$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: iOC8Q0Lb0wOZIpiR55gibfq+CIJGXxdt3yIQp7VORaE= Subject key identifier: 27:FF:A1:60:33:5D:5E:8F:16:97:F4:5D:C7:46:CE:AD:DC:E3:CB:51 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 11A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 119F Signing time: Tue 12 Aug 2025 17:19:20 +0000 Manifest this update: Tue 12 Aug 2025 17:19:20 +0000 Manifest next update: Tue 19 Aug 2025 17:19:20 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: Z6OoKYiy+QD2QTxzRacnBCs5cvgPHnwmee2BdBKpXNI=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 17:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4517 (0x11a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Aug 12 17:19:20 2025 GMT Not After : Aug 19 17:19:20 2025 GMT Subject: CN=689b7798-f559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:f8:2e:70:b0:06:38:f7:d8:2c:81:50:47: ca:ba:32:74:4c:cd:0a:ce:40:3e:cf:a1:ad:6d:d4: 3d:1b:73:8c:cd:da:08:13:10:23:b7:d0:65:ad:78: 96:03:f9:2a:dd:54:6d:3b:b4:2c:70:73:d9:90:d5: 89:c8:97:1a:58:4e:f3:e0:03:ac:51:2a:e3:59:08: 4d:6e:6c:3a:c8:57:de:89:53:ab:30:1d:c4:a4:56: 5c:2f:58:6f:97:59:be:e3:49:54:e4:36:35:42:7b: 13:1d:92:1a:11:08:0d:0a:18:15:f8:a8:37:c4:46: 42:84:84:49:5d:da:5a:89:6c:a6:95:d0:e9:8e:e0: 98:4a:cd:c5:63:cb:9b:1f:b6:1c:03:46:7d:4b:d0: aa:db:7a:4c:39:28:27:61:8c:ca:02:3a:cf:5d:dc: cc:7a:4b:b8:5d:d4:fc:7c:16:a0:85:02:85:90:66: 36:50:b0:1a:05:17:f9:b8:ea:bb:9c:70:5c:37:64: 53:70:b6:47:10:4c:c2:bc:fa:19:09:53:01:c8:a6: a0:bf:56:02:20:f0:bd:3e:23:70:16:44:9f:da:e9: 0b:d8:83:a9:70:e9:38:36:94:c3:f2:1b:a8:d3:04: 74:ce:5b:5f:f2:fc:2c:1d:0c:d9:c7:0a:12:86:41: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FF:A1:60:33:5D:5E:8F:16:97:F4:5D:C7:46:CE:AD:DC:E3:CB:51 X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e0:b3:52:bc:95:76:63:55:97:7d:d0:c6:62:12:92:d6:05: 65:a0:52:a2:54:fd:23:70:91:92:de:27:e4:d6:1b:47:a4:5f: f2:4d:13:05:80:d5:20:6f:09:7a:94:d5:6a:fb:b7:6f:5a:a3: 28:c9:b1:e5:1a:99:e6:1d:51:fe:fd:c4:aa:d0:3f:af:09:44: aa:04:90:1c:a0:a3:f3:e7:66:e7:3e:4e:29:dd:30:01:83:87: 63:64:92:df:c1:18:a8:2c:50:fb:2c:39:fb:43:b0:59:a5:24: 4b:4a:71:a0:8f:03:c2:76:66:83:9b:ba:86:27:aa:c2:65:3c: 5e:5a:17:b9:db:ab:9c:b9:5d:ef:66:6a:e8:a8:5f:20:67:db: 02:ef:3d:6e:53:a7:70:bb:26:06:15:f8:ef:6d:8e:d2:17:bc: 3a:dc:f5:88:36:fe:43:45:e5:96:87:cc:34:dc:a7:1e:3f:1e: 09:2f:36:d0:0b:bc:4a:50:ef:8d:2f:55:8b:54:c9:3f:f0:28: 7d:3c:ba:b4:db:8d:ef:c7:8d:0b:7d:ba:7c:89:19:d7:e9:a2: 8a:d4:b2:91:30:81:7d:73:4f:dc:79:ff:42:0d:5b:00:0e:11: 2e:80:a5:c1:b3:14:cb:f4:59:f0:fb:cd:c4:f1:8a:d9:76:a8: 41:b6:cb:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUwODEyMTcxOTIwWhcNMjUwODE5MTcxOTIwWjAYMRYwFAYD VQQDEw02ODliNzc5OC1mNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocH4LnCwBjj32CyBUEfKujJ0TM0KzkA+z6GtbdQ9G3OMzdoIExAjt9BlrXiW A/kq3VRtO7QscHPZkNWJyJcaWE7z4AOsUSrjWQhNbmw6yFfeiVOrMB3EpFZcL1hv l1m+40lU5DY1QnsTHZIaEQgNChgV+Kg3xEZChIRJXdpaiWymldDpjuCYSs3FY8ub H7YcA0Z9S9Cq23pMOSgnYYzKAjrPXdzMeku4XdT8fBaghQKFkGY2ULAaBRf5uOq7 nHBcN2RTcLZHEEzCvPoZCVMByKagv1YCIPC9PiNwFkSf2ukL2IOpcOk4NpTD8huo 0wR0zltf8vwsHQzZxwoShkEAAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCf/oWAz XV6PFpf0XcdGzq3c48tRMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT4LNSvJV2Y1WXfdDGYhKS1gVloFKiVP0jcJGS3ifk1htHpF/yTRMF gNUgbwl6lNVq+7dvWqMoybHlGpnmHVH+/cSq0D+vCUSqBJAcoKPz52bnPk4p3TAB g4djZJLfwRioLFD7LDn7Q7BZpSRLSnGgjwPCdmaDm7qGJ6rCZTxeWhe526ucuV3v ZmroqF8gZ9sC7z1uU6dwuyYGFfjvbY7SF7w63PWINv5DReWWh8w03KcePx4JLzbQ C7xKUO+NL1WLVMk/8Ch9PLq0243vx40Lfbp8iRnX6aKK1LKRMIF9c0/cef9CDVsA DhEugKXBsxTL9Fnw+83E8YrZdqhBtsso -----END CERTIFICATE-----Generated at Wed Aug 13 04:28:56 2025 by rpki-client