$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: xaZlVQs+nkOtxN0OGQ8mHdizdOUFGQO8cppzjrKelr0= Subject key identifier: 61:25:BD:43:04:D4:10:88:53:C1:35:21:29:20:AF:83:92:D2:61:50 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1D43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1D2F Signing time: Fri 08 Aug 2025 16:17:52 +0000 Manifest this update: Fri 08 Aug 2025 16:17:51 +0000 Manifest next update: Fri 15 Aug 2025 16:17:51 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: IhIFTHyYV8MfSNxJwU3hvs6SJ3LQ1KiY07DBlBIe1i4=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: kc6Qio1nm2R7Nmekjn2RQdz6FiLOSkIgyD8v0SWSLok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7491 (0x1d43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Aug 8 16:17:51 2025 GMT Not After : Aug 15 16:17:51 2025 GMT Subject: CN=68962330-97ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:e9:57:1e:f5:c5:76:f2:c5:2a:71:61:d8: 07:aa:bb:56:5d:54:cd:e4:9b:96:82:42:23:46:0d: 74:e7:1f:1a:9e:53:7e:ac:fe:03:bc:80:a9:07:01: 6b:ba:0e:86:5f:6a:a6:05:6f:1d:19:64:4a:87:24: 55:59:3e:16:79:05:bb:80:97:d6:77:44:57:25:20: c9:ba:3c:b2:63:85:c7:83:05:ff:e6:ce:18:54:3a: 74:30:26:ad:7a:15:3e:1d:b1:97:b0:b1:92:6f:ca: b0:af:5b:02:52:f4:89:be:56:aa:ac:d7:4c:db:59: b8:a4:37:0f:40:b7:c8:7c:8e:f2:cd:60:52:58:15: c7:b5:cb:67:9a:70:80:0a:89:a4:8d:7f:01:c8:6f: 66:fa:51:58:65:3a:a5:1a:d1:06:a5:95:19:09:67: e2:4d:c0:e0:bb:18:3a:2b:d1:e9:27:c7:a0:2f:95: f8:91:bb:e6:0f:cf:ca:e3:7e:ef:98:aa:ef:8b:f1: e8:af:4b:29:cb:af:d1:47:e3:81:33:66:0d:e6:69: b8:c2:97:24:59:c9:46:83:8f:95:29:b0:28:37:0b: c1:48:2c:3d:3d:18:36:3e:a6:4d:58:36:2f:6f:5e: 3b:8b:8e:b4:90:dd:88:2a:fa:e7:62:81:df:79:d8: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:25:BD:43:04:D4:10:88:53:C1:35:21:29:20:AF:83:92:D2:61:50 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ef:37:74:7a:f7:56:12:b4:74:52:f4:10:c0:b1:37:7b:33: 90:42:f0:69:4e:0b:69:2d:6b:72:da:aa:34:4e:6f:08:bc:a3: 77:75:05:68:2e:dc:71:82:2f:c3:be:06:51:39:c4:63:2d:1b: 76:66:43:e3:ae:dd:89:fe:11:02:a5:b4:79:79:b8:14:36:e4: d8:55:6b:82:f8:de:02:f3:3d:44:33:b8:86:1c:16:94:a0:cc: e3:fa:ca:93:0d:13:b6:43:4e:c8:1e:84:df:63:7a:46:ad:9c: 79:86:56:a3:dd:a3:f3:e1:a7:31:50:9f:70:58:1f:fc:7b:d8: fb:d5:cb:b6:7e:5d:33:36:0d:4b:4b:f3:89:17:ee:11:95:ca: a4:71:66:6e:e0:54:69:e7:2e:c1:d9:bb:cb:42:e1:3e:10:86: c0:1d:f1:9e:27:4a:33:f3:97:97:90:d0:25:ce:a5:0a:eb:c0: 54:c6:8e:72:6b:cf:b7:c0:bc:40:2b:25:87:aa:a6:31:f0:15: 5b:4d:b3:a9:30:4b:74:ea:6e:07:dc:4a:f7:8b:7c:5d:47:99: 63:07:25:f1:96:26:6f:b5:7d:ab:95:3e:fb:a1:26:18:65:8e: 38:cf:3d:59:a0:72:27:d4:6c:15:99:b2:18:db:a1:64:81:68: 8f:e5:07:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjUwODA4MTYxNzUxWhcNMjUwODE1MTYxNzUxWjAYMRYwFAYD VQQDEw02ODk2MjMzMC05N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMHpVx71xXbyxSpxYdgHqrtWXVTN5JuWgkIjRg105x8anlN+rP4DvICpBwFr ug6GX2qmBW8dGWRKhyRVWT4WeQW7gJfWd0RXJSDJujyyY4XHgwX/5s4YVDp0MCat ehU+HbGXsLGSb8qwr1sCUvSJvlaqrNdM21m4pDcPQLfIfI7yzWBSWBXHtctnmnCA ComkjX8ByG9m+lFYZTqlGtEGpZUZCWfiTcDguxg6K9HpJ8egL5X4kbvmD8/K437v mKrvi/Hor0spy6/RR+OBM2YN5mm4wpckWclGg4+VKbAoNwvBSCw9PRg2PqZNWDYv b147i460kN2IKvrnYoHfedjKPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGElvUME 1BCIU8E1ISkgr4OS0mFQMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA7zd0evdWErR0UvQQwLE3ezOQQvBpTgtpLWty2qo0Tm8IvKN3dQVo Ltxxgi/DvgZROcRjLRt2ZkPjrt2J/hECpbR5ebgUNuTYVWuC+N4C8z1EM7iGHBaU oMzj+sqTDRO2Q07IHoTfY3pGrZx5hlaj3aPz4acxUJ9wWB/8e9j71cu2fl0zNg1L S/OJF+4RlcqkcWZu4FRp5y7B2bvLQuE+EIbAHfGeJ0oz85eXkNAlzqUK68BUxo5y a8+3wLxAKyWHqqYx8BVbTbOpMEt06m4H3Er3i3xdR5ljByXxliZvtX2rlT77oSYY ZY44zz1ZoHIn1GwVmbIY26FkgWiP5QcV -----END CERTIFICATE-----Generated at Fri Aug 8 20:42:16 2025 by rpki-client