$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft File: b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json) Hash identifier: NFkYxoGebV8DaLjSdg5IKOjASptFohHmrfG3grY1hlI= Subject key identifier: 1A:BC:F3:5D:84:19:98:86:84:54:CE:68:3B:7E:5E:02:70:31:7E:8A Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A Certificate issuer: /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A Certificate serial: 114D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft Manifest number: 1DD8 Signing time: Sun 24 Aug 2025 17:13:09 +0000 Manifest this update: Sun 24 Aug 2025 17:13:09 +0000 Manifest next update: Sun 31 Aug 2025 17:13:09 +0000 Files and hashes: 1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: 4sfecL53sGqapKz2dcdyoEDXKOc9/FnIhaTWVhW0yVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4429 (0x114d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A Validity Not Before: Aug 24 17:13:09 2025 GMT Not After : Aug 31 17:13:09 2025 GMT Subject: CN=68ab4825-e449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:5a:32:67:8f:40:d3:06:2e:ff:b6:b3:1b: ec:01:40:d0:bd:25:6e:e1:c3:c4:ed:b0:5b:96:6f: 85:be:eb:f1:68:4b:fc:0c:57:85:2c:e9:40:ce:b8: 50:bf:0e:8c:3e:ea:b8:9a:15:4b:56:d3:58:5f:38: dc:ef:de:78:e1:86:2c:11:9e:f0:1d:03:36:dd:73: 3a:c1:1e:2e:90:af:b8:a6:d2:d7:c4:01:27:a0:d1: 02:05:48:93:ca:ea:df:9e:69:03:a2:e1:d4:d3:61: 77:31:06:9a:e4:7f:45:85:f9:80:f3:62:d4:2a:8c: 30:62:52:c1:15:9d:c0:53:e2:22:eb:a6:94:8b:72: 39:5e:12:5f:ad:f1:3a:32:b0:c5:df:fc:73:53:cf: 66:b8:ea:78:1a:74:36:91:c9:e2:53:47:68:da:60: c7:8b:f7:37:9f:58:52:89:53:06:b9:31:ad:6a:1b: 48:ee:c6:7b:1d:63:4e:ea:68:3e:b6:2c:53:e4:e0: e8:dc:79:d3:1f:9f:38:8f:ee:d0:af:39:61:5d:29: 6f:83:12:cc:3d:ba:4e:17:88:4d:bd:ff:06:a9:9b: f3:bb:df:40:3e:21:06:4e:ef:4e:70:10:ab:b1:42: 4c:54:94:9e:9c:42:07:54:6a:be:3a:a7:83:54:52: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BC:F3:5D:84:19:98:86:84:54:CE:68:3B:7E:5E:02:70:31:7E:8A X509v3 Authority Key Identifier: keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:55:c1:72:7c:02:31:a5:f7:29:ca:df:7c:ee:21:c2:6f:02: fc:61:83:40:89:ca:02:c3:9d:26:5d:33:b1:a4:9d:2b:6c:d8: 26:43:45:88:a8:13:66:97:4a:70:b4:14:a9:9f:32:a9:30:61: 4c:53:c9:79:b7:1c:45:38:8c:d5:fc:a6:c3:80:6b:e3:83:90: 58:ae:23:9d:dd:1e:6c:ac:fe:97:32:0f:62:cd:43:0f:27:fc: d2:db:97:70:ea:8f:06:d4:0a:5c:d4:ad:24:06:91:86:98:eb: e5:75:d7:90:b6:bc:9c:4f:18:6f:b5:71:b6:19:8f:32:f4:00: cf:ed:0e:1c:12:13:1d:a7:2f:05:65:96:ff:31:15:5a:93:52: c2:f7:17:7e:64:f3:5e:87:02:27:2a:4e:59:4f:df:0d:cd:01: 19:cf:94:11:1b:06:eb:34:b9:ea:54:4b:4e:4b:ba:b3:b4:cf: f4:5d:bb:1b:3c:98:8a:d6:8f:3e:10:26:0c:86:30:36:00:99: 88:0c:7c:fa:4b:72:44:0a:4e:80:7e:0e:03:bb:3c:6d:ce:e5: b5:cd:9a:ed:c4:73:7f:8e:42:91:08:51:a1:79:de:06:57:2a: 93:ec:17:75:df:96:55:79:cf:b8:4f:08:72:08:df:ac:91:26: 7b:b5:cd:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBRjAxMTAvBgNVBAUTKDZGN0I0NUUzREM3NjI2QzM3RjhBMDFFMEFCOEVBNEFG MDU1RjQ5OEEwHhcNMjUwODI0MTcxMzA5WhcNMjUwODMxMTcxMzA5WjAYMRYwFAYD VQQDEw02OGFiNDgyNS1lNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApp9aMmePQNMGLv+2sxvsAUDQvSVu4cPE7bBblm+FvuvxaEv8DFeFLOlAzrhQ vw6MPuq4mhVLVtNYXzjc79544YYsEZ7wHQM23XM6wR4ukK+4ptLXxAEnoNECBUiT yurfnmkDouHU02F3MQaa5H9FhfmA82LUKowwYlLBFZ3AU+Ii66aUi3I5XhJfrfE6 MrDF3/xzU89muOp4GnQ2kcniU0do2mDHi/c3n1hSiVMGuTGtahtI7sZ7HWNO6mg+ tixT5ODo3HnTH584j+7QrzlhXSlvgxLMPbpOF4hNvf8GqZvzu99APiEGTu9OcBCr sUJMVJSenEIHVGq+OqeDVFI6GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq8812E GZiGhFTOaDt+XgJwMX6KMB8GA1UdIwQYMBaAFG97RePcdibDf4oB4KuOpK8FX0mK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi9iM3RGNDl4MkpzTl9pZ0hncTQ2a3J3VmZT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IzdEY0OXgySnNOX2lnSGdxNDZrcndWZlNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi9iM3RGNDl4Mkpz Tl9pZ0hncTQ2a3J3VmZTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAVcFyfAIxpfcpyt987iHCbwL8YYNAicoCw50mXTOxpJ0rbNgmQ0WI qBNml0pwtBSpnzKpMGFMU8l5txxFOIzV/KbDgGvjg5BYriOd3R5srP6XMg9izUMP J/zS25dw6o8G1Apc1K0kBpGGmOvlddeQtrycTxhvtXG2GY8y9ADP7Q4cEhMdpy8F ZZb/MRVak1LC9xd+ZPNehwInKk5ZT98NzQEZz5QRGwbrNLnqVEtOS7qztM/0Xbsb PJiK1o8+ECYMhjA2AJmIDHz6S3JECk6Afg4DuzxtzuW1zZrtxHN/jkKRCFGhed4G VyqT7Bd135ZVec+4TwhyCN+skSZ7tc12 -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:31 2025 by rpki-client