$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: AY9HlxHdnMLdUR1m7bIfQkBTtEfIYRsHOaU3SCEpANk= Subject key identifier: CD:10:28:7C:66:E4:44:7D:9C:A9:51:B5:4C:74:B7:87:EB:9C:C7:58 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1ECC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1EB5 Signing time: Tue 12 Aug 2025 16:07:29 +0000 Manifest this update: Tue 12 Aug 2025 16:07:29 +0000 Manifest next update: Tue 19 Aug 2025 16:07:29 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: mOQYX0280Dkd0Zn4aHFzEiRoi1igcHjrmlVx2Pg+eng=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: h0HyLn8ocWGb9KjF4xTUCCRX3RLDUFI2FgHziz/KxqQ=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7884 (0x1ecc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Aug 12 16:07:29 2025 GMT Not After : Aug 19 16:07:29 2025 GMT Subject: CN=689b66c1-dfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:17:4e:f4:b9:e2:42:f0:22:23:f2:6a:9f: 5c:5e:31:27:a5:a1:66:e1:c4:9d:fc:5d:7d:6f:d3: 63:38:e6:59:49:92:81:4c:08:d4:03:2d:6c:6e:da: 31:14:ae:ff:3b:74:16:e5:ae:ea:e1:d4:12:37:ff: 99:84:39:5a:af:84:58:93:e3:0f:4c:2c:2b:fd:fb: f5:79:64:8e:f4:9a:4a:06:0a:63:33:02:2c:c2:25: ca:1b:cd:73:ac:d3:2a:6d:15:d3:74:c9:a7:80:e5: 66:b1:11:80:7a:63:2f:49:f5:04:60:e8:8c:6b:c2: 9f:89:28:6d:d2:06:45:70:50:10:48:c3:b1:0a:10: 67:80:50:18:54:f4:d8:22:f7:f4:00:05:eb:6c:cd: c5:db:ad:3b:67:7a:fc:76:10:f4:9a:2e:0d:7d:7c: c1:cd:fb:9a:7a:35:53:dd:99:a6:37:08:09:7e:00: de:b6:09:4e:87:c1:0b:22:15:90:cc:c2:70:4c:15: 94:1b:c1:d2:aa:65:64:11:01:b2:03:69:fa:e1:fd: da:e5:a6:e6:b2:5f:a1:8a:2c:bb:1d:3d:5f:c8:4b: ac:c6:2f:50:05:00:62:61:e2:5e:16:16:1e:2c:40: 82:04:9c:b8:0a:41:4a:68:7c:cc:f1:6b:85:68:a7: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:10:28:7C:66:E4:44:7D:9C:A9:51:B5:4C:74:B7:87:EB:9C:C7:58 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5d:5f:b1:7f:4a:93:bf:83:15:50:67:8e:b0:09:f5:7b:56: 66:6a:46:95:67:eb:b5:db:58:ad:f6:75:96:c5:4d:0e:7a:9f: 41:e2:99:2d:7d:ed:d1:ee:d7:fe:c5:ab:9e:6b:ec:69:16:d4: 27:54:fa:d3:66:2e:2f:4f:6a:35:43:2b:70:f2:35:3b:ec:ce: b2:2c:ee:f6:82:1b:fb:07:f3:5b:ac:46:05:e4:ef:77:a5:ae: 30:ed:72:71:4b:e1:82:a9:4f:e6:b5:8f:af:be:8f:1c:3b:30: 3e:1b:d6:d0:b5:eb:45:46:f1:24:8f:5f:24:66:53:7f:de:70: 8b:10:fa:3b:87:cd:ad:3a:c8:b0:0e:87:9c:3d:4c:04:d8:cf: c1:05:dc:3d:55:42:3f:e9:b9:8c:71:7c:09:df:61:58:b0:32: c4:bd:3a:6d:40:f7:12:d3:64:35:78:fe:f3:71:7b:2e:af:cf: 4a:83:b5:1e:14:85:06:f8:54:6b:dd:24:d1:a7:5f:2c:ec:bb: 59:f5:95:fd:1d:7c:4f:84:da:52:d7:b4:01:bb:85:ce:39:c8: 08:0f:3a:b9:fc:98:c0:d3:c4:f2:22:e0:30:74:85:c4:18:91: 4e:1a:82:b5:32:36:b2:70:3b:9e:d5:86:75:25:71:57:14:08: 4d:10:94:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjUwODEyMTYwNzI5WhcNMjUwODE5MTYwNzI5WjAYMRYwFAYD VQQDEw02ODliNjZjMS1kZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xwXTvS54kLwIiPyap9cXjEnpaFm4cSd/F19b9NjOOZZSZKBTAjUAy1sbtox FK7/O3QW5a7q4dQSN/+ZhDlar4RYk+MPTCwr/fv1eWSO9JpKBgpjMwIswiXKG81z rNMqbRXTdMmngOVmsRGAemMvSfUEYOiMa8KfiSht0gZFcFAQSMOxChBngFAYVPTY Ivf0AAXrbM3F2607Z3r8dhD0mi4NfXzBzfuaejVT3ZmmNwgJfgDetglOh8ELIhWQ zMJwTBWUG8HSqmVkEQGyA2n64f3a5abmsl+hiiy7HT1fyEusxi9QBQBiYeJeFhYe LECCBJy4CkFKaHzM8WuFaKelHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0QKHxm 5ER9nKlRtUx0t4frnMdYMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeXV+xf0qTv4MVUGeOsAn1e1ZmakaVZ+u121it9nWWxU0Oep9B4pkt fe3R7tf+xauea+xpFtQnVPrTZi4vT2o1Qytw8jU77M6yLO72ghv7B/NbrEYF5O93 pa4w7XJxS+GCqU/mtY+vvo8cOzA+G9bQtetFRvEkj18kZlN/3nCLEPo7h82tOsiw DoecPUwE2M/BBdw9VUI/6bmMcXwJ32FYsDLEvTptQPcS02Q1eP7zcXsur89Kg7Ue FIUG+FRr3STRp18s7LtZ9ZX9HXxPhNpS17QBu4XOOcgIDzq5/JjA08TyIuAwdIXE GJFOGoK1MjaycDue1YZ1JXFXFAhNEJRp -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:32 2025 by rpki-client