$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: d5qPTAVdn/mXQY5sp3IMlqXPN8n5bNLfcfnfwDSbwI8= Subject key identifier: 33:8A:91:9C:E5:02:B8:97:4E:EA:B0:50:19:47:8E:D5:CF:61:DB:9F Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0CB5 Signing time: Thu 18 Sep 2025 18:29:56 +0000 Manifest this update: Thu 18 Sep 2025 18:29:56 +0000 Manifest next update: Thu 25 Sep 2025 18:29:56 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: ltZL2fA/XxmbGZ1rcbyN1+B0kpv70J6CAU8F4Qp2few=) 2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: /m7E0Dw/anD8qYNxCWedW44uleLaVBkf0eBmZ6XFvMk=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: rZ4CQjG/7W0/b4/xy8McSOxNbiTi926f91iRcbtKHeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Sep 18 18:29:56 2025 GMT Not After : Sep 25 18:29:56 2025 GMT Subject: CN=68cc4fa4-2130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:d2:d7:82:3f:7e:01:31:c3:a7:d7:1e:e8: 71:36:75:13:d3:b5:13:91:02:ed:af:9e:b8:b9:58: fe:42:a3:1d:24:ef:9d:a8:ab:e6:71:49:a2:b2:bf: 49:35:c7:b2:e9:c4:c3:26:4c:e9:b3:ec:72:e5:d5: ff:7b:5a:6e:19:73:18:e8:a1:8d:eb:4a:a0:dd:3d: 09:f3:ca:1d:b8:94:ea:f4:4a:2b:48:5d:8c:2b:03: cc:74:18:4a:53:b9:80:d4:ea:49:0c:61:06:c0:ec: 15:dd:ec:ca:20:f2:39:70:54:4b:97:f7:fc:5f:0f: 82:dd:bd:a6:8d:ab:02:18:cb:ca:68:3c:3f:ea:c6: ca:3a:4f:d4:ec:41:97:ea:70:36:66:b2:b8:cb:8e: 4e:ff:e9:fc:a1:6b:d4:4f:81:b9:9c:63:d6:db:69: 82:a7:31:30:a4:33:14:15:e5:7c:74:0a:a6:f6:05: 3c:62:63:3f:ce:f6:82:cb:9a:b1:0c:90:06:25:6a: c0:60:c2:75:ac:17:82:a5:b6:43:8c:cf:08:a9:28: e1:76:4c:14:bf:67:7b:62:45:5c:e5:3e:d8:58:9a: ed:0e:dd:ab:fa:7f:e6:a6:7f:27:72:48:d9:dd:f4: 2b:2f:7d:7d:9d:7a:9f:50:99:18:3e:05:26:ac:c1: 00:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8A:91:9C:E5:02:B8:97:4E:EA:B0:50:19:47:8E:D5:CF:61:DB:9F X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:36:42:37:27:9f:a4:15:81:4d:52:7e:e0:7b:97:d1:3f:92: 12:10:d9:ad:69:16:7f:6b:d2:ae:6a:35:2c:47:02:28:52:79: 99:28:cc:94:88:7d:89:ba:ff:f7:90:d8:4b:63:ca:c8:f0:7d: 1d:83:b3:2b:11:93:f5:dd:5a:78:8a:de:97:8a:bd:9d:07:ae: f0:94:8d:02:46:7f:1c:8b:7b:70:7d:5d:c5:b6:ff:62:94:46: a9:66:2f:27:33:10:44:db:b7:40:f4:5a:cc:5a:d8:e3:73:da: 40:54:0f:7c:f5:ef:c1:2d:60:74:98:54:46:aa:da:69:98:35: bf:c8:a6:79:ae:73:b7:c9:d5:9d:32:d8:b9:99:ff:cb:c6:8e: 32:4b:04:46:21:55:d8:29:d2:46:3c:bb:89:d2:3e:85:0f:fc: 37:a5:f0:f6:aa:0e:57:c2:fb:91:d2:d7:41:41:8b:69:3a:6d: 79:89:db:3f:e8:eb:1a:44:75:4b:0c:1c:18:48:e7:2f:fe:6a: b1:0d:a2:f1:9c:78:9e:b6:85:ea:ff:b1:fb:d9:86:c6:4e:23: 07:ac:2c:0e:ac:57:df:05:35:89:2f:a2:c0:0e:17:53:a5:bb: b4:68:f4:bd:89:65:41:d5:b7:34:82:e9:35:81:ee:e3:07:b9: ba:27:39:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjUwOTE4MTgyOTU2WhcNMjUwOTI1MTgyOTU2WjAYMRYwFAYD VQQDEw02OGNjNGZhNC0yMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VXS14I/fgExw6fXHuhxNnUT07UTkQLtr564uVj+QqMdJO+dqKvmcUmisr9J Ncey6cTDJkzps+xy5dX/e1puGXMY6KGN60qg3T0J88oduJTq9EorSF2MKwPMdBhK U7mA1OpJDGEGwOwV3ezKIPI5cFRLl/f8Xw+C3b2mjasCGMvKaDw/6sbKOk/U7EGX 6nA2ZrK4y45O/+n8oWvUT4G5nGPW22mCpzEwpDMUFeV8dAqm9gU8YmM/zvaCy5qx DJAGJWrAYMJ1rBeCpbZDjM8IqSjhdkwUv2d7YkVc5T7YWJrtDt2r+n/mpn8nckjZ 3fQrL319nXqfUJkYPgUmrMEAEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOKkZzl AriXTuqwUBlHjtXPYdufMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7NkI3J5+kFYFNUn7ge5fRP5ISENmtaRZ/a9KuajUsRwIoUnmZKMyU iH2Juv/3kNhLY8rI8H0dg7MrEZP13Vp4it6Xir2dB67wlI0CRn8ci3twfV3Ftv9i lEapZi8nMxBE27dA9FrMWtjjc9pAVA989e/BLWB0mFRGqtppmDW/yKZ5rnO3ydWd Mti5mf/Lxo4ySwRGIVXYKdJGPLuJ0j6FD/w3pfD2qg5XwvuR0tdBQYtpOm15ids/ 6OsaRHVLDBwYSOcv/mqxDaLxnHietoXq/7H72YbGTiMHrCwOrFffBTWJL6LADhdT pbu0aPS9iWVB1bc0guk1ge7jB7m6Jzn2 -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:28 2025 by rpki-client