$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: LpSDoKoyDV9HoLDLmGymTkgkXr2Z3wsFIHjbONWsYtY= Subject key identifier: C4:DF:AF:9C:FE:2D:23:5C:53:7F:9B:8C:05:96:96:6B:20:07:FD:3C Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 018F Signing time: Mon 21 Jul 2025 02:50:14 +0000 Manifest this update: Mon 21 Jul 2025 02:50:13 +0000 Manifest next update: Mon 28 Jul 2025 02:50:13 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: 0JbC7uXA4+KiTgrTd/a95VNbyqTfjPdqf9F6zluDYxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Jul 21 02:50:13 2025 GMT Not After : Jul 28 02:50:13 2025 GMT Subject: CN=687daae5-cee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:b0:68:32:ab:24:a9:6f:2f:1c:df:73:00: 7c:55:0c:75:52:83:ad:fc:44:ea:3f:3f:67:3d:54: 37:ce:d7:18:35:10:f1:5b:f7:5b:fc:7e:54:7f:5e: ab:50:1f:5a:b0:0e:a8:e9:cd:d5:3e:78:e5:78:e1: f6:76:2d:6d:e5:46:1a:6e:b8:2c:5b:4e:04:a7:b7: 12:98:cc:7f:d2:d7:c7:ce:af:ab:fe:e0:96:b0:4c: ce:10:f7:92:d1:5b:f7:23:79:9f:7d:51:3b:d3:89: 89:ff:07:a5:03:6a:5b:65:2a:3c:7b:b7:fc:43:c6: 4f:74:c0:ce:6c:5a:05:6c:f9:b2:12:9d:02:ee:de: d7:32:88:54:c0:06:5f:83:d7:34:b2:6b:96:fe:48: 02:9d:9e:ce:59:2c:b1:d8:f6:62:1c:a8:9e:19:5e: 2f:3b:35:b3:c6:62:bc:e8:63:bf:fe:ca:80:fd:a5: e7:7f:e6:25:05:02:23:da:ec:18:c6:d1:b1:e3:42: ce:d1:77:14:ce:a9:29:97:14:aa:53:6e:bd:93:62: 37:92:04:b7:1b:63:9b:8f:0a:25:6f:4a:3f:74:7b: e7:96:f0:a2:5d:e0:bf:1a:62:d1:ae:b8:f7:b6:38: 4a:1d:5e:c7:82:ef:e4:e9:5a:fc:e5:f1:05:4b:26: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DF:AF:9C:FE:2D:23:5C:53:7F:9B:8C:05:96:96:6B:20:07:FD:3C X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d0:63:7f:76:63:b8:f6:dd:20:45:43:f7:fe:32:e8:ba:c1: f7:26:ff:db:83:d9:86:bc:86:43:1e:fa:db:9f:0c:51:7d:46: 68:5d:74:b9:db:76:c6:b4:fe:3a:53:37:d9:a6:3d:e5:ee:5d: 94:1f:9a:ca:3d:b0:54:82:fa:21:16:38:4d:8e:ad:c4:e8:ff: af:be:53:40:05:6d:54:1c:10:38:6f:67:3c:09:59:67:10:66: 9d:95:f7:e1:99:e6:d2:92:95:96:45:b6:e5:2a:3f:c3:4e:33: ab:6d:5f:33:13:b8:14:16:71:7c:ad:fd:9f:75:d8:f5:5c:c7: fa:54:7d:57:bd:ae:ca:ac:b4:a8:40:da:e2:10:ed:40:c3:79: 4e:69:77:e0:63:01:29:bb:42:15:6b:d9:ce:9d:f3:f7:53:2b: d5:3a:2e:98:5f:81:88:e4:f5:db:20:f4:b5:02:cc:e6:8f:36: e0:fc:ce:15:07:4c:1d:2f:54:cd:99:0c:df:90:7b:0e:0f:48: eb:a1:c1:ce:cb:86:8a:9f:ca:ab:69:99:e7:12:12:a6:68:4c: eb:3a:d2:4e:a0:35:a5:4b:1d:cc:bb:14:27:c0:96:e6:c6:58: 51:e5:b5:06:7e:43:31:1d:31:c1:c4:45:c1:a2:d6:b5:06:9a: 28:d8:7f:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjUwNzIxMDI1MDEzWhcNMjUwNzI4MDI1MDEzWjAYMRYwFAYD VQQDEw02ODdkYWFlNS1jZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nmwaDKrJKlvLxzfcwB8VQx1UoOt/ETqPz9nPVQ3ztcYNRDxW/db/H5Uf16r UB9asA6o6c3VPnjleOH2di1t5UYabrgsW04Ep7cSmMx/0tfHzq+r/uCWsEzOEPeS 0Vv3I3mffVE704mJ/welA2pbZSo8e7f8Q8ZPdMDObFoFbPmyEp0C7t7XMohUwAZf g9c0smuW/kgCnZ7OWSyx2PZiHKieGV4vOzWzxmK86GO//sqA/aXnf+YlBQIj2uwY xtGx40LO0XcUzqkplxSqU269k2I3kgS3G2Objwolb0o/dHvnlvCiXeC/GmLRrrj3 tjhKHV7Hgu/k6Vr85fEFSyZ1dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTfr5z+ LSNcU3+bjAWWlmsgB/08MB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK0GN/dmO49t0gRUP3/jLousH3Jv/bg9mGvIZDHvrbnwxRfUZoXXS5 23bGtP46UzfZpj3l7l2UH5rKPbBUgvohFjhNjq3E6P+vvlNABW1UHBA4b2c8CVln EGadlffhmebSkpWWRbblKj/DTjOrbV8zE7gUFnF8rf2fddj1XMf6VH1Xva7KrLSo QNriEO1Aw3lOaXfgYwEpu0IVa9nOnfP3UyvVOi6YX4GI5PXbIPS1Aszmjzbg/M4V B0wdL1TNmQzfkHsOD0jrocHOy4aKn8qraZnnEhKmaEzrOtJOoDWlSx3MuxQnwJbm xlhR5bUGfkMxHTHBxEXBota1Bpoo2H81 -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:16 2025 by rpki-client