$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: SQwCvZ5J+IuJFzakvt4r9o8rOXTUZeXC9qs+IwmJHSo= Subject key identifier: FB:C9:49:57:77:8C:6D:73:37:EA:FC:C7:5E:10:92:A5:81:3C:C1:9E Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: FD Signing time: Mon 11 Aug 2025 05:19:20 +0000 Manifest this update: Mon 11 Aug 2025 05:19:19 +0000 Manifest next update: Mon 18 Aug 2025 05:19:19 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: pZYIw1Z1gm3RGFnM8Y5kktNoAWfFOL+k8kFUInrsKCs=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: oRCouiUpGQ/m6gpchET77aGzx6bi1ujY4xCm3A9vvYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Aug 11 05:19:19 2025 GMT Not After : Aug 18 05:19:19 2025 GMT Subject: CN=68997d58-f756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:ba:0e:d1:57:4d:64:8f:31:d9:ea:b8:77: c1:ce:05:b6:42:74:98:64:94:8b:d7:26:4b:d7:32: 03:bf:f9:12:b0:cf:fb:05:8b:71:4c:e2:35:f4:bc: 97:bf:99:69:87:b8:b3:d1:04:d8:cd:e4:1e:8c:e0: d1:a3:7d:53:46:1b:24:f2:a3:fe:e3:07:e2:07:ae: 01:3e:4b:cc:26:a2:34:bb:40:6e:95:3f:b3:ce:bd: ab:e4:c5:30:76:5b:80:7f:bd:69:94:fa:7c:4d:6c: 5f:d8:bf:aa:9e:9d:c4:34:cd:14:74:6c:f9:4d:ca: 5c:c1:1a:17:2b:82:e5:18:39:13:66:c4:1d:d6:43: 58:5a:5f:ff:2c:ee:5a:07:9d:df:57:76:33:a4:f9: 20:af:90:fd:ab:47:e8:ad:45:30:2f:a7:98:f4:1b: 49:cd:41:88:75:1c:3d:ea:9d:f1:d5:77:7c:98:15: d1:dd:94:3b:32:d2:68:8d:7f:ae:4c:24:ed:6b:1a: 25:d1:77:f5:75:c9:0d:dd:21:79:c4:13:43:9b:92: bb:13:9a:51:93:53:76:15:9d:a2:d5:59:ed:fa:07: e8:35:5f:d0:48:a2:9e:57:63:89:5f:20:54:a4:dd: 59:95:f6:3c:c7:20:47:a0:bf:81:78:6a:0e:fb:db: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C9:49:57:77:8C:6D:73:37:EA:FC:C7:5E:10:92:A5:81:3C:C1:9E X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:07:2f:b4:67:a9:42:f7:8d:0d:2b:2d:e9:94:55:50:5c:54: db:d4:97:68:19:bb:a3:3b:46:9a:1c:97:05:6e:53:61:ab:48: 5c:b6:ec:06:0d:c3:1d:69:85:22:fd:13:67:b2:67:f9:d5:3f: 75:e6:41:a8:8f:91:bd:ae:b6:d0:33:1d:80:aa:5a:00:bc:95: d8:65:0f:57:86:53:b4:94:eb:c2:3c:80:30:51:cd:83:fe:7e: 49:43:8f:15:90:3b:dc:2c:81:f9:4b:72:45:00:48:cc:2e:f9: 60:cd:3c:1e:7e:c2:9f:a8:0b:b5:10:d4:89:ac:9b:97:8d:c5: af:f5:6c:b1:b7:34:36:53:c0:8e:0d:36:a8:fc:93:1e:52:1e: 1a:41:62:dc:82:f4:e2:b1:de:17:fa:8a:82:01:87:39:c5:8c: b2:c8:39:60:14:ae:50:8d:6c:85:1b:d3:fa:17:4b:0c:a4:3d: 9e:1a:a4:5a:af:23:d5:2f:cc:e9:9e:fe:c2:28:c2:80:a3:46: 6e:fc:a8:22:b4:33:e2:d6:9b:fa:37:63:ec:fc:a7:d4:e1:f4: b1:67:ba:8d:61:ec:54:61:41:a2:5b:f5:a9:79:44:7a:0d:66: 07:79:5e:ab:ca:0e:1e:52:dc:0e:9d:64:6f:e8:2e:ed:d2:15: 8f:f4:19:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjUwODExMDUxOTE5WhcNMjUwODE4MDUxOTE5WjAYMRYwFAYD VQQDEw02ODk5N2Q1OC1mNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoq+6DtFXTWSPMdnquHfBzgW2QnSYZJSL1yZL1zIDv/kSsM/7BYtxTOI19LyX v5lph7iz0QTYzeQejODRo31TRhsk8qP+4wfiB64BPkvMJqI0u0BulT+zzr2r5MUw dluAf71plPp8TWxf2L+qnp3ENM0UdGz5TcpcwRoXK4LlGDkTZsQd1kNYWl//LO5a B53fV3YzpPkgr5D9q0forUUwL6eY9BtJzUGIdRw96p3x1Xd8mBXR3ZQ7MtJojX+u TCTtaxol0Xf1dckN3SF5xBNDm5K7E5pRk1N2FZ2i1Vnt+gfoNV/QSKKeV2OJXyBU pN1ZlfY8xyBHoL+BeGoO+9uyMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvJSVd3 jG1zN+r8x14QkqWBPMGeMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzBy+0Z6lC940NKy3plFVQXFTb1JdoGbujO0aaHJcFblNhq0hctuwG DcMdaYUi/RNnsmf51T915kGoj5G9rrbQMx2AqloAvJXYZQ9XhlO0lOvCPIAwUc2D /n5JQ48VkDvcLIH5S3JFAEjMLvlgzTwefsKfqAu1ENSJrJuXjcWv9WyxtzQ2U8CO DTao/JMeUh4aQWLcgvTisd4X+oqCAYc5xYyyyDlgFK5QjWyFG9P6F0sMpD2eGqRa ryPVL8zpnv7CKMKAo0Zu/KgitDPi1pv6N2Ps/KfU4fSxZ7qNYexUYUGiW/WpeUR6 DWYHeV6ryg4eUtwOnWRv6C7t0hWP9BmN -----END CERTIFICATE-----Generated at Wed Aug 13 05:30:15 2025 by rpki-client