$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: QDiYmVT6JbxqTEiRwLKFz8Pw8iOUasw2jkCclnZwvs8= Subject key identifier: E3:DE:5A:2A:88:FF:C6:4F:52:36:9A:75:7F:01:66:88:4C:65:5D:76 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 087C Signing time: Fri 08 Aug 2025 14:47:25 +0000 Manifest this update: Fri 08 Aug 2025 14:47:25 +0000 Manifest next update: Fri 15 Aug 2025 14:47:25 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: VNSv4mH+IU0PF6vFEWe4UtwJwN96G6+0MnLiExsoHVI=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: qF9QEK3QPpy3Uy+0VtrwIu1I68i1XFjo3G0NKyyWueo=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: 1TGK4JO2Zf1/5yi9BJnBuBHhCgKzzBchGgX4YKczTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Aug 8 14:47:25 2025 GMT Not After : Aug 15 14:47:25 2025 GMT Subject: CN=68960dfd-d01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:d7:17:95:56:51:a6:88:b7:b0:1a:e9:35: 0b:a4:21:7b:be:0f:5f:20:03:79:a7:6f:9b:6e:4b: 18:9e:c9:db:e8:63:56:6d:f3:1d:4c:e9:58:e6:f0: 1d:62:9f:25:69:fa:ab:08:98:34:b0:53:45:ce:c5: e3:ed:de:bd:c7:f8:09:88:e1:26:7e:7e:4a:c5:2a: 5c:61:7d:44:b8:ca:33:eb:22:44:0e:e0:f4:53:f5: 3e:04:2c:0a:24:40:d9:70:1a:61:81:cc:39:6e:40: 85:82:bd:a9:c6:e6:0b:28:dc:48:cc:e2:c6:20:bd: 94:78:2b:9e:6b:14:d0:44:da:90:c2:ff:5e:16:a9: 5c:93:a1:b1:4c:93:e4:d0:16:3d:e2:c1:e8:5a:d0: ba:95:41:c5:02:72:29:4a:b7:fe:af:d8:74:d9:b0: 71:33:c8:fa:d4:b2:68:0e:70:b2:0d:77:1c:4c:b3: 25:32:f6:17:54:be:57:26:90:44:3f:7d:50:aa:54: 13:64:35:b4:2e:a6:5c:0a:37:e9:00:1e:a4:96:43: a2:b0:1c:c5:14:25:b9:d8:d1:40:27:8b:02:8d:08: a5:ae:4a:6e:96:58:9a:e1:3e:30:ee:f8:93:b7:09: 79:2e:36:3b:77:46:db:b7:97:b4:84:f7:0d:99:a3: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DE:5A:2A:88:FF:C6:4F:52:36:9A:75:7F:01:66:88:4C:65:5D:76 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:97:15:cc:8e:ba:77:6f:e7:d9:34:7b:10:73:4d:90:5a:1a: 07:ae:3a:ab:ff:27:0c:d2:c9:43:a5:75:3b:e9:c7:28:e1:ee: d6:c1:d9:38:88:61:75:f3:07:6c:d2:3f:18:a7:41:ea:69:cd: 39:c5:b2:3b:52:c5:70:e7:99:69:2a:c5:3e:82:6d:73:be:9c: 79:5b:b7:28:e3:16:ad:55:eb:70:30:4f:9b:c5:6c:b3:00:8b: fc:d4:6f:76:76:51:54:d3:52:41:1d:7a:76:43:c2:78:d3:cb: 9f:c8:c8:68:8c:9c:99:f1:e9:6a:ad:d1:39:b1:01:e5:6b:21: 3b:70:85:2d:98:9f:1f:9d:0c:96:e6:11:e2:da:50:c4:09:8c: dd:bb:e1:61:1e:cc:99:9c:a4:98:29:a3:78:77:4a:33:20:ad: 7e:5a:a4:78:34:c2:58:83:9e:1b:21:49:f2:28:ef:07:6f:8e: 7e:96:cb:79:7d:b6:6c:ff:2a:f8:7c:9e:1b:1e:ff:6b:1b:f4: 5e:99:7d:6d:44:8f:bb:28:d9:78:36:95:9d:3d:7e:98:af:13: c1:ef:8e:cb:d5:78:06:f4:c8:5a:69:40:30:05:52:86:98:73: 54:bb:b9:c6:59:5a:87:88:ec:2c:6b:23:2b:57:c9:77:03:c0: 00:fc:bc:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwODA4MTQ0NzI1WhcNMjUwODE1MTQ0NzI1WjAYMRYwFAYD VQQDEw02ODk2MGRmZC1kMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L7XF5VWUaaIt7Aa6TULpCF7vg9fIAN5p2+bbksYnsnb6GNWbfMdTOlY5vAd Yp8lafqrCJg0sFNFzsXj7d69x/gJiOEmfn5KxSpcYX1EuMoz6yJEDuD0U/U+BCwK JEDZcBphgcw5bkCFgr2pxuYLKNxIzOLGIL2UeCueaxTQRNqQwv9eFqlck6GxTJPk 0BY94sHoWtC6lUHFAnIpSrf+r9h02bBxM8j61LJoDnCyDXccTLMlMvYXVL5XJpBE P31QqlQTZDW0LqZcCjfpAB6klkOisBzFFCW52NFAJ4sCjQilrkpullia4T4w7viT twl5LjY7d0bbt5e0hPcNmaNBLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPeWiqI /8ZPUjaadX8BZohMZV12MB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRlxXMjrp3b+fZNHsQc02QWhoHrjqr/ycM0slDpXU76cco4e7Wwdk4 iGF18wds0j8Yp0Hqac05xbI7UsVw55lpKsU+gm1zvpx5W7co4xatVetwME+bxWyz AIv81G92dlFU01JBHXp2Q8J408ufyMhojJyZ8elqrdE5sQHlayE7cIUtmJ8fnQyW 5hHi2lDECYzdu+FhHsyZnKSYKaN4d0ozIK1+WqR4NMJYg54bIUnyKO8Hb45+lst5 fbZs/yr4fJ4bHv9rG/RemX1tRI+7KNl4NpWdPX6YrxPB747L1XgG9MhaaUAwBVKG mHNUu7nGWVqHiOwsayMrV8l3A8AA/Lys -----END CERTIFICATE-----Generated at Sat Aug 9 02:57:18 2025 by rpki-client