$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: 3eYd4W/UUaVBSxc3nz+PjcRZZG3O2dgbioLBo1Fz8b0= Subject key identifier: A7:FD:71:F6:C2:ED:FD:2D:05:BD:AC:22:53:AE:F8:2D:E8:15:FC:BC Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 0421 Signing time: Mon 11 Aug 2025 00:34:07 +0000 Manifest this update: Mon 11 Aug 2025 00:34:07 +0000 Manifest next update: Mon 18 Aug 2025 00:34:07 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: dpo9LrmViWtnSMpcS+YvvA8HQ04asX/jgCMatjcF604=) 2: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M67wvRNu5yJc0PmvdrXe9QBiktT/1OOEAW8u7AyC62Q=) 3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: zLlFP29fbev002DflF+TA3Qjdh6cZ72DZUDF3K/hrT8=) 4: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Aug 11 00:34:07 2025 GMT Not After : Aug 18 00:34:07 2025 GMT Subject: CN=68993a7f-9b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:ab:31:f4:db:e4:7b:7e:40:b6:ed:36:01: 8e:da:c4:49:b3:d2:6e:48:8d:f9:a9:37:8a:09:65: b7:15:ed:fa:d5:71:da:91:c4:a5:cb:02:38:cd:bb: b3:c1:6d:53:ca:e3:92:b3:1f:a6:f2:75:81:f0:e5: 56:75:7f:1c:fd:e9:e9:3f:27:68:c4:c0:c5:66:e8: 44:59:6e:63:2c:54:91:a4:82:db:40:95:1b:cd:8a: 75:97:0c:f2:3b:97:9a:17:7a:28:34:88:f5:30:ca: a5:ce:25:4e:da:90:62:ba:e6:83:e6:19:b6:9e:d3: cc:07:fd:a5:e6:55:18:36:cf:cc:ea:6d:37:18:8a: f8:32:6d:a8:73:78:48:5f:0f:9a:c1:0a:ce:b2:f3: fe:13:d1:cf:77:f3:37:cd:1c:5f:45:ed:54:0f:f1: c5:ba:d1:2c:d7:08:f5:dc:b9:95:25:17:ca:44:b5: 5c:cb:5a:7a:39:92:fa:86:c6:6d:b1:09:e7:e0:5e: 7c:28:64:c1:6a:cf:24:31:3b:f8:50:e0:3b:72:6c: 85:8c:e1:31:51:87:d7:0c:e2:c2:61:bb:48:ba:c9: 56:ba:b9:df:14:49:3d:7d:d5:cb:8a:d6:0e:8b:79: 23:c0:ce:00:64:91:a5:f3:86:48:53:e5:31:ac:40: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:71:F6:C2:ED:FD:2D:05:BD:AC:22:53:AE:F8:2D:E8:15:FC:BC X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:98:8c:01:e3:b2:13:28:cc:45:b8:7c:42:20:b2:c0:b7:63: 53:cb:43:bc:ba:ae:c9:e6:80:32:f4:b6:be:a6:a7:5c:ee:6b: 6f:ac:a0:54:f3:87:5b:fd:e4:3c:a3:67:73:5c:2a:2d:12:0d: 4e:1e:a4:56:bf:c7:3f:9a:1d:47:cb:e2:94:36:78:95:b8:59: 71:5f:70:5c:19:5c:47:b3:89:da:22:c4:f9:c8:9c:64:e0:07: db:36:cc:b3:3e:2b:cf:0a:7f:5e:2a:ee:76:2c:1f:ee:35:53: ed:7c:54:f4:64:25:46:94:d0:eb:16:49:c5:c5:db:2e:b2:a6: 42:c5:be:d8:30:b7:91:0d:e3:9c:6a:1f:7e:75:74:2d:b9:55: 7c:a5:d4:51:36:7d:78:fb:01:fd:d4:82:fb:74:19:28:a1:66: 09:bc:df:a8:93:e0:a1:af:d8:9d:df:5f:1f:be:df:c4:d0:33: 3d:32:84:f0:d6:9a:8f:2e:1f:89:95:39:5a:94:b8:97:69:b2: 88:98:66:09:ef:ca:42:cc:61:4a:f0:66:67:f5:15:1c:9f:67: 77:48:5a:42:35:27:11:6b:b8:6e:f6:b3:83:61:12:e7:69:90: 9a:0f:16:f4:de:c1:e1:b8:30:71:fe:44:4a:a2:08:a2:46:9c: 4c:26:5c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjUwODExMDAzNDA3WhcNMjUwODE4MDAzNDA3WjAYMRYwFAYD VQQDEw02ODk5M2E3Zi05YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc+rMfTb5Ht+QLbtNgGO2sRJs9JuSI35qTeKCWW3Fe361XHakcSlywI4zbuz wW1TyuOSsx+m8nWB8OVWdX8c/enpPydoxMDFZuhEWW5jLFSRpILbQJUbzYp1lwzy O5eaF3ooNIj1MMqlziVO2pBiuuaD5hm2ntPMB/2l5lUYNs/M6m03GIr4Mm2oc3hI Xw+awQrOsvP+E9HPd/M3zRxfRe1UD/HFutEs1wj13LmVJRfKRLVcy1p6OZL6hsZt sQnn4F58KGTBas8kMTv4UOA7cmyFjOExUYfXDOLCYbtIuslWurnfFEk9fdXLitYO i3kjwM4AZJGl84ZIU+UxrEAEOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf9cfbC 7f0tBb2sIlOu+C3oFfy8MB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcmIwB47ITKMxFuHxCILLAt2NTy0O8uq7J5oAy9La+pqdc7mtvrKBU 84db/eQ8o2dzXCotEg1OHqRWv8c/mh1Hy+KUNniVuFlxX3BcGVxHs4naIsT5yJxk 4AfbNsyzPivPCn9eKu52LB/uNVPtfFT0ZCVGlNDrFknFxdsusqZCxb7YMLeRDeOc ah9+dXQtuVV8pdRRNn14+wH91IL7dBkooWYJvN+ok+Chr9id318fvt/E0DM9MoTw 1pqPLh+JlTlalLiXabKImGYJ78pCzGFK8GZn9RUcn2d3SFpCNScRa7hu9rODYRLn aZCaDxb03sHhuDBx/kRKogiiRpxMJlzc -----END CERTIFICATE-----Generated at Mon Aug 11 04:18:32 2025 by rpki-client