$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json) Hash identifier: 765XQLHYQJQ0S49BqaXQsZxpqULNtdhCUiFRCH6jnSo= Subject key identifier: 59:2B:8D:26:B6:38:EB:3D:F5:1C:E1:F5:A5:F3:38:22:A3:C1:FA:2F Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft Manifest number: 01D1 Signing time: Sun 03 Aug 2025 03:11:08 +0000 Manifest this update: Sun 03 Aug 2025 03:11:07 +0000 Manifest next update: Sun 10 Aug 2025 03:11:07 +0000 Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: aNdNtov/SJm5vTDuQd9o60aR0XF+tv4dE0t74T1GnsA=) 2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: CsAbRFqHcEIzwNgcJyTBhfAP0i1+CDL52//CVRtHe84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Validity Not Before: Aug 3 03:11:07 2025 GMT Not After : Aug 10 03:11:07 2025 GMT Subject: CN=688ed34c-b284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:57:87:c5:b0:e2:bf:db:78:5c:9b:8d:e1:42: 00:90:08:4b:e3:c7:de:e8:83:22:e2:6f:fa:41:53: c5:76:ea:0a:64:b8:67:59:b5:7b:f4:41:81:0d:a8: ab:85:7c:e1:af:f5:6d:28:43:77:5b:f9:da:cc:d0: 39:75:87:2c:8f:d9:d1:b2:a9:05:f1:b2:86:1e:d5: 61:ca:f9:1b:61:32:fb:43:9f:99:30:56:f8:78:65: d6:f2:4c:a8:34:06:3c:d5:f9:20:a7:b6:91:ec:41: 32:5d:15:10:ac:d0:b2:96:4b:fa:8e:c6:88:ae:eb: 6a:82:00:93:df:bc:4d:34:5e:7c:32:89:8f:b9:b8: fa:f6:93:68:01:33:e8:10:d7:d3:f3:3e:7f:a7:f9: 68:ed:d3:e0:63:cf:14:fb:7b:5a:1a:11:81:f6:7d: d6:c3:f9:c0:02:dc:6e:70:18:48:68:14:e1:17:1f: 14:62:65:9a:79:89:c7:06:3e:33:99:6d:da:34:e7: 7b:5f:99:aa:f9:2d:82:46:8c:82:82:69:98:40:1c: 57:7c:d2:12:2c:b3:d0:3c:43:90:fb:08:cc:e8:5f: 46:ad:5c:b3:cb:46:07:28:9b:9d:09:81:a1:e8:5b: 00:52:4f:84:51:b1:fd:fb:e6:6a:94:99:e1:cb:8c: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:8D:26:B6:38:EB:3D:F5:1C:E1:F5:A5:F3:38:22:A3:C1:FA:2F X509v3 Authority Key Identifier: keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:2e:1e:8f:f2:a0:d7:b2:67:0d:b4:94:31:1c:08:1f:73:f3: 15:6f:70:aa:35:dd:08:c5:bf:f0:c5:9a:20:fd:d0:63:86:1b: 3c:80:ac:f1:78:48:09:5a:72:bb:38:49:f0:45:26:2e:1d:f1: 5b:29:75:46:fc:f8:40:59:01:b6:73:a4:9e:d2:5b:eb:f2:7f: 17:e2:43:c1:71:42:68:0a:65:8e:be:c0:1e:43:49:95:86:f1: 61:2d:89:14:29:2c:49:c7:7e:fc:88:ce:6a:b5:cf:70:4b:29: fa:9c:d3:0b:7a:d3:47:73:e8:70:12:a4:18:70:d5:a1:17:c2: fe:a1:31:f0:6e:ba:68:d9:4e:97:a8:bb:21:a6:3d:8b:41:9a: d2:56:a2:43:7d:8f:00:4b:15:4c:4b:67:01:1c:c2:c4:c6:ea: b2:99:b2:56:47:0a:bc:90:46:bb:e0:a4:36:ec:94:ce:b3:9a: c7:11:96:8a:1b:ab:40:c1:64:64:98:95:e5:f3:7a:79:5d:dd: 71:fb:17:f1:f6:fe:50:4b:50:fb:d1:45:8d:13:f3:6b:9d:cd: 21:9f:0c:95:14:ec:e3:8a:37:43:a8:2c:9b:b8:6b:22:37:68: fc:d1:48:33:b9:d8:ec:ae:62:23:8b:67:b6:77:b9:f7:6f:ff: 61:d1:95:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZEMkIxMTAvBgNVBAUTKEQ2MURDMTc4MDhGNThFMEY5OUIyODUyQ0U3NDg2MEY4 NTNDQjIwREIwHhcNMjUwODAzMDMxMTA3WhcNMjUwODEwMDMxMTA3WjAYMRYwFAYD VQQDEw02ODhlZDM0Yy1iMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31eHxbDiv9t4XJuN4UIAkAhL48fe6IMi4m/6QVPFduoKZLhnWbV79EGBDair hXzhr/VtKEN3W/nazNA5dYcsj9nRsqkF8bKGHtVhyvkbYTL7Q5+ZMFb4eGXW8kyo NAY81fkgp7aR7EEyXRUQrNCylkv6jsaIrutqggCT37xNNF58MomPubj69pNoATPo ENfT8z5/p/lo7dPgY88U+3taGhGB9n3Ww/nAAtxucBhIaBThFx8UYmWaeYnHBj4z mW3aNOd7X5mq+S2CRoyCgmmYQBxXfNISLLPQPEOQ+wjM6F9GrVyzy0YHKJudCYGh 6FsAUk+EUbH9++ZqlJnhy4zlLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkrjSa2 OOs99Rzh9aXzOCKjwfovMB8GA1UdIwQYMBaAFNYdwXgI9Y4PmbKFLOdIYPhTyyDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkQyQi8zRjg2RDc5QUE4 MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpnLVpzb1VzNTBoZy1GUExJ TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoM0JlQWoxamctWnNvVXM1MGhnLUZQTElOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkQyQi8zRjg2RDc5QUE4MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpn LVpzb1VzNTBoZy1GUExJTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Lh6P8qDXsmcNtJQxHAgfc/MVb3CqNd0Ixb/wxZog/dBjhhs8gKzx eEgJWnK7OEnwRSYuHfFbKXVG/PhAWQG2c6Se0lvr8n8X4kPBcUJoCmWOvsAeQ0mV hvFhLYkUKSxJx378iM5qtc9wSyn6nNMLetNHc+hwEqQYcNWhF8L+oTHwbrpo2U6X qLshpj2LQZrSVqJDfY8ASxVMS2cBHMLExuqymbJWRwq8kEa74KQ27JTOs5rHEZaK G6tAwWRkmJXl83p5Xd1x+xfx9v5QS1D70UWNE/Nrnc0hnwyVFOzjijdDqCybuGsi N2j80UgzudjsrmIji2e2d7n3b/9h0ZXf -----END CERTIFICATE-----Generated at Mon Aug 4 22:13:53 2025 by rpki-client