$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: jfstHvhFgazrAScP6Ty30IlQ9iZSv2Q/CQ8BuNOHSss= Subject key identifier: 12:E4:13:37:EA:D3:FD:6B:FE:41:8D:DA:81:EB:98:D4:E5:FB:8F:17 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 020A Signing time: Mon 11 Aug 2025 02:20:32 +0000 Manifest this update: Mon 11 Aug 2025 02:20:32 +0000 Manifest next update: Mon 18 Aug 2025 02:20:32 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: a00vNfZJ6d4mDEySxD3BITaEEDCZglsdWnsh+N0WZ+0=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: RxZVoTNoSPk+sPPkKG/4HF99n9loOp00db2bHVAlJ14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Aug 11 02:20:32 2025 GMT Not After : Aug 18 02:20:32 2025 GMT Subject: CN=68995370-9bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:18:2d:b1:1b:44:ac:9f:a2:40:04:bf:7f: a4:fd:50:92:ba:5c:d3:bf:12:e5:f6:79:d8:23:d1: 4f:29:f5:61:c3:fd:7d:23:de:2a:6e:22:56:40:d7: 96:8e:1f:de:b3:6d:31:22:6a:eb:d9:38:9a:9c:86: c5:e7:27:c2:2f:5a:a5:f3:3e:f5:29:ab:51:7e:c9: b4:4b:79:c7:0e:7a:29:03:17:de:8b:eb:f9:f7:08: 33:c6:0a:f8:68:08:2c:a5:c8:a7:ba:fd:eb:d6:93: 0c:d2:c2:51:27:c6:8d:23:1a:54:4c:da:3e:ed:51: 63:d4:a7:e7:34:31:a1:8a:6f:55:a7:6e:75:bc:2c: 46:cb:1a:57:a4:3a:23:13:91:ba:f9:db:da:6d:c8: b5:c6:7e:78:05:91:1a:83:89:49:55:02:5e:75:ea: fa:e4:37:a7:b3:a7:1e:a8:40:53:a9:db:d7:24:0e: d3:3d:f6:d1:ee:c8:af:fc:f4:b1:3c:8e:63:5c:fe: b1:ac:58:03:26:64:b5:62:65:22:d6:6d:64:56:00: 28:a2:57:96:9d:fc:aa:7a:be:9e:94:02:79:ed:8c: 76:3a:3f:c3:22:f2:b6:28:58:19:9e:9f:a3:38:f4: 57:74:20:d6:16:70:70:de:37:7d:08:e7:b7:49:d6: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E4:13:37:EA:D3:FD:6B:FE:41:8D:DA:81:EB:98:D4:E5:FB:8F:17 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:6a:96:4c:59:a1:fb:d4:3b:ac:b3:d7:ef:33:e7:99:c5:66: 7e:e9:a6:71:27:49:0c:3c:25:e6:92:48:48:72:5c:4a:68:a2: ae:5f:a9:79:a6:9f:7a:c9:35:f5:e5:da:50:70:b3:35:92:89: b9:78:ae:28:7e:81:fc:df:a4:fe:f9:18:cf:fb:87:e4:d2:b7: be:59:ae:5a:0f:03:7d:f0:e9:14:fe:8b:37:c3:24:a5:19:6a: f0:34:b3:48:fd:c6:d7:d1:c9:6a:2d:18:5a:4c:cf:9a:6a:3f: 99:ea:d8:46:5b:1a:5b:8f:d0:ec:7f:bf:86:6d:b8:c3:a6:3d: f4:fd:04:41:82:a1:16:3a:b7:86:ab:dd:a2:22:2e:cd:2a:98: 4e:57:fc:7c:61:c3:79:de:82:ef:5d:9d:f6:43:de:88:2b:89: 18:fb:0f:c1:31:1b:91:e1:96:a4:4b:e7:c1:3d:ee:84:62:3b: 92:d9:6e:61:80:63:0a:2d:b1:34:da:67:18:8a:9d:04:c1:f7: ac:55:5d:e6:e0:a5:d0:2c:35:e3:a8:3b:97:91:97:44:82:0b: ab:58:ae:bf:3e:86:9b:2b:73:a9:1c:ad:c1:83:e1:7f:a1:2c: 3c:87:72:d3:45:20:29:60:39:52:88:e7:2b:79:6e:bb:02:12: 76:f2:5f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUwODExMDIyMDMyWhcNMjUwODE4MDIyMDMyWjAYMRYwFAYD VQQDEw02ODk5NTM3MC05YmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFQYLbEbRKyfokAEv3+k/VCSulzTvxLl9nnYI9FPKfVhw/19I94qbiJWQNeW jh/es20xImrr2TianIbF5yfCL1ql8z71KatRfsm0S3nHDnopAxfei+v59wgzxgr4 aAgspcinuv3r1pMM0sJRJ8aNIxpUTNo+7VFj1KfnNDGhim9Vp251vCxGyxpXpDoj E5G6+dvabci1xn54BZEag4lJVQJeder65Dens6ceqEBTqdvXJA7TPfbR7siv/PSx PI5jXP6xrFgDJmS1YmUi1m1kVgAooleWnfyqer6elAJ57Yx2Oj/DIvK2KFgZnp+j OPRXdCDWFnBw3jd9COe3SdbYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLkEzfq 0/1r/kGN2oHrmNTl+48XMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSapZMWaH71Duss9fvM+eZxWZ+6aZxJ0kMPCXmkkhIclxKaKKuX6l5 pp96yTX15dpQcLM1kom5eK4ofoH836T++RjP+4fk0re+Wa5aDwN98OkU/os3wySl GWrwNLNI/cbX0clqLRhaTM+aaj+Z6thGWxpbj9Dsf7+GbbjDpj30/QRBgqEWOreG q92iIi7NKphOV/x8YcN53oLvXZ32Q96IK4kY+w/BMRuR4ZakS+fBPe6EYjuS2W5h gGMKLbE02mcYip0EwfesVV3m4KXQLDXjqDuXkZdEggurWK6/PoabK3OpHK3Bg+F/ oSw8h3LTRSApYDlSiOcreW67AhJ28l/S -----END CERTIFICATE-----Generated at Mon Aug 11 04:13:57 2025 by rpki-client