$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: NrCbECfRsaSKmenESzEIirmOM5X7QKBgEf0vTzXBiPM= Subject key identifier: 2C:BD:3A:D0:AC:AE:D0:1F:8C:C5:5C:5B:3F:70:DA:73:8D:2D:8E:E0 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: C5 Signing time: Fri 05 Sep 2025 06:14:10 +0000 Manifest this update: Fri 05 Sep 2025 06:14:09 +0000 Manifest next update: Fri 12 Sep 2025 06:14:09 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: u305xF5g0EwijjdBA3x1kDOwQGa657LKhh4R1jlSY0o=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: hjZJ+P+DDZEo0McDoaqGVpFBbzW2XOruqYUk9+Z9bak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Sep 5 06:14:09 2025 GMT Not After : Sep 12 06:14:09 2025 GMT Subject: CN=68ba7fb1-9084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:97:d3:70:6d:fa:85:f2:23:d0:97:cb:4a:74: 0c:21:ea:5b:8c:5a:b5:46:6d:d3:cb:a7:68:c7:f4: c8:7f:f8:e4:a0:a4:b7:30:49:11:d5:4e:8c:19:6b: f1:67:28:01:ff:ec:f4:6b:8c:a6:8a:53:b2:98:0c: 08:03:7f:15:6d:76:a3:c4:d6:ba:e3:91:19:c2:6d: 54:f7:b9:cf:1d:1f:53:5b:e5:50:7e:4b:0b:7b:8e: 2b:4d:1d:51:d5:5c:f5:a6:71:ad:ef:5f:f7:df:b1: 15:5b:cf:84:86:57:9e:46:50:7c:b0:cf:c6:d6:53: 55:ac:8a:56:92:2a:5f:23:f7:33:fa:08:ef:42:4f: 2d:60:a4:28:f4:be:05:18:e8:78:49:aa:59:7b:02: 73:69:3a:6e:b5:8e:29:80:e5:57:91:d2:9e:75:56: b8:c0:1d:99:1d:0f:b7:8d:9c:01:17:22:f0:9f:57: 27:9a:9d:c4:06:9e:db:a9:67:e8:31:9c:57:a2:dc: bd:dd:9c:d8:22:73:fc:40:a2:9d:9b:0e:58:e7:a1: cc:07:a4:95:5a:e9:cc:e9:2e:2e:ee:49:2b:32:8d: 78:9b:30:03:17:88:1a:29:a6:e9:96:59:40:1c:52: f5:d6:77:f2:3c:7c:95:bc:45:2f:57:b5:a8:30:44: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BD:3A:D0:AC:AE:D0:1F:8C:C5:5C:5B:3F:70:DA:73:8D:2D:8E:E0 X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:4b:ab:da:51:ea:41:85:db:3c:d6:eb:31:b3:df:76:b6:42: 6e:76:8e:2c:a7:4d:e0:51:b3:9c:e8:69:6e:74:96:ac:5c:6b: 10:3b:6f:96:59:fb:ce:a5:ed:c9:a0:95:83:e9:91:ce:60:27: 3b:14:10:a8:95:b5:fa:2f:9a:9f:b1:3e:f6:48:5a:cc:d3:ad: ff:55:2d:6c:6d:df:53:04:d4:87:db:3f:a0:82:b5:38:38:2c: 0d:f3:de:4c:e9:d1:c8:9e:9a:f6:d9:46:e3:d1:dc:37:e6:01: 9c:02:97:b5:bb:5e:1f:cb:06:22:ee:0c:e5:7c:35:42:80:45: aa:eb:c4:e2:7e:5c:8e:34:88:1f:fa:92:83:aa:73:0c:58:c5: 83:09:12:2e:01:9d:96:91:ce:cb:6e:9e:fb:c1:f0:e1:62:8f: e4:f4:a0:4e:b4:65:78:e2:4c:52:01:f7:36:27:75:bf:ba:40: 9a:de:b0:9d:e9:6b:d0:2a:ea:53:20:ad:79:17:2e:3e:77:0a: bf:8c:2c:56:1c:fa:91:d8:7a:8c:7d:c8:65:ea:e3:9a:87:a5: 8a:e4:99:10:e3:de:16:02:2d:e4:df:03:19:98:41:b3:6c:bf: d3:7f:18:fd:11:6c:8f:15:25:f8:4a:06:0c:2b:d2:f7:9f:6e: a0:49:55:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF OTg4Nzg2NjcwHhcNMjUwOTA1MDYxNDA5WhcNMjUwOTEyMDYxNDA5WjAYMRYwFAYD VQQDEw02OGJhN2ZiMS05MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZfTcG36hfIj0JfLSnQMIepbjFq1Rm3Ty6dox/TIf/jkoKS3MEkR1U6MGWvx ZygB/+z0a4ymilOymAwIA38VbXajxNa645EZwm1U97nPHR9TW+VQfksLe44rTR1R 1Vz1pnGt71/337EVW8+EhleeRlB8sM/G1lNVrIpWkipfI/cz+gjvQk8tYKQo9L4F GOh4SapZewJzaTputY4pgOVXkdKedVa4wB2ZHQ+3jZwBFyLwn1cnmp3EBp7bqWfo MZxXoty93ZzYInP8QKKdmw5Y56HMB6SVWunM6S4u7kkrMo14mzADF4gaKabplllA HFL11nfyPHyVvEUvV7WoMERGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCy9OtCs rtAfjMVcWz9w2nONLY7gMB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhC M1dBTjBxWVhocnpwaUhobWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRS6vaUepBhds81usxs992tkJudo4sp03gUbOc6GludJasXGsQO2+W WfvOpe3JoJWD6ZHOYCc7FBColbX6L5qfsT72SFrM063/VS1sbd9TBNSH2z+ggrU4 OCwN895M6dHInpr22Ubj0dw35gGcApe1u14fywYi7gzlfDVCgEWq68TiflyONIgf +pKDqnMMWMWDCRIuAZ2Wkc7Lbp77wfDhYo/k9KBOtGV44kxSAfc2J3W/ukCa3rCd 6WvQKupTIK15Fy4+dwq/jCxWHPqR2HqMfchl6uOah6WK5JkQ494WAi3k3wMZmEGz bL/Tfxj9EWyPFSX4SgYMK9L3n26gSVXO -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:24 2025 by rpki-client