$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: Y5p8dyVnf8nwae5yyd6cdptrbAcarxFSw8fI6+HTFkU= Subject key identifier: 26:8E:54:9D:41:66:04:86:9F:55:9D:D1:C9:D1:FA:46:44:17:47:F6 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1D19 Signing time: Sun 10 Aug 2025 16:07:38 +0000 Manifest this update: Sun 10 Aug 2025 16:07:38 +0000 Manifest next update: Sun 17 Aug 2025 16:07:38 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: me3GqZeXJOUCPZgsugApp2B9JNIEIEG+FFqfFG4zewY=) 2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: fz4f6MmX7R6kRL2gcaEtaQrQoy9cdumfsJWJxUL1YME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7459 (0x1d23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Aug 10 16:07:38 2025 GMT Not After : Aug 17 16:07:38 2025 GMT Subject: CN=6898c3ca-0a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:1e:4c:4d:98:16:49:81:00:9c:9d:17:69: c9:4a:c7:ff:57:65:df:13:84:f8:4f:4d:11:70:1b: 53:b9:5c:bf:f1:27:f7:0e:be:3f:de:7f:f3:f5:d1: 17:f9:ee:30:c5:1d:47:ea:24:dc:83:22:92:91:5f: bd:22:1a:dd:13:ab:c6:47:61:19:a1:1a:b2:c8:9b: 0e:8d:3d:cd:de:0c:87:93:09:32:be:f5:36:54:17: 82:5f:91:dc:2a:a5:b8:8a:6d:c0:d8:27:97:d7:9b: 85:00:0e:38:08:ff:a6:b5:9e:e8:9c:74:84:fb:a1: 74:86:e2:2e:1e:f9:8b:33:64:e3:49:6d:8f:3a:c7: 0a:3d:b4:c6:80:1d:68:43:f6:09:31:e9:ac:b0:e5: 3c:dd:aa:12:b9:3b:92:10:44:39:8d:14:f1:c8:67: 64:d9:3c:05:4f:59:d5:3d:fc:8d:61:fd:13:cf:f4: 7c:37:20:0f:0b:fb:0a:22:fb:21:fe:bf:d0:c6:6f: 5f:23:7b:fb:8e:7f:d0:9d:cb:a3:a2:04:d5:62:23: 74:2f:1c:d5:28:f3:54:6f:a0:7e:a7:da:48:08:45: 1b:ea:28:a6:c0:25:a1:7b:04:fb:81:c1:36:0c:2a: 80:26:fc:66:8d:4f:9f:b5:f7:24:81:7e:82:7a:2d: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8E:54:9D:41:66:04:86:9F:55:9D:D1:C9:D1:FA:46:44:17:47:F6 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:cf:c0:ce:84:05:63:29:93:d4:13:99:f0:c2:3b:21:eb:b9: 45:a5:99:69:fb:71:cb:63:71:e7:7a:6d:cb:c3:74:75:fb:de: 59:a3:8e:da:4a:63:fd:91:9e:8a:72:61:dd:99:a2:19:cb:06: 3e:d2:3d:a9:2e:a3:a3:87:7b:82:c3:8e:89:d7:1f:3f:98:ec: c7:84:d3:ef:5a:19:62:63:2a:42:5b:c1:91:3d:9a:5d:02:cb: 2f:fe:7e:3b:9a:6f:00:9c:6c:5d:dd:50:22:7a:b5:f9:26:e6: 38:55:0c:c7:b2:8d:74:39:ef:79:23:80:22:57:20:c8:5d:c0: 1b:d7:fa:81:12:7d:17:30:d7:77:69:e6:82:70:aa:2a:14:7a: 9b:8c:6b:02:7c:2e:1f:90:21:c4:9f:2d:d8:37:58:75:e4:1d: 66:b4:33:c5:67:bf:6e:2b:e2:02:04:92:b6:0d:b1:ba:1f:6b: e7:e0:48:14:8c:21:bd:c2:36:57:55:34:d1:57:dc:ae:27:35: 5f:30:2b:4b:5a:72:b7:2d:18:4c:e1:92:20:a2:fb:7b:85:aa: c0:54:ca:d7:75:2a:2a:eb:83:59:16:bb:a6:5e:98:a9:82:27: e4:32:0d:f3:b2:12:3a:15:d0:1a:a5:e6:af:ff:f0:2f:94:44: 65:25:42:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjUwODEwMTYwNzM4WhcNMjUwODE3MTYwNzM4WjAYMRYwFAYD VQQDEw02ODk4YzNjYS0wYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWkeTE2YFkmBAJydF2nJSsf/V2XfE4T4T00RcBtTuVy/8Sf3Dr4/3n/z9dEX +e4wxR1H6iTcgyKSkV+9IhrdE6vGR2EZoRqyyJsOjT3N3gyHkwkyvvU2VBeCX5Hc KqW4im3A2CeX15uFAA44CP+mtZ7onHSE+6F0huIuHvmLM2TjSW2POscKPbTGgB1o Q/YJMemssOU83aoSuTuSEEQ5jRTxyGdk2TwFT1nVPfyNYf0Tz/R8NyAPC/sKIvsh /r/Qxm9fI3v7jn/QncujogTVYiN0LxzVKPNUb6B+p9pICEUb6iimwCWhewT7gcE2 DCqAJvxmjU+ftfckgX6Cei0T2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaOVJ1B ZgSGn1Wd0cnR+kZEF0f2MB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiz8DOhAVjKZPUE5nwwjsh67lFpZlp+3HLY3Hnem3Lw3R1+95Zo47a SmP9kZ6KcmHdmaIZywY+0j2pLqOjh3uCw46J1x8/mOzHhNPvWhliYypCW8GRPZpd Assv/n47mm8AnGxd3VAierX5JuY4VQzHso10Oe95I4AiVyDIXcAb1/qBEn0XMNd3 aeaCcKoqFHqbjGsCfC4fkCHEny3YN1h15B1mtDPFZ79uK+ICBJK2DbG6H2vn4EgU jCG9wjZXVTTRV9yuJzVfMCtLWnK3LRhM4ZIgovt7harAVMrXdSoq64NZFrumXpip gifkMg3zshI6FdAapeav//AvlERlJUJi -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:38 2025 by rpki-client