$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json) Hash identifier: nwESukAwLPEj9jZms/a3equQ+aYNT1R68FWM5oP8fy4= Subject key identifier: 84:54:3B:2E:6D:13:00:E9:B3:BF:9D:4F:2C:17:CB:ED:A6:4A:F5:72 Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0E2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft Manifest number: 0E21 Signing time: Fri 08 Aug 2025 18:01:23 +0000 Manifest this update: Fri 08 Aug 2025 18:01:22 +0000 Manifest next update: Fri 15 Aug 2025 18:01:22 +0000 Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: 2u64dJhtKCMZPEYmik1CgYamMASvb2xDmLp25zXgDV0=) 2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: 1jbkg9LW6RgDfHIeGNZI/aPYd/3lSxoGjvv7ph3A8oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3627 (0xe2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Aug 8 18:01:22 2025 GMT Not After : Aug 15 18:01:22 2025 GMT Subject: CN=68963b73-0316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:78:17:4a:07:5f:82:7f:11:5e:80:19:98: 49:d4:94:94:0a:6e:f1:2b:5f:8d:61:b1:28:77:12: b3:ad:60:5f:84:af:8f:04:55:5d:c3:f2:16:b7:e0: a5:ff:0d:c6:61:ec:bf:d6:c2:6c:43:4a:2c:ab:ad: 04:88:11:a4:e0:39:93:a1:b4:b8:7a:5c:c8:fa:bf: f9:23:53:db:ca:51:48:c7:58:6e:f4:0b:9d:29:28: cb:96:58:7b:a6:21:37:42:cf:20:da:cd:ab:45:12: 59:24:04:f2:1d:eb:ed:67:87:6d:58:3f:a7:24:bb: c1:1c:69:4d:26:0a:e3:4d:58:2f:04:0f:73:6a:b5: a9:94:ae:26:86:50:ab:79:3a:23:6e:80:05:6e:59: 77:11:bd:8e:d2:02:38:1d:36:3d:4b:2e:c9:b0:df: f4:a9:12:85:14:c9:ec:b2:0e:dc:43:f6:c0:17:37: 34:41:5b:6b:b9:f1:78:b0:c0:c3:45:f4:1e:17:a9: 8f:13:ac:f4:ad:4f:51:2d:72:ef:62:34:a8:f1:52: f6:41:7f:38:c7:82:02:45:6f:58:2d:33:d7:93:a1: c1:49:d5:ab:df:dd:e1:da:51:8e:b9:c6:b1:d6:52: e4:8b:b6:23:ce:77:7f:90:3d:7f:66:a0:f8:60:ce: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:54:3B:2E:6D:13:00:E9:B3:BF:9D:4F:2C:17:CB:ED:A6:4A:F5:72 X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:35:28:21:f1:2e:a7:2c:66:65:34:21:46:5e:f0:f6:23:59: 89:5c:c9:e8:21:d3:1c:4d:34:d2:c8:9b:74:b2:de:09:08:f9: 0c:75:5b:7c:95:20:4a:ca:bf:8d:dd:7c:64:16:3c:04:24:2f: b1:e6:a2:c8:b0:1d:73:68:f5:96:d2:7d:08:9d:16:94:d8:6c: 38:45:db:fc:25:01:fc:4e:dc:69:8b:fc:2a:6a:36:18:04:8f: 82:74:c7:91:2c:08:d0:c2:c6:09:3f:8a:6a:90:71:ca:a1:e0: 24:3b:bf:c2:93:46:b9:c5:bc:f2:40:0c:55:e6:60:8f:8b:28: 32:72:cd:bf:7e:79:4d:b1:e9:3f:82:f3:b1:61:81:c8:bc:66: 7a:21:74:91:3d:59:3a:bf:2d:cc:37:a2:23:d4:35:1c:78:2a: e4:1e:73:64:b5:65:dd:51:bd:99:84:5a:ee:f1:86:ac:fc:47: d1:32:16:bf:be:c1:34:36:2c:7d:f3:43:01:a4:cc:b8:3c:4e: bf:3e:a6:73:92:07:e9:f1:48:18:0a:a4:41:47:48:8e:63:ee: 04:ce:63:cb:b3:da:5a:c4:6f:46:81:41:30:3e:b0:60:2f:7f: df:a1:19:76:97:97:b9:41:7c:3d:08:c5:53:ef:a7:80:28:2f: 31:af:b3:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjUwODA4MTgwMTIyWhcNMjUwODE1MTgwMTIyWjAYMRYwFAYD VQQDEw02ODk2M2I3My0wMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvp4F0oHX4J/EV6AGZhJ1JSUCm7xK1+NYbEodxKzrWBfhK+PBFVdw/IWt+Cl /w3GYey/1sJsQ0osq60EiBGk4DmTobS4elzI+r/5I1PbylFIx1hu9AudKSjLllh7 piE3Qs8g2s2rRRJZJATyHevtZ4dtWD+nJLvBHGlNJgrjTVgvBA9zarWplK4mhlCr eTojboAFbll3Eb2O0gI4HTY9Sy7JsN/0qRKFFMnssg7cQ/bAFzc0QVtrufF4sMDD RfQeF6mPE6z0rU9RLXLvYjSo8VL2QX84x4ICRW9YLTPXk6HBSdWr393h2lGOucax 1lLki7Yjznd/kD1/ZqD4YM7gswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRUOy5t EwDps7+dTywXy+2mSvVyMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF NFd6T01ocVdXcExHWVVSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrNSgh8S6nLGZlNCFGXvD2I1mJXMnoIdMcTTTSyJt0st4JCPkMdVt8 lSBKyr+N3XxkFjwEJC+x5qLIsB1zaPWW0n0InRaU2Gw4Rdv8JQH8Ttxpi/wqajYY BI+CdMeRLAjQwsYJP4pqkHHKoeAkO7/Ck0a5xbzyQAxV5mCPiygycs2/fnlNsek/ gvOxYYHIvGZ6IXSRPVk6vy3MN6Ij1DUceCrkHnNktWXdUb2ZhFru8Yas/EfRMha/ vsE0Nix980MBpMy4PE6/PqZzkgfp8UgYCqRBR0iOY+4EzmPLs9paxG9GgUEwPrBg L3/foRl2l5e5QXw9CMVT76eAKC8xr7NM -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:57 2025 by rpki-client