$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json) Hash identifier: 2w8kBVXbZCsUB1OmKadp+imkMA3t3HetXQ5uTjnO2LE= Subject key identifier: 45:C0:FE:F0:05:DE:EF:2B:68:CB:1A:2E:F5:D3:A2:B0:B3:D6:E6:A7 Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft Manifest number: 3E Signing time: Sat 09 Aug 2025 08:01:31 +0000 Manifest this update: Sat 09 Aug 2025 08:01:31 +0000 Manifest next update: Sat 16 Aug 2025 08:01:31 +0000 Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: Dq+NATTl08YbgfUXvNIbF535pLsU9gfOrOiKszbsXho=) 2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: bwDdjXPrVZtmIClbo9xqwN/iM/s96nIFHCKB+Vl9Hlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Validity Not Before: Aug 9 08:01:31 2025 GMT Not After : Aug 16 08:01:31 2025 GMT Subject: CN=6897005b-f496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:1c:94:1d:c7:c6:b2:bc:8e:84:f4:7a:a0: d4:66:b3:89:cc:52:bf:2a:3a:54:59:e9:b8:9a:01: 8f:e6:a6:0c:86:23:d6:b5:d7:6d:65:00:ac:10:6a: 41:9e:cb:ce:4a:fc:71:fc:e5:40:9d:da:f3:78:b6: 52:c4:d7:e0:66:3f:30:4c:66:57:46:50:a8:3a:72: 47:6f:35:75:97:71:ec:e3:d0:2d:f9:94:87:60:c4: af:e1:a5:d8:b1:6a:ac:0a:af:1f:c3:41:67:53:10: 21:39:4e:3e:6c:a1:c3:13:13:3c:5b:b1:37:e8:3a: 0c:83:0a:43:05:7d:f8:12:1d:43:20:f3:65:b0:bd: f4:e9:c1:d1:cb:35:1e:7c:58:a6:02:cd:28:74:c5: 79:c3:b6:37:9f:52:ae:22:e1:3b:90:c0:b5:da:ad: 6c:e6:c0:c2:ae:f8:fe:f6:58:5e:5a:77:0d:06:ec: 03:df:74:e3:f5:c3:13:e5:47:12:01:3c:4f:4f:2b: e2:e9:54:53:b4:24:a3:d4:db:1b:6b:30:bd:f0:3f: 2f:6d:06:48:6f:62:24:78:86:10:09:00:7e:22:f8: ea:fd:f1:7a:6e:d8:a4:70:8c:5b:32:24:e9:d1:d7: fb:b9:14:73:9b:cf:34:3b:ca:ab:df:c9:cc:d9:0f: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C0:FE:F0:05:DE:EF:2B:68:CB:1A:2E:F5:D3:A2:B0:B3:D6:E6:A7 X509v3 Authority Key Identifier: keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6a:2a:ef:3b:46:a0:b1:0f:25:c0:6f:19:cd:0c:09:c9:44: a0:d4:78:92:45:5f:f1:ff:2e:9e:f5:b4:46:ac:ba:dd:ed:45: 38:e1:78:60:d9:74:60:b6:e9:be:bd:77:d1:fa:72:7a:64:85: 64:4c:b4:19:0a:e6:18:36:e6:c6:1a:02:b5:cf:51:50:87:95: ec:fa:da:31:6e:76:c3:c2:65:b3:e7:25:c1:33:48:4f:31:0b: ff:98:10:a6:71:c6:36:d7:fd:c6:49:74:71:ab:5a:c7:57:33: 7b:51:a5:1d:6d:94:b0:cd:48:48:bc:a4:8d:0f:aa:be:4b:58: f4:67:8d:4b:16:ae:f0:e2:03:e8:1d:44:37:83:a6:5c:65:7a: 3b:19:f1:ce:47:6c:9c:5c:11:69:16:89:e3:7e:0c:2a:a1:f2: a6:76:ec:97:e9:5e:a6:0e:cd:27:93:cf:5b:90:2e:59:39:49: 25:c6:7b:02:28:1d:0e:78:7d:65:3c:f5:ef:26:9e:a0:fc:77: f6:1c:bc:12:b1:b6:99:32:a4:90:b2:d9:a7:8d:fb:b4:03:4f: fe:35:f3:e3:25:40:2c:b3:10:9d:05:b6:be:7f:24:e3:f5:0e: 93:9c:6f:0c:a7:6b:27:2b:9c:24:24:e0:5c:64:d2:b9:af:10: d8:9a:b6:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDNGOTExMC8GA1UEBRMoMzM2MkFDNThFREIxODlDRjI1NzgzQzI3RDkwQTdEMkZB MzI5NzdDNTAeFw0yNTA4MDkwODAxMzFaFw0yNTA4MTYwODAxMzFaMBgxFjAUBgNV BAMTDTY4OTcwMDViLWY0OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMMxyUHcfGsryOhPR6oNRms4nMUr8qOlRZ6biaAY/mpgyGI9a1121lAKwQakGe y85K/HH85UCd2vN4tlLE1+BmPzBMZldGUKg6ckdvNXWXcezj0C35lIdgxK/hpdix aqwKrx/DQWdTECE5Tj5socMTEzxbsTfoOgyDCkMFffgSHUMg82WwvfTpwdHLNR58 WKYCzSh0xXnDtjefUq4i4TuQwLXarWzmwMKu+P72WF5adw0G7APfdOP1wxPlRxIB PE9PK+LpVFO0JKPU2xtrML3wPy9tBkhvYiR4hhAJAH4i+Or98Xpu2KRwjFsyJOnR 1/u5FHObzzQ7yqvfyczZD2nRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURcD+8AXe 7ytoyxou9dOisLPW5qcwHwYDVR0jBBgwFoAUM2KsWO2xic8leDwn2Qp9L6Mpd8Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEM0Y5LzEyMjIzNkU2MThD NzExRjA4MDU0MTc3RUM0RjlBRTAyL00yS3NXTzJ4aWM4bGVEd24yUXA5TDZNcGQ4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTJLc1dPMnhpYzhsZUR3bjJRcDlMNk1wZDhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE M0Y5LzEyMjIzNkU2MThDNzExRjA4MDU0MTc3RUM0RjlBRTAyL00yS3NXTzJ4aWM4 bGVEd24yUXA5TDZNcGQ4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADxqKu87RqCxDyXAbxnNDAnJRKDUeJJFX/H/Lp71tEasut3tRTjheGDZ dGC26b69d9H6cnpkhWRMtBkK5hg25sYaArXPUVCHlez62jFudsPCZbPnJcEzSE8x C/+YEKZxxjbX/cZJdHGrWsdXM3tRpR1tlLDNSEi8pI0Pqr5LWPRnjUsWrvDiA+gd RDeDplxlejsZ8c5HbJxcEWkWieN+DCqh8qZ27JfpXqYOzSeTz1uQLlk5SSXGewIo HQ54fWU89e8mnqD8d/YcvBKxtpkypJCy2aeN+7QDT/418+MlQCyzEJ0Ftr5/JOP1 DpOcbwynaycrnCQk4Fxk0rmvENiatuc= -----END CERTIFICATE-----Generated at Sat Aug 9 23:27:49 2025 by rpki-client