$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: rtvFSOjX9IJKuyc7Ps3an1DWxDThqG6M6m/MUn2M1M8= Subject key identifier: 0F:BB:89:30:4B:8F:AD:21:50:2D:A3:F7:5E:22:62:81:BF:87:11:3F Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 0425 Signing time: Thu 21 Aug 2025 00:27:26 +0000 Manifest this update: Thu 21 Aug 2025 00:27:26 +0000 Manifest next update: Thu 28 Aug 2025 00:27:26 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: DzaWNh+Ebav8EKJUeFRMvSMUhQkUHLz5XSo2jJx5gc4=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2+LI0FBQeI2/dX1G7Td9+baIQ/+USHCLEosOYsTW+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Aug 21 00:27:26 2025 GMT Not After : Aug 28 00:27:26 2025 GMT Subject: CN=68a667ee-5402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:f4:f7:d5:45:d9:f9:92:4f:e0:54:f1:b0: f7:47:8f:9f:95:14:a9:a0:88:e9:19:1e:e8:1d:4f: a8:2d:f4:87:02:d9:f6:ba:75:8e:8e:97:da:86:b6: dd:78:d8:f2:df:7f:23:cd:9e:54:5e:a7:ba:9f:7b: 97:71:f7:35:53:fe:ee:8a:ed:ad:81:59:64:20:6e: c8:e9:0b:7b:aa:27:e4:e6:43:07:2d:1c:a5:b2:36: 74:91:05:06:85:13:ef:4d:65:f9:ca:70:62:f6:11: b8:fc:a6:3a:57:2c:0a:bf:c6:14:77:6c:32:cc:dd: 9d:be:a2:2a:98:1d:b5:4d:d0:33:27:b5:69:c6:e5: a2:bd:27:1d:b6:a7:c7:4a:bc:ed:c7:93:2a:cc:18: 38:e4:b8:d8:97:18:6b:45:c6:d5:60:6b:8e:24:69: 56:9b:24:83:12:a7:ce:8c:b7:37:20:ad:51:5d:db: e8:4c:1d:1b:0c:d2:0d:67:44:f4:c7:64:b4:b4:28: 5d:2e:9d:f0:06:f7:65:e9:bf:48:dd:fb:0c:73:80: 38:03:17:b7:d3:87:b3:a0:18:88:22:26:6d:31:cc: 52:10:f5:87:48:c8:05:37:77:fa:7b:8a:d6:54:a9: 3a:18:6f:aa:47:a8:a8:30:cb:80:86:db:05:fb:07: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BB:89:30:4B:8F:AD:21:50:2D:A3:F7:5E:22:62:81:BF:87:11:3F X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f2:87:9e:cc:bb:0e:6e:f9:a5:9f:bd:62:7e:76:50:59:62: f2:af:33:5c:7b:30:61:2e:21:e0:53:5c:d8:40:7c:4e:7e:bc: 96:e9:d2:a8:e1:42:55:f8:80:89:cd:8b:f3:43:d5:ee:a9:f4: 8e:30:8a:fb:4f:c2:18:5e:32:ea:8f:df:09:a8:04:64:4c:b6: 70:ad:37:29:6c:bc:89:52:86:c0:57:5d:83:36:07:0e:ee:ec: 3f:db:43:26:39:77:3b:06:d9:44:bb:79:7e:f8:14:79:48:0e: d9:0a:79:9b:33:b0:23:a4:3a:53:5d:78:5e:d0:22:2d:f4:9f: 2d:63:6b:cc:eb:1e:46:f4:08:8a:51:8e:4e:f3:f9:ac:b9:0d: 3a:66:57:bd:d1:92:7a:72:b6:d5:bd:37:17:93:23:06:72:13: 62:56:03:5c:43:25:e6:8b:e9:aa:10:26:37:94:68:ce:0f:9f: 0a:1e:4b:45:17:c2:5e:9b:14:44:83:ba:e9:9a:0e:b6:67:96: c8:4b:ad:e8:1e:81:5d:8b:45:2a:2a:2f:e2:97:46:a6:38:1d: c4:6d:af:e2:78:c7:f4:42:24:b1:e9:66:93:55:14:9f:d0:a8: 43:98:28:c6:5b:01:02:9a:eb:be:84:f9:5a:2e:4c:39:60:7d: 97:f9:f7:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjUwODIxMDAyNzI2WhcNMjUwODI4MDAyNzI2WjAYMRYwFAYD VQQDEw02OGE2NjdlZS01NDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQr099VF2fmST+BU8bD3R4+flRSpoIjpGR7oHU+oLfSHAtn2unWOjpfahrbd eNjy338jzZ5UXqe6n3uXcfc1U/7uiu2tgVlkIG7I6Qt7qifk5kMHLRylsjZ0kQUG hRPvTWX5ynBi9hG4/KY6VywKv8YUd2wyzN2dvqIqmB21TdAzJ7VpxuWivScdtqfH Srztx5MqzBg45LjYlxhrRcbVYGuOJGlWmySDEqfOjLc3IK1RXdvoTB0bDNINZ0T0 x2S0tChdLp3wBvdl6b9I3fsMc4A4Axe304ezoBiIIiZtMcxSEPWHSMgFN3f6e4rW VKk6GG+qR6ioMMuAhtsF+wc+4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+7iTBL j60hUC2j914iYoG/hxE/MB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB38oeezLsObvmln71ifnZQWWLyrzNcezBhLiHgU1zYQHxOfryW6dKo 4UJV+ICJzYvzQ9XuqfSOMIr7T8IYXjLqj98JqARkTLZwrTcpbLyJUobAV12DNgcO 7uw/20MmOXc7BtlEu3l++BR5SA7ZCnmbM7AjpDpTXXhe0CIt9J8tY2vM6x5G9AiK UY5O8/msuQ06Zle90ZJ6crbVvTcXkyMGchNiVgNcQyXmi+mqECY3lGjOD58KHktF F8JemxREg7rpmg62Z5bIS63oHoFdi0UqKi/il0amOB3Eba/ieMf0QiSx6WaTVRSf 0KhDmCjGWwECmuu+hPlaLkw5YH2X+feX -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:02 2025 by rpki-client