$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: Qk7ljr2PUnQwYZQ+w/xezfrpRE0PfWv2DBeODhftyIo= Subject key identifier: EB:00:13:11:09:F3:ED:B8:22:2F:B9:47:09:E1:A0:9F:AB:DF:3F:26 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 0573 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 0529 Signing time: Sat 09 Aug 2025 00:09:58 +0000 Manifest this update: Sat 09 Aug 2025 00:09:57 +0000 Manifest next update: Sat 16 Aug 2025 00:09:57 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: QILhOq7qzE+uqUo7bpo5VDdER3ooa96IaVUGVE+IBUo=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Aug 9 00:09:57 2025 GMT Not After : Aug 16 00:09:57 2025 GMT Subject: CN=689691d5-9c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:b5:6f:a7:11:6f:b9:b8:64:f6:7a:4c:a0: 1e:69:77:d4:c1:0b:ca:ec:99:4b:06:8b:d5:94:80: 3e:ed:6a:13:c0:06:d9:92:b6:e9:84:5c:5b:dc:09: db:d6:ee:bc:37:6a:07:79:f8:d1:a7:c0:05:20:0c: ee:5d:53:cf:21:a4:0f:79:1a:6c:92:55:50:43:37: 41:88:78:07:c0:c3:44:3b:99:df:6f:7b:cc:d7:e5: e7:f2:75:c3:87:44:f8:94:4c:1a:70:4d:f1:8e:1c: e2:ec:19:04:ad:24:f2:35:05:bd:36:d2:08:f8:ef: cb:a9:a2:2f:87:28:cc:26:82:72:09:57:8c:91:2b: b0:b7:21:9d:bc:55:17:da:66:e6:4c:9e:cc:1e:51: f2:98:0a:fc:b4:32:6e:f6:2f:4c:16:88:27:59:ef: c3:50:e1:9a:16:1e:0a:aa:aa:11:1f:48:b6:0e:99: fb:0c:0e:76:aa:78:e1:70:2f:7f:83:d5:9a:8d:18: 87:15:66:00:02:4f:cc:95:e6:67:4d:5b:67:32:b1: 50:7f:73:0d:65:39:8f:8d:b7:f8:8d:76:f3:e3:7e: 8d:f7:d0:5c:bc:9d:dd:ad:9d:f0:b1:ee:e9:5b:8c: 77:3d:25:0f:32:0c:08:98:94:54:63:2e:05:53:9d: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:00:13:11:09:F3:ED:B8:22:2F:B9:47:09:E1:A0:9F:AB:DF:3F:26 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6d:e7:3c:cf:32:7e:b9:fc:c3:68:9b:26:fb:26:d0:c5:f2: 83:e4:c2:e1:a1:3f:d7:31:cf:bb:d8:84:07:cb:ab:c8:b9:5e: 2d:2f:e7:94:4c:50:cb:d5:0d:eb:f4:33:18:c5:c1:cc:7a:16: 9a:01:87:a9:d2:8c:9c:b7:e6:87:72:3b:74:1a:c4:22:12:d1: 61:73:37:4b:2e:7f:d8:8b:3d:d8:9c:93:92:4a:5f:46:09:90: ec:b3:85:8f:8a:5c:23:26:36:ad:f8:7a:76:54:b1:ff:a5:c3: fb:3a:dc:69:05:90:ae:1a:c5:7b:e2:42:15:55:4e:f7:8a:54: 0c:1e:e9:77:4d:07:c6:82:c8:a7:96:fd:b3:59:7a:bf:70:74: 29:c0:b4:80:2c:f4:94:91:31:a4:97:7e:33:7c:95:ea:f6:1b: 60:50:88:54:fb:1a:09:84:28:c2:92:95:75:5b:5f:78:d1:ef: 34:b8:73:e4:b3:0f:5b:3b:53:c8:d2:50:23:95:58:56:22:7d: 27:95:6c:81:c2:57:25:28:f0:20:46:f3:c2:3d:30:d3:87:4b: 37:b3:f4:64:ca:3e:71:6c:fc:91:b5:92:51:70:57:70:bf:fc: f9:ba:64:1c:47:38:db:df:da:99:25:09:62:72:e0:83:f6:82: 31:43:7f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUwODA5MDAwOTU3WhcNMjUwODE2MDAwOTU3WjAYMRYwFAYD VQQDEw02ODk2OTFkNS05YzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUC1b6cRb7m4ZPZ6TKAeaXfUwQvK7JlLBovVlIA+7WoTwAbZkrbphFxb3Anb 1u68N2oHefjRp8AFIAzuXVPPIaQPeRpsklVQQzdBiHgHwMNEO5nfb3vM1+Xn8nXD h0T4lEwacE3xjhzi7BkErSTyNQW9NtII+O/LqaIvhyjMJoJyCVeMkSuwtyGdvFUX 2mbmTJ7MHlHymAr8tDJu9i9MFognWe/DUOGaFh4KqqoRH0i2Dpn7DA52qnjhcC9/ g9WajRiHFWYAAk/MleZnTVtnMrFQf3MNZTmPjbf4jXbz436N99BcvJ3drZ3wse7p W4x3PSUPMgwImJRUYy4FU513LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsAExEJ 8+24Ii+5RwnhoJ+r3z8mMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8bec8zzJ+ufzDaJsm+ybQxfKD5MLhoT/XMc+72IQHy6vIuV4tL+eU TFDL1Q3r9DMYxcHMehaaAYep0oyct+aHcjt0GsQiEtFhczdLLn/Yiz3YnJOSSl9G CZDss4WPilwjJjat+Hp2VLH/pcP7OtxpBZCuGsV74kIVVU73ilQMHul3TQfGgsin lv2zWXq/cHQpwLSALPSUkTGkl34zfJXq9htgUIhU+xoJhCjCkpV1W1940e80uHPk sw9bO1PI0lAjlVhWIn0nlWyBwlclKPAgRvPCPTDTh0s3s/Rkyj5xbPyRtZJRcFdw v/z5umQcRzjb39qZJQlicuCD9oIxQ39y -----END CERTIFICATE-----Generated at Sat Aug 9 10:44:26 2025 by rpki-client