$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json) Hash identifier: blJK8lj0jS/pLmbbhjdzLt7psohFz1CJmxisafBjwpE= Subject key identifier: 45:CC:A2:EC:23:1F:58:A2:43:BD:2C:EA:31:87:67:C1:FF:10:25:AE Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft Manifest number: 61 Signing time: Tue 09 Sep 2025 07:15:06 +0000 Manifest this update: Tue 09 Sep 2025 07:15:06 +0000 Manifest next update: Tue 16 Sep 2025 07:15:06 +0000 Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: K0KTput7EDiXyWRG8Oq8LvybaVG+LIly3QvQML4JDMg=) 2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: hHpuvEEfCl4OhjB2zfY/eTXHBtooIatBX5e91JuXgS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Validity Not Before: Sep 9 07:15:06 2025 GMT Not After : Sep 16 07:15:06 2025 GMT Subject: CN=68bfd3fa-4ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:3b:58:25:0d:92:88:9a:b8:4b:80:ee:3e: 0a:f6:12:71:29:8c:b1:cd:7d:c3:ce:63:dd:88:07: 91:b3:95:60:e0:04:d6:a3:fa:5a:53:fa:d7:d5:c3: c6:81:3a:2b:22:7f:e5:64:16:a4:bf:83:29:14:7d: d1:49:61:f7:a0:58:d2:18:5d:c7:5d:97:cf:1f:fd: 0b:64:81:83:8b:c4:8a:b2:81:df:50:67:4c:b5:1a: c7:fd:13:39:dd:1d:42:94:48:23:81:d8:5f:5c:a6: 06:48:9d:3f:01:2d:24:9c:72:f4:dd:85:6c:88:3b: ff:99:f7:f8:32:18:43:d0:b2:76:1d:b3:78:35:a4: 72:8b:4b:80:e8:2c:fa:b8:d2:54:6b:39:ea:40:43: b8:99:18:ce:db:f8:f7:f0:50:67:ad:09:39:16:dc: 48:13:17:63:b8:d3:e7:e5:09:dc:4f:64:6f:85:eb: aa:e6:fb:83:57:82:35:e6:2b:cf:15:df:4f:30:28: c0:23:72:3b:2f:1a:b6:04:94:40:44:84:4d:06:9d: 0b:51:01:1e:a5:10:f0:a9:36:6c:de:f8:e3:25:a8: 11:dc:7c:3e:dc:cf:23:1a:45:42:cb:54:97:a8:4c: cb:10:a3:e0:46:67:70:73:1f:b0:06:52:aa:1f:aa: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CC:A2:EC:23:1F:58:A2:43:BD:2C:EA:31:87:67:C1:FF:10:25:AE X509v3 Authority Key Identifier: keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:27:d2:7e:1a:28:06:d6:b2:83:fb:7a:46:64:9c:ec:5f:9b: a6:4b:ac:9e:46:9c:aa:f2:7a:61:8a:05:12:42:17:1d:2a:d7: 47:fb:6c:8d:77:06:8d:58:fc:70:68:98:93:35:cb:64:6c:c4: 0d:c2:95:78:c5:44:f6:8f:9f:15:1a:04:40:70:e7:1e:6e:f3: 01:89:83:cc:6a:e9:cc:e7:1b:55:97:7c:22:1d:f3:69:9a:fd: 81:e9:b3:5f:e7:50:fa:f2:1b:1b:2a:7c:d4:a4:24:0b:75:17: 0a:fd:99:93:e8:84:d9:06:ac:14:ea:25:97:8d:e4:c1:cd:a1: 39:77:ff:2d:b0:63:15:87:e6:c4:b3:38:61:80:a2:d8:f7:88: 14:ee:27:09:21:63:08:d1:6c:11:1b:78:de:9a:a6:0d:41:39: 59:4c:c6:2c:ee:31:a0:3a:92:0d:a5:11:35:f9:8b:12:37:0f: fb:e5:b0:7b:fe:83:e9:a5:e8:aa:53:72:23:dd:e8:73:37:08: f7:67:80:cf:6f:69:dc:90:4d:7d:ae:73:87:c8:c5:ea:8f:50: 6c:c2:24:66:26:ab:dd:65:2b:9f:c1:e5:61:43:75:3d:4e:fb: a7:5b:90:43:99:23:ad:d0:27:26:96:1e:0f:07:26:85:63:2c: bf:5f:a1:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODI4MjExMC8GA1UEBRMoOUY3QjQyRUYxOEQzNDJGREQ1NkE5RkRDNUYzRDgwMUUy RDJDMUFCNzAeFw0yNTA5MDkwNzE1MDZaFw0yNTA5MTYwNzE1MDZaMBgxFjAUBgNV BAMTDTY4YmZkM2ZhLTRlZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOHjtYJQ2SiJq4S4DuPgr2EnEpjLHNfcPOY92IB5GzlWDgBNaj+lpT+tfVw8aB Oisif+VkFqS/gykUfdFJYfegWNIYXcddl88f/QtkgYOLxIqygd9QZ0y1Gsf9Eznd HUKUSCOB2F9cpgZInT8BLSSccvTdhWyIO/+Z9/gyGEPQsnYds3g1pHKLS4DoLPq4 0lRrOepAQ7iZGM7b+PfwUGetCTkW3EgTF2O40+flCdxPZG+F66rm+4NXgjXmK88V 308wKMAjcjsvGrYElEBEhE0GnQtRAR6lEPCpNmze+OMlqBHcfD7czyMaRULLVJeo TMsQo+BGZ3BzH7AGUqofqvxxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURcyi7CMf WKJDvSzqMYdnwf8QJa4wHwYDVR0jBBgwFoAUn3tC7xjTQv3Vap/cXz2AHi0sGrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MjgyLzA2MUFBQjUyRkJG RTExRUZCNTUyMEExMkM0RjlBRTAyL24zdEM3eGpUUXYzVmFwX2NYejJBSGkwc0dy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjN0Qzd4alRRdjNWYXBfY1h6MkFIaTBzR3JjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MjgyLzA2MUFBQjUyRkJGRTExRUZCNTUyMEExMkM0RjlBRTAyL24zdEM3eGpUUXYz VmFwX2NYejJBSGkwc0dyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkn0n4aKAbWsoP7ekZknOxfm6ZLrJ5GnKryemGKBRJCFx0q10f7bI13 Bo1Y/HBomJM1y2RsxA3ClXjFRPaPnxUaBEBw5x5u8wGJg8xq6cznG1WXfCId82ma /YHps1/nUPryGxsqfNSkJAt1Fwr9mZPohNkGrBTqJZeN5MHNoTl3/y2wYxWH5sSz OGGAotj3iBTuJwkhYwjRbBEbeN6apg1BOVlMxizuMaA6kg2lETX5ixI3D/vlsHv+ g+ml6KpTciPd6HM3CPdngM9vadyQTX2uc4fIxeqPUGzCJGYmq91lK5/B5WFDdT1O +6dbkEOZI63QJyaWHg8HJoVjLL9foak= -----END CERTIFICATE-----Generated at Wed Sep 10 16:41:53 2025 by rpki-client