$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: 8LgR5HwxiSakzx3dmD5ESulXEriIoZx0NEZg/c6ttRU= Subject key identifier: C0:DF:15:C5:1F:2B:0B:FC:90:BD:91:B9:6B:EC:34:29:E2:11:97:8F Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 0138 Signing time: Fri 19 Sep 2025 05:06:15 +0000 Manifest this update: Fri 19 Sep 2025 05:06:14 +0000 Manifest next update: Fri 26 Sep 2025 05:06:14 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: 6jFLdPgDkpcRm1Paw28X5qHAOYlebopDmwMKs6RZdmQ=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Sep 19 05:06:14 2025 GMT Not After : Sep 26 05:06:14 2025 GMT Subject: CN=68cce4c6-fb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d8:b8:d3:b3:d2:6d:72:34:85:60:f1:af:fa: f0:dc:f9:b9:3a:c1:9b:2d:ac:c1:17:51:19:f5:c1: 9b:15:a6:c6:ab:6b:56:1d:d5:86:73:c0:0d:f6:92: 9b:bf:69:f6:95:37:e3:0a:37:21:90:9b:90:ea:d0: ca:21:fa:0d:e2:b1:06:53:65:12:b1:7b:b1:a8:80: c4:59:d0:5c:b1:7e:c1:4a:d6:c9:73:23:93:28:98: 0f:f1:2a:54:47:b7:83:30:8d:2b:41:fb:34:ea:b5: e8:81:17:04:0e:e0:a0:93:11:9b:04:1d:8a:8f:35: 39:2e:1a:b8:28:bd:bb:97:bd:a6:56:0d:9e:ab:a5: ac:49:c9:d4:66:93:cf:fd:c5:69:d7:23:22:3a:e4: e8:03:22:12:7f:de:04:10:c4:61:02:6d:57:5d:08: 68:e1:7a:28:34:07:ec:ec:be:15:15:10:65:c7:b4: 33:ec:63:16:89:0c:c7:c2:22:3b:04:df:25:e3:a0: 60:7c:28:0e:88:c2:73:ca:1e:34:2f:51:93:23:0e: 9d:28:e5:b1:77:cd:36:e7:08:28:da:d0:37:36:43: 93:fb:25:01:4d:88:ae:ed:2f:07:f9:9c:a7:10:f0: 0f:56:15:b3:74:e3:71:c5:44:09:f9:96:46:3a:e5: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DF:15:C5:1F:2B:0B:FC:90:BD:91:B9:6B:EC:34:29:E2:11:97:8F X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:3b:35:26:04:3c:61:be:ac:8c:5d:4e:1c:4b:04:9e:0e:34: 49:d7:19:f5:58:2e:99:3f:9e:fe:60:53:9d:44:c9:f1:87:49: 5d:13:51:e5:57:86:c9:fd:84:a0:58:b7:50:82:ec:03:b5:ce: fc:5e:76:75:ca:7c:7e:24:90:53:94:6b:1b:f1:4e:33:55:13: 74:d7:05:f5:cc:b0:25:ea:ce:2e:af:04:45:30:08:5a:33:24: 94:dc:6c:ca:c9:19:44:a3:9a:77:55:81:81:d6:86:26:cc:49: 27:43:06:94:70:2f:b9:3b:7d:62:07:3d:37:7c:95:f4:f6:e0: 60:05:28:a8:3c:eb:97:a1:97:7e:6d:43:3d:a5:b8:d6:5b:40: f9:a1:c7:c8:23:6f:31:08:f0:86:9f:6a:d6:0d:10:b1:93:f0: 55:a3:28:af:a3:b9:21:ce:d7:e6:6f:b2:c1:8d:e3:80:e3:29: 42:e0:e0:ff:cc:e8:06:38:a2:75:41:34:c8:ac:f7:9d:da:78: cc:23:0a:60:6a:a9:eb:6d:02:92:43:4f:61:a9:0c:85:62:ce: 47:22:53:e5:37:4b:35:28:34:56:ff:05:aa:b5:84:48:86:79: 82:f3:8c:59:73:fa:0e:80:e7:31:d1:b6:d3:bf:28:cd:4e:de: bf:06:9a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUwOTE5MDUwNjE0WhcNMjUwOTI2MDUwNjE0WjAYMRYwFAYD VQQDEw02OGNjZTRjNi1mYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7di407PSbXI0hWDxr/rw3Pm5OsGbLazBF1EZ9cGbFabGq2tWHdWGc8AN9pKb v2n2lTfjCjchkJuQ6tDKIfoN4rEGU2USsXuxqIDEWdBcsX7BStbJcyOTKJgP8SpU R7eDMI0rQfs06rXogRcEDuCgkxGbBB2KjzU5Lhq4KL27l72mVg2eq6WsScnUZpPP /cVp1yMiOuToAyISf94EEMRhAm1XXQho4XooNAfs7L4VFRBlx7Qz7GMWiQzHwiI7 BN8l46BgfCgOiMJzyh40L1GTIw6dKOWxd8025wgo2tA3NkOT+yUBTYiu7S8H+Zyn EPAPVhWzdONxxUQJ+ZZGOuWelQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDfFcUf Kwv8kL2RuWvsNCniEZePMB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCOzUmBDxhvqyMXU4cSwSeDjRJ1xn1WC6ZP57+YFOdRMnxh0ldE1Hl V4bJ/YSgWLdQguwDtc78XnZ1ynx+JJBTlGsb8U4zVRN01wX1zLAl6s4urwRFMAha MySU3GzKyRlEo5p3VYGB1oYmzEknQwaUcC+5O31iBz03fJX09uBgBSioPOuXoZd+ bUM9pbjWW0D5ocfII28xCPCGn2rWDRCxk/BVoyivo7khztfmb7LBjeOA4ylC4OD/ zOgGOKJ1QTTIrPed2njMIwpgaqnrbQKSQ09hqQyFYs5HIlPlN0s1KDRW/wWqtYRI hnmC84xZc/oOgOcx0bbTvyjNTt6/BpoT -----END CERTIFICATE-----Generated at Fri Sep 19 07:43:22 2025 by rpki-client