$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: QPjmYe16YgESB1OqiSqdW4V2smQZVW/cjapFIp7Iu6I= Subject key identifier: 87:89:19:5E:C2:07:6D:A8:D4:49:46:2A:14:E8:5C:25:43:00:1B:FE Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0370 Signing time: Sat 09 Aug 2025 01:27:16 +0000 Manifest this update: Sat 09 Aug 2025 01:27:15 +0000 Manifest next update: Sat 16 Aug 2025 01:27:15 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: 6nawBqBZ/51KCPaLKVD2x5LsYGD55YvQhc15B3zKJVI=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Aug 9 01:27:15 2025 GMT Not After : Aug 16 01:27:15 2025 GMT Subject: CN=6896a3f4-7afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:fa:47:64:c8:2b:e6:c6:15:59:17:24:b4: db:57:5f:60:08:d7:b9:d9:96:9b:88:e6:6b:ce:e2: 54:24:98:6b:a4:d3:d0:13:37:f0:44:d0:8d:81:d1: d8:6e:9c:57:02:f1:e2:2e:15:0f:c3:a9:12:1b:35: 3b:45:eb:b4:63:c4:f8:ef:b1:df:2b:34:f4:1a:2f: a0:8c:62:6e:9c:63:a6:22:e7:c4:6d:cd:c1:74:de: 95:30:c3:d6:1e:18:3b:5f:ec:86:85:88:eb:2a:58: 6c:f9:9d:ba:3e:7a:92:ad:61:16:e0:08:9a:df:04: 84:ed:fc:2c:f2:60:93:e3:8a:0b:f8:c3:ef:3d:4e: 1f:53:94:21:81:ba:ed:5a:fa:03:eb:82:01:12:07: dc:ae:17:d7:08:11:50:0e:aa:14:ba:48:ee:da:77: 05:f8:7f:48:d3:7c:fb:b4:e5:68:ca:b0:12:3e:e8: b0:28:ca:4e:75:47:73:2f:22:88:e2:31:58:88:a2: 09:32:45:b9:ad:fd:d8:05:a0:90:91:48:8b:1a:c9: d4:3d:26:a3:f9:9e:2c:60:01:32:3d:7b:4e:60:bf: 60:67:a9:22:ee:e4:5a:e4:50:91:2f:4a:cb:2d:d3: 4a:2b:a2:1c:ac:c9:b8:a1:e2:bb:39:fa:7e:c2:2e: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:89:19:5E:C2:07:6D:A8:D4:49:46:2A:14:E8:5C:25:43:00:1B:FE X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5b:3e:98:1d:19:31:bf:20:ce:97:d0:88:fb:69:7d:77:a4: 4d:d1:8d:f3:53:5b:62:63:86:6f:db:34:f0:e6:0e:1c:42:48: 72:c5:5f:51:89:18:cb:29:56:e9:a9:8f:2d:af:46:d7:b7:db: fc:ec:f1:92:c3:2b:f5:11:dc:7f:ba:32:a7:1f:d5:34:62:d2: 1f:14:36:d6:e3:5a:f3:ed:0a:60:67:1b:c1:40:da:d6:78:34: 59:5f:3c:c6:43:d9:2a:3e:b3:58:6b:db:14:a8:fe:7d:39:9e: f1:52:c3:04:f2:7c:85:1a:39:c8:14:16:d2:fc:0b:6b:a9:fb: da:d9:41:07:8e:73:d7:da:4a:80:81:8f:ff:86:33:21:b1:92: 45:13:21:2e:20:d1:f5:2e:f6:74:86:9e:11:ca:e5:25:7b:ce: 03:37:94:0e:94:e2:6f:38:83:39:5b:aa:f7:7f:2c:ed:aa:c7: 1e:6a:19:27:35:1c:e5:40:e2:3c:6f:ff:3b:1b:f4:58:09:66: 66:2b:21:bc:57:56:0a:27:0c:e8:09:ee:64:2e:b2:23:4c:da: 09:0d:16:80:38:40:be:47:16:c0:b8:30:55:b8:bc:e0:07:41: 1b:d0:32:f8:7b:64:1c:c6:4f:a3:48:cb:32:06:fd:67:45:a9: 64:8c:6c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjUwODA5MDEyNzE1WhcNMjUwODE2MDEyNzE1WjAYMRYwFAYD VQQDEw02ODk2YTNmNC03YWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1X6R2TIK+bGFVkXJLTbV19gCNe52ZabiOZrzuJUJJhrpNPQEzfwRNCNgdHY bpxXAvHiLhUPw6kSGzU7Reu0Y8T477HfKzT0Gi+gjGJunGOmIufEbc3BdN6VMMPW Hhg7X+yGhYjrKlhs+Z26PnqSrWEW4Aia3wSE7fws8mCT44oL+MPvPU4fU5Qhgbrt WvoD64IBEgfcrhfXCBFQDqoUukju2ncF+H9I03z7tOVoyrASPuiwKMpOdUdzLyKI 4jFYiKIJMkW5rf3YBaCQkUiLGsnUPSaj+Z4sYAEyPXtOYL9gZ6ki7uRa5FCRL0rL LdNKK6IcrMm4oeK7Ofp+wi4NdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeJGV7C B22o1ElGKhToXCVDABv+MB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXWz6YHRkxvyDOl9CI+2l9d6RN0Y3zU1tiY4Zv2zTw5g4cQkhyxV9R iRjLKVbpqY8tr0bXt9v87PGSwyv1Edx/ujKnH9U0YtIfFDbW41rz7QpgZxvBQNrW eDRZXzzGQ9kqPrNYa9sUqP59OZ7xUsME8nyFGjnIFBbS/Atrqfva2UEHjnPX2kqA gY//hjMhsZJFEyEuINH1LvZ0hp4RyuUle84DN5QOlOJvOIM5W6r3fyztqsceahkn NRzlQOI8b/87G/RYCWZmKyG8V1YKJwzoCe5kLrIjTNoJDRaAOEC+RxbAuDBVuLzg B0Eb0DL4e2Qcxk+jSMsyBv1nRalkjGzc -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:43 2025 by rpki-client