$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: QGZBa0eJsr3YCRU39B+2KdkGQUGpKqoDAHlDLoUQ7sk= Subject key identifier: 2C:21:F3:9B:8B:40:42:B7:3B:1F:C4:48:AA:A5:97:55:04:6E:BE:3F Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 1087 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 1079 Signing time: Sun 24 Aug 2025 17:21:08 +0000 Manifest this update: Sun 24 Aug 2025 17:21:07 +0000 Manifest next update: Sun 31 Aug 2025 17:21:07 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: Ii4crZ8l1Bc5xrJefYeUbAuOBkvYfcyR1ZpGRfjdCeg=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: 0OKa5D8R5tqflMwj5WNvymkXFrzQXgwFV3RUnRL3aD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4231 (0x1087) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Aug 24 17:21:07 2025 GMT Not After : Aug 31 17:21:07 2025 GMT Subject: CN=68ab4a03-06f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:7f:e0:cb:62:c9:73:2f:9f:8e:3c:dc:37: ce:50:b4:6f:05:20:47:b8:20:a8:8c:f4:35:36:f5: f0:04:e2:53:2e:52:44:2d:89:76:7a:68:7c:6d:63: b3:10:54:31:1a:50:8b:b5:9e:e4:dc:4e:1f:b0:5c: 64:45:8e:9f:d2:40:2f:68:3c:7a:59:eb:aa:11:3a: 4e:7e:7c:46:e0:d2:e2:08:46:be:83:29:fd:da:d8: aa:b0:fe:34:85:a1:77:f3:ed:8c:fb:0a:19:4d:5d: 7e:6d:38:1c:d3:5b:3f:a2:bf:16:fd:99:8b:82:ca: 89:92:bc:62:b6:34:eb:76:c6:71:2e:79:97:e5:66: 9a:99:e2:31:e8:07:0b:bc:19:a7:62:65:57:ae:1b: b1:38:69:c9:f1:b7:ca:f6:3c:4b:97:15:0c:78:8e: 7d:aa:f4:63:6e:d5:87:25:d7:c2:20:58:39:1f:0b: 8b:f3:d8:00:e3:21:d5:91:28:78:f9:5f:b7:eb:f0: 44:2d:69:7c:04:4e:d1:33:90:af:dd:6b:c7:36:14: ed:7e:f7:06:92:6c:c0:90:1e:6a:57:9b:7d:2e:2a: 76:f9:41:ec:b3:a0:2c:c6:12:b5:77:1f:19:fd:26: 92:ec:62:d9:e9:e6:93:9c:99:d4:ff:bf:fc:3c:17: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:21:F3:9B:8B:40:42:B7:3B:1F:C4:48:AA:A5:97:55:04:6E:BE:3F X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:0f:7f:54:85:cc:1c:2f:81:a7:93:ed:fc:89:bd:f7:fe:36: 20:02:ae:59:22:5c:58:7c:c9:dc:ef:e5:f7:0b:51:44:53:51: 85:76:bc:69:9d:0b:e3:10:ac:e8:ac:08:d9:a4:b0:c3:67:5a: e0:af:4f:90:7a:ad:d3:17:35:29:9c:25:0a:91:69:39:ff:64: af:1f:4e:c0:42:c8:62:73:3c:29:17:45:ac:05:17:36:71:66: 6e:b5:5e:c2:c0:28:c0:5e:b4:6c:e6:a5:9c:83:3a:67:f7:05: 1e:bc:22:61:b8:97:5f:14:c0:1e:cc:83:04:66:ed:80:ba:a8: 04:24:a1:99:ec:48:12:7c:6a:01:11:63:bc:9e:f3:9d:fd:c9: ef:6d:8f:73:58:ac:a5:40:9f:48:eb:0f:8d:92:01:1c:82:1a: 3f:81:df:20:40:39:ad:e3:74:b8:5f:ac:8a:5f:76:a9:c3:be: dc:6b:e2:dd:25:67:6d:c6:21:09:c2:b4:2c:4e:2c:23:e3:4e: a8:ff:33:ed:c7:e1:dd:7d:c0:17:ee:90:8a:58:63:5c:d8:9d: 39:06:18:b2:66:02:fa:9b:be:a3:c4:98:2f:c0:f2:51:02:98: aa:ae:82:ca:54:44:b1:c7:60:59:b2:04:b2:4a:f2:ad:8e:40: f9:b9:3d:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUwODI0MTcyMTA3WhcNMjUwODMxMTcyMTA3WjAYMRYwFAYD VQQDEw02OGFiNGEwMy0wNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8V/4MtiyXMvn4483DfOULRvBSBHuCCojPQ1NvXwBOJTLlJELYl2emh8bWOz EFQxGlCLtZ7k3E4fsFxkRY6f0kAvaDx6WeuqETpOfnxG4NLiCEa+gyn92tiqsP40 haF38+2M+woZTV1+bTgc01s/or8W/ZmLgsqJkrxitjTrdsZxLnmX5WaameIx6AcL vBmnYmVXrhuxOGnJ8bfK9jxLlxUMeI59qvRjbtWHJdfCIFg5HwuL89gA4yHVkSh4 +V+36/BELWl8BE7RM5Cv3WvHNhTtfvcGkmzAkB5qV5t9Lip2+UHss6AsxhK1dx8Z /SaS7GLZ6eaTnJnU/7/8PBfUXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwh85uL QEK3Ox/ESKqll1UEbr4/MB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoD39UhcwcL4Gnk+38ib33/jYgAq5ZIlxYfMnc7+X3C1FEU1GFdrxp nQvjEKzorAjZpLDDZ1rgr0+Qeq3TFzUpnCUKkWk5/2SvH07AQshiczwpF0WsBRc2 cWZutV7CwCjAXrRs5qWcgzpn9wUevCJhuJdfFMAezIMEZu2AuqgEJKGZ7EgSfGoB EWO8nvOd/cnvbY9zWKylQJ9I6w+NkgEcgho/gd8gQDmt43S4X6yKX3apw77ca+Ld JWdtxiEJwrQsTiwj406o/zPtx+HdfcAX7pCKWGNc2J05BhiyZgL6m76jxJgvwPJR ApiqroLKVESxx2BZsgSySvKtjkD5uT1P -----END CERTIFICATE-----Generated at Tue Aug 26 14:20:04 2025 by rpki-client