$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json) Hash identifier: Gk/++mBBgVPUaxCkvk87/jplaDVFJR0VsNH4l8Bc9FA= Subject key identifier: 70:08:6F:F0:45:80:AB:56:11:30:21:CC:1A:28:D3:3D:17:14:24:07 Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft Manifest number: 2E Signing time: Wed 17 Sep 2025 08:38:16 +0000 Manifest this update: Wed 17 Sep 2025 08:38:15 +0000 Manifest next update: Wed 24 Sep 2025 08:38:15 +0000 Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: wcRRENkvdUx3pLcr5bdven4aLFE6lxBIJD6e3k1y4DE=) 2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: CSetpI3z0nRywdagrYhbtYI0LFEAfY7qgb1M0CIYRF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Sep 17 08:38:15 2025 GMT Not After : Sep 24 08:38:15 2025 GMT Subject: CN=68ca7377-c2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:ef:ba:f6:e5:3b:ae:56:53:01:af:c5:7f: ce:e6:1e:75:83:e8:6c:ee:ff:f5:c9:b2:be:4e:c0: 86:eb:ce:97:8a:5c:34:f5:c9:88:0b:10:e0:79:62: 03:50:8b:e6:c8:bc:43:ff:6d:1c:0a:ea:a6:62:c9: 3c:44:8e:79:b9:49:5f:ee:af:a3:40:41:92:9a:af: e9:c0:af:4c:38:4b:5e:1e:02:53:cb:b5:ad:28:f9: ea:3b:41:e0:aa:69:c6:70:a1:e5:9f:d6:ab:c2:39: b7:48:54:09:28:a9:f8:fc:94:3f:de:8c:ae:16:9e: 94:1e:61:16:5e:8f:06:d5:50:bd:e8:f0:3f:1e:71: 27:85:6f:df:e0:dc:56:2f:23:aa:11:5e:7d:df:51: a7:e0:af:f8:36:9a:de:58:e8:50:08:20:01:e2:cf: 4d:cf:a9:7c:96:cc:00:c0:a1:d7:ef:b1:55:d4:3b: b2:0b:5e:a3:e9:07:91:ce:40:26:ad:23:11:27:98: 19:ec:6f:1f:73:c9:c8:d9:d7:db:9c:3e:06:df:de: d0:74:1f:d3:f6:0d:ab:3f:4a:f1:b7:88:c7:be:1d: aa:91:41:64:31:80:66:27:eb:54:cc:0a:5e:c8:19: 00:92:7d:5e:cb:3a:bf:f7:ee:b5:5f:d5:1e:fd:f3: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:08:6F:F0:45:80:AB:56:11:30:21:CC:1A:28:D3:3D:17:14:24:07 X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:88:95:2e:ec:12:a9:6d:7d:74:3c:3f:0d:85:50:e5:f6:a5: d2:bf:81:2c:5f:41:97:33:e5:1d:5c:76:43:68:1b:3f:9a:3a: 81:0d:59:8d:5c:2e:52:68:4c:d8:b4:bc:f5:2f:4c:a9:0a:27: 32:d8:08:d4:b5:30:80:41:7e:56:68:89:35:81:76:b8:ac:7c: 23:93:a7:33:78:a5:14:80:8e:87:86:a1:18:cc:c2:3d:6f:c3: 3e:5b:da:14:57:28:6a:fa:ba:4c:a7:91:02:ae:4d:bc:01:8b: 75:b5:2e:b5:43:7c:cd:43:b1:a1:6c:eb:71:3e:9e:d1:fe:f3: 47:82:df:4c:a2:37:ec:2b:87:39:f2:75:4d:80:36:d8:aa:83: 45:0e:b9:72:a1:dd:83:10:6a:97:8f:ca:da:18:05:b6:41:e2: 5a:07:50:88:fb:cc:3b:c5:0b:a3:22:5f:22:6d:36:a7:bb:bf: 85:b3:90:e6:86:f4:dd:6d:14:ea:d6:b9:b9:8e:8c:ba:f7:1c: 02:ab:7d:af:cb:dc:5b:04:ee:71:20:b8:85:7d:ef:6b:a5:67: ed:d3:41:4a:ec:84:9a:47:8e:d7:23:96:b9:8a:9b:3b:f7:35: 97:1b:a5:c1:ac:6b:3e:42:e8:5c:8d:0a:7d:bf:74:13:42:21: 04:a9:45:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRBNjExMC8GA1UEBRMoNzM3NTgyRUM0RThGRTM5REY0MkMwREMyMjlCQTM3RDFC NkIzODY1QTAeFw0yNTA5MTcwODM4MTVaFw0yNTA5MjQwODM4MTVaMBgxFjAUBgNV BAMTDTY4Y2E3Mzc3LWMyZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCok++69uU7rlZTAa/Ff87mHnWD6Gzu//XJsr5OwIbrzpeKXDT1yYgLEOB5YgNQ i+bIvEP/bRwK6qZiyTxEjnm5SV/ur6NAQZKar+nAr0w4S14eAlPLta0o+eo7QeCq acZwoeWf1qvCObdIVAkoqfj8lD/ejK4WnpQeYRZejwbVUL3o8D8ecSeFb9/g3FYv I6oRXn3fUafgr/g2mt5Y6FAIIAHiz03PqXyWzADAodfvsVXUO7ILXqPpB5HOQCat IxEnmBnsbx9zycjZ19ucPgbf3tB0H9P2Das/SvG3iMe+HaqRQWQxgGYn61TMCl7I GQCSfV7LOr/37rVf1R7982GdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcAhv8EWA q1YRMCHMGijTPRcUJAcwHwYDVR0jBBgwFoAUc3WC7E6P4530LA3CKbo30bazhlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEE2LzNCNjdBRDhFNjNC NzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzNXQzdFNlA0NTMwTEEzQ0tibzMwYmF6aGxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NEE2LzNCNjdBRDhFNjNCNzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUz MExBM0NLYm8zMGJhemhsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD6IlS7sEqltfXQ8Pw2FUOX2pdK/gSxfQZcz5R1cdkNoGz+aOoENWY1c LlJoTNi0vPUvTKkKJzLYCNS1MIBBflZoiTWBdrisfCOTpzN4pRSAjoeGoRjMwj1v wz5b2hRXKGr6ukynkQKuTbwBi3W1LrVDfM1DsaFs63E+ntH+80eC30yiN+wrhzny dU2ANtiqg0UOuXKh3YMQapePytoYBbZB4loHUIj7zDvFC6MiXyJtNqe7v4WzkOaG 9N1tFOrWubmOjLr3HAKrfa/L3FsE7nEguIV972ulZ+3TQUrshJpHjtcjlrmKmzv3 NZcbpcGsaz5C6FyNCn2/dBNCIQSpRUg= -----END CERTIFICATE-----Generated at Thu Sep 18 23:23:29 2025 by rpki-client