$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json) Hash identifier: ITRqjegjlZGl2RzN34+Zus975Fb1/WR0L/UKL2xgykc= Subject key identifier: B9:F7:52:BA:4E:04:54:39:2D:7B:CE:59:8C:F0:D1:5D:F4:61:58:C6 Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4 Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4 Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft Manifest number: 0B36 Signing time: Sun 24 Aug 2025 19:13:20 +0000 Manifest this update: Sun 24 Aug 2025 19:13:20 +0000 Manifest next update: Sun 31 Aug 2025 19:13:20 +0000 Files and hashes: 1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: VhB6eP5VX/DxIKxIt1zrOMx+uT+9ayecl015QG+qHl0=) 2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: F4BgB3+37H1vj4fhyDwAENhQ6lWTOrd3il938AR6caY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4 Validity Not Before: Aug 24 19:13:20 2025 GMT Not After : Aug 31 19:13:20 2025 GMT Subject: CN=68ab6450-4b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:77:1d:ae:c7:65:cf:9a:25:96:a6:b6:5c: 0f:74:7b:2d:05:6b:80:1b:4b:b2:71:74:73:8f:38: e3:0c:08:2c:45:46:d1:65:a3:0e:d6:b8:c0:75:4f: 70:92:1d:fe:94:ee:ad:d0:a5:95:64:d0:f6:39:c3: 63:b5:23:93:3f:df:39:36:53:3a:68:28:1c:26:0d: d3:d7:59:17:14:56:13:ab:26:d9:44:83:fb:c6:33: 63:59:db:5d:3a:01:4b:d2:c6:d2:c6:96:ea:41:c7: 65:23:e7:9c:8d:81:f3:35:cf:4a:f4:77:d3:3d:bf: 44:00:5d:a9:dd:a0:b8:0b:06:d5:2b:d7:81:53:41: 03:62:b5:b2:61:5c:03:61:2f:3d:5b:bb:8c:64:da: 9c:47:6e:d3:45:23:a8:e5:d5:bc:63:e5:5c:43:f6: dc:ac:63:ed:c4:8e:55:a9:49:c9:98:98:73:d2:ee: c2:c6:81:18:d8:df:42:b8:7c:61:c3:2f:ca:28:0d: 8a:f1:e9:23:12:91:67:a1:1a:5f:9b:f0:ba:db:43: 0c:be:28:df:c5:c4:3c:10:b7:0f:06:a3:57:9e:50: 39:10:2a:d4:d4:bc:7a:51:bd:5f:de:81:a2:09:8f: 74:d5:ff:88:21:8b:f7:c7:a0:03:fd:28:3d:01:35: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F7:52:BA:4E:04:54:39:2D:7B:CE:59:8C:F0:D1:5D:F4:61:58:C6 X509v3 Authority Key Identifier: keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:92:4b:44:17:bc:dd:e1:b7:77:0e:62:b8:a0:81:b4:da:e3: 7e:58:bf:3d:fc:0c:f1:dc:f3:65:27:05:82:f0:26:41:68:b6: 8b:ab:e0:81:4d:e8:65:2c:35:c8:c0:23:12:ea:9c:d6:2b:07: f4:18:f2:15:11:c7:95:2a:30:7d:56:d9:30:4a:40:41:cf:2f: b7:65:ee:67:93:a2:53:55:86:2a:7e:3d:61:11:29:b4:43:02: 06:da:3a:ab:18:fc:18:a5:b6:7d:ec:d6:e0:b2:60:fa:2a:57: 49:a5:1a:0c:06:d1:39:a6:c5:83:12:55:98:ca:cb:7c:d1:5d: 9f:33:1a:fb:f0:ae:6f:8e:07:a7:34:3d:6e:99:60:42:26:a2: 38:5a:d3:a8:0a:4e:f0:3f:c9:43:86:ca:da:19:c4:04:26:dd: 6a:fd:94:05:2f:dc:6d:90:4e:06:2a:82:6c:a0:0f:d6:5b:a2: 62:c9:bb:c7:14:0e:92:22:ec:9d:9b:ff:b7:56:5a:2a:05:8e: f2:72:89:24:d9:42:cf:e1:65:ef:05:9e:be:be:4f:38:54:11: 1a:7c:89:89:06:44:6e:d2:98:ea:6b:6b:48:94:f2:11:1a:0a: bf:49:40:10:cf:78:b9:b6:68:41:4d:43:8b:07:89:b0:5a:fa: 1b:31:f2:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0NDcxMTAvBgNVBAUTKERDOThCNTQ0QjE2QzQ5QTk4REQwNTg1Q0Y5NjcyNDI2 NDE1NTJFQTQwHhcNMjUwODI0MTkxMzIwWhcNMjUwODMxMTkxMzIwWjAYMRYwFAYD VQQDEw02OGFiNjQ1MC00YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCx3Ha7HZc+aJZamtlwPdHstBWuAG0uycXRzjzjjDAgsRUbRZaMO1rjAdU9w kh3+lO6t0KWVZND2OcNjtSOTP985NlM6aCgcJg3T11kXFFYTqybZRIP7xjNjWdtd OgFL0sbSxpbqQcdlI+ecjYHzNc9K9HfTPb9EAF2p3aC4CwbVK9eBU0EDYrWyYVwD YS89W7uMZNqcR27TRSOo5dW8Y+VcQ/bcrGPtxI5VqUnJmJhz0u7CxoEY2N9CuHxh wy/KKA2K8ekjEpFnoRpfm/C620MMvijfxcQ8ELcPBqNXnlA5ECrU1Lx6Ub1f3oGi CY901f+IIYv3x6AD/Sg9ATVVkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn3UrpO BFQ5LXvOWYzw0V30YVjGMB8GA1UdIwQYMBaAFNyYtUSxbEmpjdBYXPlnJCZBVS6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTQ0Ny81RjRDNkNGMjQy NjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1NhbU4wRmhjLVdja0prRlZM cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKaTFSTEZzU2FtTjBGaGMtV2NrSmtGVkxxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTQ0Ny81RjRDNkNGMjQyNjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1Nh bU4wRmhjLVdja0prRlZMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5kktEF7zd4bd3DmK4oIG02uN+WL89/Azx3PNlJwWC8CZBaLaLq+CB TehlLDXIwCMS6pzWKwf0GPIVEceVKjB9VtkwSkBBzy+3Ze5nk6JTVYYqfj1hESm0 QwIG2jqrGPwYpbZ97NbgsmD6KldJpRoMBtE5psWDElWYyst80V2fMxr78K5vjgen ND1umWBCJqI4WtOoCk7wP8lDhsraGcQEJt1q/ZQFL9xtkE4GKoJsoA/WW6JiybvH FA6SIuydm/+3VloqBY7ycokk2ULP4WXvBZ6+vk84VBEafImJBkRu0pjqa2tIlPIR Ggq/SUAQz3i5tmhBTUOLB4mwWvobMfIa -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:44 2025 by rpki-client