a0:cb:73:3f:f7:b3:ab:74:cc:80:d4: a1:17:32:12:90:f2:f7:14:50:44:c6:44:62:27:88: 34:0f:72:56:9c:79:44:a7:81:de:cd:b5:63:7d:69: 01:c3:d2:5b:46:e9:4d:0a:72:3a:cf:50:c8:d7:88: 63:0b:0d:68:32:91:c9:b1:19:55:07:de:09:76:01: 6d:3c:49:db:2d:59:e1:7a:06:c4:6a:f8:68:50:3a: 23:2d:bc:66:87:97:4a:c0:f4:70:84:9b:dc:29:aa: 61:14:a2:9a:a5:d5:c6:66:50:3f:1b:bc:e3:27:64: 8d:d1:cc:b7:f4:c4:1d:cd:1d:7b:8c:5d:5c:26:ca: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AC:A9:A2:31:E0:F6:F9:1C:C5:75:FD:44:D3:3C:69:FB:2D:51:20 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ce:e0:5e:30:87:94:5c:72:99:f7:94:fc:57:29:ef:b5:a1: 55:3e:33:d5:eb:17:20:15:7b:04:50:41:a0:6a:b1:f5:e1:f8: d9:41:f9:67:47:23:24:c0:d4:3b:a9:b7:f6:42:06:dc:d5:31: 84:ba:85:a7:c9:56:3f:b2:b5:07:93:6a:74:b2:6d:5a:80:a8: f9:c1:d2:8b:3e:91:0d:1e:b0:cc:8d:5f:6a:08:6c:23:2b:67: d2:93:b9:2e:7b:48:74:34:54:ca:f8:23:99:1c:c9:6e:b4:22: 5b:71:ad:6c:e5:bb:40:c5:6d:77:93:c7:f0:f2:fc:ca:7d:9e: d3:56:ff:fa:d1:7f:e5:94:c2:a3:6d:5f:57:e7:fd:f9:06:09: a9:53:4c:b3:b4:80:24:cd:55:2b:b5:4e:ac:1e:6e:1d:9e:de: b7:a2:89:3e:93:4b:71:d1:03:95:61:0d:90:60:f1:7b:26:d7: 5d:51:be:78:7b:ce:64:a7:b5:b1:fd:80:d1:4a:3f:20:b8:f0: 77:28:f9:7c:05:c6:b9:a6:3a:ce:e9:3f:dd:55:0a:46:55:1c: 50:0d:82:af:07:71:7c:7c:9d:27:11:e1:89:15:91:10:27:ac: c1:69:73:58:35:ce:a5:09:ee:82:22:5c:d7:d6:4e:3e:35:ca: 31:d5:10:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUwOTE3MDExNTE0WhcNMjUwOTI0MDExNTE0WjAYMRYwFAYD VQQDEw02OGNhMGJhMi1iOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2sy7aJzJymudcqZpM+jIlkvRyWYrpgosmlLFOUR/INC8JeBBQegjBuFuaEI Y4uoef3t8/j6Qx/uDR7QWQpLwC11bD2XRvZvJNXLhJNR2HrNXA0HRA6CRdoOQc6t abqOMIXsarFAiGFZEDL2tKF4i9ZtAWle6uor4WQ8oMtzP/ezq3TMgNShFzISkPL3 FFBExkRiJ4g0D3JWnHlEp4HezbVjfWkBw9JbRulNCnI6z1DI14hjCw1oMpHJsRlV B94JdgFtPEnbLVnhegbEavhoUDojLbxmh5dKwPRwhJvcKaphFKKapdXGZlA/G7zj J2SN0cy39MQdzR17jF1cJsqZOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOsqaIx 4Pb5HMV1/UTTPGn7LVEgMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCzuBeMIeUXHKZ95T8VynvtaFVPjPV6xcgFXsEUEGgarH14fjZQfln RyMkwNQ7qbf2Qgbc1TGEuoWnyVY/srUHk2p0sm1agKj5wdKLPpENHrDMjV9qCGwj K2fSk7kue0h0NFTK+COZHMlutCJbca1s5btAxW13k8fw8vzKfZ7TVv/60X/llMKj bV9X5/35BgmpU0yztIAkzVUrtU6sHm4dnt63ook+k0tx0QOVYQ2QYPF7JtddUb54 e85kp7Wx/YDRSj8guPB3KPl8Bca5pjrO6T/dVQpGVRxQDYKvB3F8fJ0nEeGJFZEQ J6zBaXNYNc6lCe6CIlzX1k4+Ncox1RB8 -----END CERTIFICATE-----Generated at Fri Sep 19 00:09:29 2025 by rpki-client