$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: s9XYebpj6tKgdZqnn6NbTanI/v5NmKLIWLAXPrwdZKs= Subject key identifier: 44:B3:CF:56:93:6B:78:05:F0:25:79:AF:16:D6:34:B6:A4:31:38:8F Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 095E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 094E Signing time: Fri 08 Aug 2025 20:31:35 +0000 Manifest this update: Fri 08 Aug 2025 20:31:34 +0000 Manifest next update: Fri 15 Aug 2025 20:31:34 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: VnN1056YLac5p2FddDLBBF+BeHVulK03HkJT6bgMsZM=) 2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: 1FGtJ70RwOEt2vELLPRWi7Z3eHoh6/fo9RZfKjZFNaM=) 3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: AKSEq1IptkG7ARfIThlwJQkrUndd8XeZnVMmB6yQVcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Aug 8 20:31:34 2025 GMT Not After : Aug 15 20:31:34 2025 GMT Subject: CN=68965ea7-ff29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:43:19:4e:97:f4:79:80:f6:45:c6:8c:d2: 9f:a0:6d:5f:f6:cf:e0:d0:cc:42:ed:7e:d3:39:3b: a2:cb:79:73:8a:8f:ef:4d:7e:aa:7f:2d:1d:80:9c: 6b:c7:d7:7f:56:33:08:93:3f:03:c9:40:ea:f2:8c: 4c:a9:a1:a7:08:8c:a4:b4:35:04:fd:9e:a1:98:2f: 35:d0:0c:10:f6:1e:7c:94:83:85:c8:67:d9:2f:67: c5:35:45:5d:b0:18:de:93:43:36:f7:cf:80:f0:34: c6:23:e2:31:9c:5b:53:b5:79:4b:0a:62:4c:47:2d: 34:c7:8a:cd:a8:19:3b:7e:af:7f:c8:bd:0c:4e:e1: 9f:f4:1d:05:cf:95:0d:d7:a3:d4:fc:6d:b0:c7:b8: b2:75:e2:c9:8f:98:6f:8b:d0:39:b2:35:88:a8:48: e0:fa:19:0a:14:c5:3a:8a:b1:24:54:f0:fc:8f:58: b2:7f:86:21:10:20:41:9d:fd:4a:34:a6:c3:c1:f4: 35:d7:9c:c0:f5:77:5d:d2:c2:9a:a3:d0:ed:a9:87: dc:90:80:d1:f2:30:6a:69:d5:f8:62:17:66:0f:ef: 9a:91:81:2d:d9:f0:0b:91:30:fc:4a:6c:6f:a6:23: e5:b4:29:4f:5c:ec:7b:4e:4b:42:e4:b5:95:72:a3: 59:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B3:CF:56:93:6B:78:05:F0:25:79:AF:16:D6:34:B6:A4:31:38:8F X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:71:9e:e6:7b:11:90:ae:6b:3d:ab:f1:64:cf:4e:f4:8c:d0: 92:43:4b:ef:1b:06:11:bd:67:47:d5:88:e1:fd:7d:c9:30:45: 43:08:4b:6b:60:4a:c1:2f:45:78:53:44:e4:69:2e:9e:a4:54: 8a:8e:c5:c3:ce:19:a7:e9:a0:d8:81:48:13:d5:cd:58:cd:b8: 0b:9d:15:17:d8:f3:a1:7e:6b:af:67:aa:28:09:71:f3:da:d6: 7a:97:51:1d:d9:41:ea:eb:e3:34:fa:fb:9f:32:de:eb:1a:4a: 80:a1:db:3b:e1:03:be:74:a2:c4:0d:4e:9d:09:17:57:c3:4f: 8e:96:69:71:76:09:68:ea:89:4d:16:3f:3f:dd:85:06:ec:bb: b0:25:c0:e5:6a:01:3b:e5:d9:14:1e:ad:88:36:4e:3e:7a:79: 5a:fc:59:6f:4f:f7:57:69:56:a3:2b:84:41:95:e7:28:1f:82: 34:77:67:23:34:6b:30:ea:43:8d:54:77:a4:89:f9:f0:9f:ac: 62:c5:ec:f2:d8:d6:c7:37:07:18:5e:6f:d9:b2:93:01:44:fa: 34:fc:45:1a:0b:32:12:66:6e:20:ca:58:ae:b5:3c:86:73:61: 1c:cf:79:08:f6:65:b8:b9:60:3c:65:6c:ce:74:09:e6:29:d5: 40:e4:92:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwODA4MjAzMTM0WhcNMjUwODE1MjAzMTM0WjAYMRYwFAYD VQQDEw02ODk2NWVhNy1mZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/pDGU6X9HmA9kXGjNKfoG1f9s/g0MxC7X7TOTuiy3lzio/vTX6qfy0dgJxr x9d/VjMIkz8DyUDq8oxMqaGnCIyktDUE/Z6hmC810AwQ9h58lIOFyGfZL2fFNUVd sBjek0M298+A8DTGI+IxnFtTtXlLCmJMRy00x4rNqBk7fq9/yL0MTuGf9B0Fz5UN 16PU/G2wx7iydeLJj5hvi9A5sjWIqEjg+hkKFMU6irEkVPD8j1iyf4YhECBBnf1K NKbDwfQ115zA9Xdd0sKao9DtqYfckIDR8jBqadX4YhdmD++akYEt2fALkTD8Smxv piPltClPXOx7TktC5LWVcqNZCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESzz1aT a3gF8CV5rxbWNLakMTiPMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjcZ7mexGQrms9q/Fkz070jNCSQ0vvGwYRvWdH1Yjh/X3JMEVDCEtr YErBL0V4U0TkaS6epFSKjsXDzhmn6aDYgUgT1c1YzbgLnRUX2POhfmuvZ6ooCXHz 2tZ6l1Ed2UHq6+M0+vufMt7rGkqAods74QO+dKLEDU6dCRdXw0+Olmlxdglo6olN Fj8/3YUG7LuwJcDlagE75dkUHq2INk4+enla/FlvT/dXaVajK4RBlecoH4I0d2cj NGsw6kONVHekifnwn6xixezy2NbHNwcYXm/ZspMBRPo0/EUaCzISZm4gyliutTyG c2Ecz3kI9mW4uWA8ZWzOdAnmKdVA5JJ5 -----END CERTIFICATE-----Generated at Sun Aug 10 19:54:00 2025 by rpki-client