$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: PfMLWLJMAPYIxZt/ouF9oouQNwoLu3jrS4hQpsYkA9M= Subject key identifier: 63:75:24:EC:0E:E7:25:E1:0F:76:0D:6B:9A:6E:0E:19:14:9A:43:F6 Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 096D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 0967 Signing time: Fri 08 Aug 2025 20:28:56 +0000 Manifest this update: Fri 08 Aug 2025 20:28:55 +0000 Manifest next update: Fri 15 Aug 2025 20:28:55 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: B17pZYd7wny8/xFYovP/m2AD88/7nsOG26TLPs4HQEw=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: ZywlM5GpBNObiLKXkyaLQIw8TaELpknwXgtbraf7xO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2413 (0x96d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: Aug 8 20:28:55 2025 GMT Not After : Aug 15 20:28:55 2025 GMT Subject: CN=68965e08-64aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:d5:92:62:10:7d:17:3c:fa:d9:2b:22:f3: d4:cc:a0:8f:09:5e:60:71:56:41:ff:5d:d5:0f:21: 87:e4:a1:9f:f0:03:ca:f7:1d:02:96:67:d6:6c:9c: 48:02:69:00:6f:d3:e9:67:ec:5f:66:56:61:47:88: 67:5c:5d:bc:22:79:5c:05:e4:c6:86:f2:50:38:72: 9b:1f:4d:8b:c8:40:65:f4:4e:21:a6:22:f3:3a:5f: 50:1d:2c:c2:6b:f3:9f:9c:1a:f9:1f:b7:7c:68:49: 8b:bf:a8:a7:d9:db:90:42:26:be:0e:ca:a3:08:a8: bd:e8:43:59:ef:78:fc:ea:e8:cb:33:dd:f3:11:9c: 7f:66:f9:fe:6b:40:db:0e:c7:64:05:e7:20:3f:27: f2:3c:2a:48:a4:aa:00:a3:e1:0a:45:b4:a9:a5:05: 93:a1:98:eb:48:38:f2:01:9c:ca:85:aa:9c:5d:81: 40:10:fa:98:20:c6:68:73:23:82:f2:d8:a5:38:14: c7:b6:e4:3b:eb:ae:b0:f6:f0:71:17:b7:11:c7:a2: eb:e9:82:1d:b0:7f:e0:fe:1c:73:48:09:db:40:0a: 25:d7:5a:25:a5:6b:fe:13:1d:58:84:58:19:c7:d9: 1c:83:52:b4:9b:5a:20:a3:27:2e:3b:d0:b9:8c:a5: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:75:24:EC:0E:E7:25:E1:0F:76:0D:6B:9A:6E:0E:19:14:9A:43:F6 X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a4:97:fd:04:bd:10:f7:82:ce:3f:0c:92:de:de:d7:b4:98: 45:6f:25:2f:46:51:6d:3b:05:c5:fa:04:73:16:6c:0b:55:a9: 55:6c:70:f9:a0:31:ef:ee:e0:7c:ce:6a:9d:d2:98:74:84:fb: f7:33:a7:fa:06:90:76:08:71:f8:dc:1b:3a:37:fd:52:51:41: fd:30:e9:47:ee:96:cb:b0:6a:a0:60:fd:43:20:aa:02:cf:6f: 6e:c6:84:3d:5a:af:7c:b8:17:02:4e:64:be:90:06:69:83:49: 95:cf:7d:2a:4c:f4:9e:9e:06:08:da:40:81:91:b9:ab:89:74: 2e:89:c9:7b:6d:41:65:17:c9:b6:68:78:d7:c6:14:af:6b:8d: 15:d3:5b:10:09:20:45:2a:51:56:39:67:11:70:f5:fd:93:1f: f4:fb:f4:9f:0c:48:92:d4:c2:04:58:de:d5:2b:cb:5d:1f:87: 25:10:81:56:5f:76:26:c1:08:34:b7:80:60:fa:5c:8b:fb:d7: 60:2e:01:9e:d4:1b:95:de:3c:66:a9:a7:76:e4:f8:72:26:d6: 7e:a9:53:12:58:c1:d2:7a:06:b5:96:c4:c6:46:37:36:b8:d1: 38:82:37:63:62:c2:f8:4a:f2:53:f5:55:f0:30:13:ea:fa:b7: 20:0c:6e:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjUwODA4MjAyODU1WhcNMjUwODE1MjAyODU1WjAYMRYwFAYD VQQDEw02ODk2NWUwOC02NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcXVkmIQfRc8+tkrIvPUzKCPCV5gcVZB/13VDyGH5KGf8APK9x0ClmfWbJxI AmkAb9PpZ+xfZlZhR4hnXF28InlcBeTGhvJQOHKbH02LyEBl9E4hpiLzOl9QHSzC a/OfnBr5H7d8aEmLv6in2duQQia+DsqjCKi96ENZ73j86ujLM93zEZx/Zvn+a0Db DsdkBecgPyfyPCpIpKoAo+EKRbSppQWToZjrSDjyAZzKhaqcXYFAEPqYIMZocyOC 8tilOBTHtuQ7666w9vBxF7cRx6Lr6YIdsH/g/hxzSAnbQAol11olpWv+Ex1YhFgZ x9kcg1K0m1ogoycuO9C5jKXUTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN1JOwO 5yXhD3YNa5puDhkUmkP2MB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2pJf9BL0Q94LOPwyS3t7XtJhFbyUvRlFtOwXF+gRzFmwLValVbHD5 oDHv7uB8zmqd0ph0hPv3M6f6BpB2CHH43Bs6N/1SUUH9MOlH7pbLsGqgYP1DIKoC z29uxoQ9Wq98uBcCTmS+kAZpg0mVz30qTPSengYI2kCBkbmriXQuicl7bUFlF8m2 aHjXxhSva40V01sQCSBFKlFWOWcRcPX9kx/0+/SfDEiS1MIEWN7VK8tdH4clEIFW X3YmwQg0t4Bg+lyL+9dgLgGe1BuV3jxmqad25PhyJtZ+qVMSWMHSega1lsTGRjc2 uNE4gjdjYsL4SvJT9VXwMBPq+rcgDG7V -----END CERTIFICATE-----Generated at Sat Aug 9 10:52:58 2025 by rpki-client