$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: 44aP+Ky1eh+NdVvULpVdhAHuTyeHk3sWSIyC/pXfrrU= Subject key identifier: 8D:01:F8:69:B8:DA:5B:07:C2:1A:E1:C9:9A:4D:75:3A:1C:EA:1A:EE Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 153A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 1532 Signing time: Fri 08 Aug 2025 16:58:14 +0000 Manifest this update: Fri 08 Aug 2025 16:58:13 +0000 Manifest next update: Fri 15 Aug 2025 16:58:13 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: QxxG2otMHQHNG+2eCRoKYJblS60jrg64E2PWjMBgUDI=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5434 (0x153a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Aug 8 16:58:13 2025 GMT Not After : Aug 15 16:58:13 2025 GMT Subject: CN=68962ca6-a7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f2:d0:f9:b0:8c:04:5f:e6:89:ff:7a:d3:ea: 00:2c:48:d6:81:4d:72:cb:bd:b3:68:52:32:25:18: c7:e9:10:8f:09:7b:95:c6:a8:3b:47:fc:16:41:c5: 7e:89:89:40:ec:51:a2:ea:7e:1d:8b:71:12:78:43: 24:4b:29:cb:0c:d1:7f:35:af:a5:e3:6d:ae:ca:64: 37:6e:2d:13:1f:3e:22:6d:07:5e:aa:56:4b:39:6e: a7:0e:49:6c:2a:71:15:e7:f0:1e:17:58:f0:d2:0c: a0:eb:79:50:40:f0:4a:f2:9b:65:f6:4e:75:8d:68: 51:f7:3d:03:71:1c:c6:74:e6:73:db:5b:af:5d:85: 72:65:3b:13:f7:19:84:c3:5a:18:7b:9b:02:97:65: 17:ea:b2:ea:46:32:2c:01:1f:c8:c2:9f:8e:be:56: 33:22:f5:cd:4d:88:3e:2b:47:dd:45:0e:5b:aa:48: 94:09:4b:ea:ad:1d:3d:1f:94:87:94:8b:9c:2c:a9: 81:7b:b9:79:ac:41:51:6f:57:5a:bd:77:18:bb:d7: 26:cf:79:c8:5a:7c:19:4c:d4:b4:9d:39:83:cd:03: f4:22:0a:81:9e:bd:f2:71:89:d5:ba:19:77:8c:b7: 3f:d2:75:d5:92:e1:0f:1d:20:8d:d9:95:35:67:95: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:01:F8:69:B8:DA:5B:07:C2:1A:E1:C9:9A:4D:75:3A:1C:EA:1A:EE X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2d:54:a0:ac:46:e6:27:66:3f:7b:43:76:a2:71:68:56:3d: 10:6b:f7:78:7b:be:cc:2c:c9:0d:1f:d6:0c:32:27:b3:09:a8: 8f:8f:97:1c:12:35:37:8c:42:92:3b:73:88:a7:b4:1d:5f:36: 2e:70:04:b8:27:ee:09:b4:bf:4b:5a:ea:1e:bf:68:b0:4f:42: d6:f5:a9:25:0f:91:f6:6d:1d:ca:4b:4a:e6:a8:47:5a:cb:78: 57:06:73:f6:d8:4d:45:d9:b3:0c:e1:b8:7b:1c:a6:ca:c1:80: 11:1f:4b:f5:a3:4f:65:99:44:d1:05:60:5b:87:73:62:c2:94: 42:f5:53:ed:f1:21:83:b7:ed:3e:77:61:bb:13:e2:e4:b5:82: 8d:bf:dc:12:f1:93:53:5d:11:ec:5f:cd:81:04:8b:33:38:33: e4:c6:4b:bc:63:c3:74:30:dc:60:3c:81:4e:50:09:82:a1:55: cd:17:f6:b2:6a:bb:1b:8e:13:81:de:b9:44:62:7a:89:71:d1: ac:ed:25:18:17:cc:88:8f:84:b5:95:f5:93:60:cf:e5:0f:b2: 08:2f:c7:5a:84:02:3b:c4:28:c6:98:e3:38:6a:d2:70:18:87: ac:c8:d1:34:9b:54:36:37:87:b5:a2:20:d2:47:ed:92:85:10: c6:8e:83:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUwODA4MTY1ODEzWhcNMjUwODE1MTY1ODEzWjAYMRYwFAYD VQQDEw02ODk2MmNhNi1hN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/LQ+bCMBF/mif960+oALEjWgU1yy72zaFIyJRjH6RCPCXuVxqg7R/wWQcV+ iYlA7FGi6n4di3ESeEMkSynLDNF/Na+l422uymQ3bi0THz4ibQdeqlZLOW6nDkls KnEV5/AeF1jw0gyg63lQQPBK8ptl9k51jWhR9z0DcRzGdOZz21uvXYVyZTsT9xmE w1oYe5sCl2UX6rLqRjIsAR/Iwp+OvlYzIvXNTYg+K0fdRQ5bqkiUCUvqrR09H5SH lIucLKmBe7l5rEFRb1davXcYu9cmz3nIWnwZTNS0nTmDzQP0IgqBnr3ycYnVuhl3 jLc/0nXVkuEPHSCN2ZU1Z5UC0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0B+Gm4 2lsHwhrhyZpNdToc6hruMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsLVSgrEbmJ2Y/e0N2onFoVj0Qa/d4e77MLMkNH9YMMiezCaiPj5cc EjU3jEKSO3OIp7QdXzYucAS4J+4JtL9LWuoev2iwT0LW9aklD5H2bR3KS0rmqEda y3hXBnP22E1F2bMM4bh7HKbKwYARH0v1o09lmUTRBWBbh3NiwpRC9VPt8SGDt+0+ d2G7E+LktYKNv9wS8ZNTXRHsX82BBIszODPkxku8Y8N0MNxgPIFOUAmCoVXNF/ay arsbjhOB3rlEYnqJcdGs7SUYF8yIj4S1lfWTYM/lD7IIL8dahAI7xCjGmOM4atJw GIesyNE0m1Q2N4e1oiDSR+2ShRDGjoOe -----END CERTIFICATE-----Generated at Sat Aug 9 01:06:18 2025 by rpki-client