$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: eq45m8TnOwA41utwHLjxRyZbwsN+LrzSTHQgZTVb1/A= Subject key identifier: 0E:B9:63:20:E8:57:1E:4A:30:C2:AF:B2:51:F0:54:1A:83:E2:26:2E Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0A66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0A5F Signing time: Wed 20 Aug 2025 19:44:51 +0000 Manifest this update: Wed 20 Aug 2025 19:44:50 +0000 Manifest next update: Wed 27 Aug 2025 19:44:50 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: Fu77mqxBRdGSmNlSkdIl4in3vBtoObOqDpDJB93EcC8=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: VtwEbio1gRB7Ch5LlsoNkh9yhOMrAAqsTjIWAhPZFj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Aug 20 19:44:50 2025 GMT Not After : Aug 27 19:44:50 2025 GMT Subject: CN=68a625b3-d8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:fd:e3:ef:f1:e1:5c:89:e7:36:09:26:7b: 58:43:9c:86:05:ce:22:1c:54:91:c1:4c:71:11:8d: 60:3d:eb:14:ef:99:78:53:7a:d0:41:68:5c:38:22: da:d7:44:5f:01:5c:c3:d7:4f:69:cf:03:f1:24:db: 45:a1:c2:12:e6:31:b1:c1:16:ad:d1:7d:95:29:0e: 10:a1:0a:44:d6:c5:70:eb:03:78:5a:16:f6:27:52: 0a:44:c8:db:b6:2f:56:23:66:2c:a1:b0:06:ec:a7: b4:cb:5c:25:55:38:20:e5:e8:15:e4:de:74:3f:69: ba:e1:81:9e:5b:f1:16:a6:1e:f8:70:a6:17:f3:72: 7f:30:bd:0b:bf:7a:fb:3f:a6:5c:30:e8:e7:eb:9a: a4:31:a9:a3:31:63:db:13:e5:19:26:84:42:0b:3c: be:f5:52:28:75:78:a1:dd:df:f5:a1:83:92:db:6b: 61:a2:54:f0:bb:44:ec:f8:20:ef:b4:ba:95:9f:62: 45:16:6b:6b:05:fc:ca:76:a6:29:14:3e:5a:22:16: 8b:d9:e3:dd:75:93:34:ed:60:34:0f:d7:05:26:0c: 0a:8b:89:63:7e:4d:16:0f:be:5a:14:58:81:6e:35: 8b:1d:6f:ba:f6:03:70:45:ac:67:75:1b:01:0a:7e: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B9:63:20:E8:57:1E:4A:30:C2:AF:B2:51:F0:54:1A:83:E2:26:2E X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8a:9c:28:35:de:1d:55:22:20:9b:4d:ef:d4:17:47:f1:11: cb:b7:6b:b9:b3:44:21:a6:bd:7c:12:47:73:0d:c8:e0:64:58: 46:38:81:25:35:a9:ac:ae:20:84:b9:47:de:06:8f:04:d3:b7: 60:47:a7:b6:5f:b8:6b:6b:b1:47:95:54:0b:e9:47:f5:12:31: 57:25:52:46:4e:4b:19:34:7a:67:37:70:06:fc:f9:f4:1d:66: b8:57:69:f1:b2:0e:89:92:2a:d8:cf:c6:34:93:73:a0:1c:87: 34:2b:f3:ae:a3:bf:ae:69:2b:cb:7a:35:58:97:92:cb:79:91: 95:f1:9e:32:0e:72:09:84:70:d9:ca:7b:e9:8e:8a:90:e8:4f: ed:6a:66:7a:ff:a0:b5:3c:c5:c2:da:d4:67:79:c0:82:a7:98: e3:f5:58:1a:d6:bc:d8:f7:76:1b:9c:4f:19:23:e8:4d:b5:2c: f7:4f:a4:bb:64:64:e9:c7:c9:bc:98:0c:60:0d:e3:c9:5b:46: af:7c:cc:ad:9a:04:67:d8:6c:43:fd:ee:ae:ff:b9:e4:8a:2d: 45:89:4e:d2:36:5b:37:94:f6:12:47:ec:5a:fd:f2:a4:0a:36: 1a:90:11:cf:fc:53:b0:9b:e7:28:50:8b:d6:27:d3:f0:1c:97: 76:ce:a8:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjUwODIwMTk0NDUwWhcNMjUwODI3MTk0NDUwWjAYMRYwFAYD VQQDEw02OGE2MjViMy1kOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIj94+/x4VyJ5zYJJntYQ5yGBc4iHFSRwUxxEY1gPesU75l4U3rQQWhcOCLa 10RfAVzD109pzwPxJNtFocIS5jGxwRat0X2VKQ4QoQpE1sVw6wN4Whb2J1IKRMjb ti9WI2YsobAG7Ke0y1wlVTgg5egV5N50P2m64YGeW/EWph74cKYX83J/ML0Lv3r7 P6ZcMOjn65qkMamjMWPbE+UZJoRCCzy+9VIodXih3d/1oYOS22tholTwu0Ts+CDv tLqVn2JFFmtrBfzKdqYpFD5aIhaL2ePddZM07WA0D9cFJgwKi4ljfk0WD75aFFiB bjWLHW+69gNwRaxndRsBCn5J1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA65YyDo Vx5KMMKvslHwVBqD4iYuMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhipwoNd4dVSIgm03v1BdH8RHLt2u5s0Qhpr18EkdzDcjgZFhGOIEl NamsriCEuUfeBo8E07dgR6e2X7hra7FHlVQL6Uf1EjFXJVJGTksZNHpnN3AG/Pn0 HWa4V2nxsg6JkirYz8Y0k3OgHIc0K/Ouo7+uaSvLejVYl5LLeZGV8Z4yDnIJhHDZ ynvpjoqQ6E/tamZ6/6C1PMXC2tRnecCCp5jj9Vga1rzY93YbnE8ZI+hNtSz3T6S7 ZGTpx8m8mAxgDePJW0avfMytmgRn2GxD/e6u/7nkii1FiU7SNls3lPYSR+xa/fKk CjYakBHP/FOwm+coUIvWJ9PwHJd2zqhS -----END CERTIFICATE-----Generated at Fri Aug 22 16:22:29 2025 by rpki-client