$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: Y6mkqFP4vxt4qUzuEgCy9dPIJ7zfr/XQf3HhUPVJfIc= Subject key identifier: 42:0C:9E:9E:FE:C0:67:2F:B6:A0:84:82:20:56:20:4E:43:AB:E7:C0 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: AB Signing time: Mon 21 Jul 2025 06:15:38 +0000 Manifest this update: Mon 21 Jul 2025 06:15:37 +0000 Manifest next update: Mon 28 Jul 2025 06:15:37 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: /ZFHHJDURoZfRWFpffP9cPB8SzOGBizusQLJJ/QOgRg=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qWDPCZUNoXxLfCTQ51artmgIDTxez9EecMCL2qvkzMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Jul 21 06:15:37 2025 GMT Not After : Jul 28 06:15:37 2025 GMT Subject: CN=687ddb09-d5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:07:42:cf:63:52:42:32:d7:d3:46:17:b1: f0:76:07:6d:82:7d:dc:b7:a3:36:bb:55:fe:9c:07: 06:ab:68:02:30:fc:72:3f:5a:66:04:c6:c0:12:f7: 6c:28:e5:e3:9f:3b:db:15:54:56:21:bf:24:81:c4: 52:3a:de:2b:0a:97:df:73:52:1a:b1:53:0c:aa:76: d0:78:79:04:6f:1a:68:11:6c:f8:0e:3b:c1:fa:54: 7e:32:8a:fe:e6:be:67:f7:b1:5a:b6:83:59:0e:b5: dc:b6:f6:3d:9a:7a:d2:87:0f:42:f0:84:66:39:b8: 55:cc:f3:58:a3:c1:11:58:40:d2:c3:18:69:f7:ee: f8:3e:6f:ff:64:6a:da:b6:84:8a:35:89:45:47:c4: 07:8a:1b:86:46:1c:71:6e:76:c9:e1:88:f0:34:bd: 1f:a1:47:82:db:3c:a4:f4:20:06:16:ae:59:e1:80: 05:d3:3f:4f:86:8b:91:1c:ca:a0:c1:04:1e:dd:b8: 5e:d8:2a:04:70:7d:15:0a:c6:3c:45:a8:45:b3:20: 52:8b:ca:59:45:11:75:fb:43:8e:61:ec:bd:75:ff: ca:0d:1e:f8:e8:af:2a:04:9d:b3:3e:2b:75:58:ba: 90:b2:7a:ce:ca:d8:c7:81:e9:fc:ee:18:73:93:94: f9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0C:9E:9E:FE:C0:67:2F:B6:A0:84:82:20:56:20:4E:43:AB:E7:C0 X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:03:8b:be:e4:12:63:bb:92:12:83:aa:a9:16:83:70:ff:39: 96:0f:66:93:4f:54:27:68:d0:5f:5a:86:48:07:f7:4f:49:06: 89:5e:3a:9c:35:e5:81:e4:ad:27:db:f9:16:b6:61:9b:46:b9: d5:e5:48:c7:45:40:65:f7:02:4f:fc:07:98:f6:c1:68:dc:90: 72:3a:3f:ca:12:4a:27:11:95:eb:1f:05:95:57:9a:a6:c7:3d: e9:18:6d:ca:94:d1:37:d7:21:14:fb:e8:cc:36:9d:f2:80:94: 1b:80:8d:4e:04:b4:ff:0f:b3:06:7d:d9:fb:a2:55:fd:25:51: 37:62:cc:11:bd:39:58:ef:6b:96:1b:92:33:4d:c4:28:17:74: c9:9a:1c:69:c9:31:ff:16:55:ff:c5:eb:f0:78:12:30:d0:8e: 68:8c:59:cd:11:09:49:7f:92:cf:79:b8:5c:77:ec:a6:a7:65: d8:00:c5:b9:05:31:04:cd:80:7b:1d:fa:99:5d:bc:30:d8:1a: 76:56:db:fd:55:8f:b6:93:29:cd:d9:78:cc:ae:97:ca:7e:45: b8:03:13:17:91:cc:47:6a:1b:87:65:bf:0d:ad:b1:1b:98:d0: d8:1c:71:2e:14:87:0c:fc:bd:84:53:85:8f:27:be:03:39:e7: ec:5d:e9:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF OTg4Nzg2NjcwHhcNMjUwNzIxMDYxNTM3WhcNMjUwNzI4MDYxNTM3WjAYMRYwFAYD VQQDEw02ODdkZGIwOS1kNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvREHQs9jUkIy19NGF7Hwdgdtgn3ct6M2u1X+nAcGq2gCMPxyP1pmBMbAEvds KOXjnzvbFVRWIb8kgcRSOt4rCpffc1IasVMMqnbQeHkEbxpoEWz4DjvB+lR+Mor+ 5r5n97FatoNZDrXctvY9mnrShw9C8IRmObhVzPNYo8ERWEDSwxhp9+74Pm//ZGra toSKNYlFR8QHihuGRhxxbnbJ4YjwNL0foUeC2zyk9CAGFq5Z4YAF0z9PhouRHMqg wQQe3bhe2CoEcH0VCsY8RahFsyBSi8pZRRF1+0OOYey9df/KDR746K8qBJ2zPit1 WLqQsnrOytjHgen87hhzk5T5xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIMnp7+ wGcvtqCEgiBWIE5Dq+fAMB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhC M1dBTjBxWVhocnpwaUhobWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNA4u+5BJju5ISg6qpFoNw/zmWD2aTT1QnaNBfWoZIB/dPSQaJXjqc NeWB5K0n2/kWtmGbRrnV5UjHRUBl9wJP/AeY9sFo3JByOj/KEkonEZXrHwWVV5qm xz3pGG3KlNE31yEU++jMNp3ygJQbgI1OBLT/D7MGfdn7olX9JVE3YswRvTlY72uW G5IzTcQoF3TJmhxpyTH/FlX/xevweBIw0I5ojFnNEQlJf5LPebhcd+ymp2XYAMW5 BTEEzYB7HfqZXbww2Bp2Vtv9VY+2kynN2XjMrpfKfkW4AxMXkcxHahuHZb8NrbEb mNDYHHEuFIcM/L2EU4WPJ74DOefsXekO -----END CERTIFICATE-----Generated at Mon Jul 21 12:44:33 2025 by rpki-client