$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json) Hash identifier: 6s168G3x/8uXe5sOT3P5wtXa5yDQrZRRdfWAxr1CxbA= Subject key identifier: 0A:4E:0A:64:80:C3:A6:58:78:72:DA:B5:D4:22:B2:61:B1:CE:5D:CB Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft Manifest number: 0520 Signing time: Fri 22 Aug 2025 23:46:02 +0000 Manifest this update: Fri 22 Aug 2025 23:46:02 +0000 Manifest next update: Fri 29 Aug 2025 23:46:02 +0000 Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: m5kV44Cs9Q+dLqgQdHXWSSG8/OE2Nqv8ACmbK1HDlDg=) 2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: Xe+ld1uOyTTINEu5qOXliS5+W9Wqwt4es/Y7VM8UtHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Validity Not Before: Aug 22 23:46:02 2025 GMT Not After : Aug 29 23:46:02 2025 GMT Subject: CN=68a9013a-6f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:92:0a:b7:c9:65:5f:5c:4a:1a:d0:c6:e0:55: 19:b2:1d:76:0c:bc:ec:86:cb:49:fe:58:60:66:8c: 6d:46:52:9a:e8:35:25:7e:dd:d2:c0:ae:8d:fe:86: b7:c3:77:27:94:a3:dd:b2:13:c5:13:2b:c5:67:35: 33:1d:46:24:ae:55:f2:38:f7:d7:f0:93:c2:6d:96: 86:b5:16:19:3c:4d:15:3f:30:45:81:dd:ee:8c:2c: 49:80:8b:7d:2d:07:1a:87:9a:42:a9:c6:f8:93:ef: c8:66:cb:6b:87:85:97:01:a2:5b:ef:65:7e:3d:5e: a0:be:b9:fb:be:68:20:d4:e8:f6:fc:4b:c5:73:22: a2:ac:eb:1c:0d:f0:ce:ce:a6:06:7e:55:48:7f:a3: 38:26:4b:cb:4c:e3:53:bc:6b:75:77:ee:d2:ff:8f: 00:0c:5a:07:86:b3:db:f6:df:e0:d8:f2:50:66:59: 36:f4:03:f3:41:bf:38:ce:e9:1f:97:d1:4c:84:44: 4c:10:05:51:f5:1d:bb:b9:2f:7c:72:eb:ed:66:93: 79:8a:06:77:5d:8e:39:05:14:a1:51:18:80:64:55: 22:13:37:6f:31:86:22:4c:db:9a:89:3f:d5:85:23: 84:a3:e9:b6:00:36:ad:9b:df:b7:75:34:49:76:f0: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4E:0A:64:80:C3:A6:58:78:72:DA:B5:D4:22:B2:61:B1:CE:5D:CB X509v3 Authority Key Identifier: keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7d:76:5f:21:44:09:4f:52:46:36:3d:ef:66:de:0e:63:f1: 5f:5a:2d:ef:8b:10:f6:6a:8d:c9:a2:ca:f4:80:1b:00:b0:55: 19:5c:f6:48:17:ed:3b:e2:67:f3:49:fd:07:39:f8:01:66:9a: 63:98:46:f0:5d:d4:16:14:8f:92:b0:5b:3b:16:4b:49:7f:39: 7a:e8:b9:26:11:57:90:82:7d:7e:7b:58:dd:b8:67:ac:b0:2c: 67:1f:dc:de:5a:1d:32:7f:b6:d1:63:90:56:48:82:f0:3c:d1: f3:e8:5f:f9:13:cf:e9:2f:08:f6:2f:1d:92:33:3a:cf:3a:60: de:df:db:3d:13:ae:eb:c0:30:06:3f:90:aa:63:32:43:f9:e4: c3:70:e7:8f:12:2f:62:dd:e1:f4:ee:e9:28:0d:14:f4:dd:f2: da:65:9a:85:b8:3a:eb:39:ed:d6:1e:37:dc:70:be:d9:0d:37: a9:e0:1f:25:b8:c9:65:6c:d6:db:e0:74:5b:a3:4f:91:62:30: 32:01:b1:c1:88:cc:e8:70:5d:c9:56:e0:7d:f2:da:25:40:58: d1:44:d9:67:f2:1a:3e:dd:3a:b4:0c:12:1f:71:7c:d0:02:79: 30:37:d6:64:2a:69:18:c4:a8:73:02:b0:59:04:ea:f0:67:61: ef:3f:e3:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2 M0QxNkVENUYwHhcNMjUwODIyMjM0NjAyWhcNMjUwODI5MjM0NjAyWjAYMRYwFAYD VQQDEw02OGE5MDEzYS02Zjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJIKt8llX1xKGtDG4FUZsh12DLzshstJ/lhgZoxtRlKa6DUlft3SwK6N/oa3 w3cnlKPdshPFEyvFZzUzHUYkrlXyOPfX8JPCbZaGtRYZPE0VPzBFgd3ujCxJgIt9 LQcah5pCqcb4k+/IZstrh4WXAaJb72V+PV6gvrn7vmgg1Oj2/EvFcyKirOscDfDO zqYGflVIf6M4JkvLTONTvGt1d+7S/48ADFoHhrPb9t/g2PJQZlk29APzQb84zukf l9FMhERMEAVR9R27uS98cuvtZpN5igZ3XY45BRShURiAZFUiEzdvMYYiTNuaiT/V hSOEo+m2ADatm9+3dTRJdvDiyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApOCmSA w6ZYeHLatdQismGxzl3LMB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjExRS8wNkFGMUZCMjEzMTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xM ZGpyVllaa3JBOUZqMFc3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4fXZfIUQJT1JGNj3vZt4OY/FfWi3vixD2ao3Josr0gBsAsFUZXPZI F+074mfzSf0HOfgBZppjmEbwXdQWFI+SsFs7FktJfzl66LkmEVeQgn1+e1jduGes sCxnH9zeWh0yf7bRY5BWSILwPNHz6F/5E8/pLwj2Lx2SMzrPOmDe39s9E67rwDAG P5CqYzJD+eTDcOePEi9i3eH07ukoDRT03fLaZZqFuDrrOe3WHjfccL7ZDTep4B8l uMllbNbb4HRbo0+RYjAyAbHBiMzocF3JVuB98tolQFjRRNln8ho+3Tq0DBIfcXzQ AnkwN9ZkKmkYxKhzArBZBOrwZ2HvP+OC -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:58 2025 by rpki-client