$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: m6wc7Ovc18pX97a+MBv2kwQa3s286AQXeqp6HvOBTKo= Subject key identifier: 53:4B:E3:CE:94:BB:C5:14:AC:C8:D2:D0:59:04:78:C2:10:A6:BC:44 Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0C15 Signing time: Fri 22 Aug 2025 18:50:43 +0000 Manifest this update: Fri 22 Aug 2025 18:50:42 +0000 Manifest next update: Fri 29 Aug 2025 18:50:42 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: 4cjidxMBtPSNo5RA58oJBxsEgzW8jRBS49T5WdobRG0=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: QTmQ+b0TWigH3ktAvPS5L4JGC6TmpCstJJc/am/VnB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: Aug 22 18:50:42 2025 GMT Not After : Aug 29 18:50:42 2025 GMT Subject: CN=68a8bc02-ccf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:5c:7c:1d:86:a6:72:26:9d:30:4a:d8:05: 30:17:06:d3:73:69:bc:6e:52:8d:5e:64:fc:fb:f3: c5:2c:f6:28:4d:20:9c:a4:b9:f8:47:f2:f1:9c:ee: e7:e3:3f:65:6c:3e:0f:df:80:1a:c6:3c:9f:16:fe: 92:cc:c7:8f:ab:50:23:aa:bd:d6:e3:3d:8b:e9:d2: 2c:d0:2a:eb:bd:ab:5f:1d:3f:0a:5d:d6:a4:a0:5a: 50:ea:5c:11:1a:da:e3:7f:a6:b8:34:00:66:e5:08: 30:27:f1:df:45:69:35:36:31:8b:d0:4a:82:6c:cc: 9a:a6:c1:94:d3:26:3a:cf:3f:4d:13:76:73:c6:26: ef:7e:13:8e:e0:7c:8d:59:15:cc:d1:c8:91:8e:07: 58:9b:2c:3d:8f:14:8f:09:02:ff:55:42:61:24:e2: 21:ab:3a:b8:c6:1a:1e:f9:50:87:e8:26:4e:f0:9f: 67:e8:ef:35:0c:4e:8b:76:eb:9c:46:8b:ff:44:9e: 7b:e9:a7:89:5c:1c:b7:e0:a5:df:21:18:d4:36:bc: 82:86:66:5c:75:50:67:c5:f9:60:30:82:43:cf:fc: 9f:36:f5:21:fe:4e:53:22:3a:30:6a:1e:2c:b2:71: 9d:24:93:b6:69:d9:0b:48:73:a6:f6:4d:18:c0:8e: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4B:E3:CE:94:BB:C5:14:AC:C8:D2:D0:59:04:78:C2:10:A6:BC:44 X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:74:60:fd:cb:67:da:38:27:1e:ba:c4:08:60:53:fe:d0:75: bd:47:41:97:e6:b4:56:97:f8:3f:4c:fd:30:17:bb:5c:51:90: af:40:06:7a:8c:4f:2b:cd:fc:f7:84:bf:e8:3b:4d:d5:ee:a5: e0:4f:ce:5b:d6:e6:20:21:ea:5c:2f:0d:5a:9e:7e:d5:3e:5b: 03:67:bb:ee:ad:29:98:30:91:9b:fc:33:2a:b0:eb:67:74:f3: fe:d2:73:01:92:78:7e:f5:c4:57:10:aa:83:c6:6a:17:fd:18: 03:3c:ea:c3:69:2e:9b:a0:3d:3e:9f:3a:f3:93:06:3b:ea:29: 96:3b:9e:20:7a:0a:7f:5d:d0:ad:9f:c4:48:3d:37:f2:ce:78: c9:b6:14:9c:4f:d9:0e:f0:d3:13:dd:3f:a6:40:ee:35:89:f6: 08:4f:eb:07:93:78:d7:e9:48:0c:60:92:15:50:00:18:ec:e8: f9:cd:1a:76:cf:9c:d1:2a:25:da:30:c8:cc:39:ed:af:f0:a2: 94:de:1c:ff:fa:c5:02:67:25:92:a7:b8:19:eb:23:be:4a:9e: c6:c1:35:04:5f:51:48:09:46:9e:d7:0d:88:5d:84:0e:8b:8d: b8:44:e1:52:34:f5:2a:e0:9b:65:20:de:fd:ab:4e:ac:fa:49: 56:51:51:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjUwODIyMTg1MDQyWhcNMjUwODI5MTg1MDQyWjAYMRYwFAYD VQQDEw02OGE4YmMwMi1jY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkBcfB2GpnImnTBK2AUwFwbTc2m8blKNXmT8+/PFLPYoTSCcpLn4R/LxnO7n 4z9lbD4P34AaxjyfFv6SzMePq1Ajqr3W4z2L6dIs0CrrvatfHT8KXdakoFpQ6lwR Gtrjf6a4NABm5QgwJ/HfRWk1NjGL0EqCbMyapsGU0yY6zz9NE3ZzxibvfhOO4HyN WRXM0ciRjgdYmyw9jxSPCQL/VUJhJOIhqzq4xhoe+VCH6CZO8J9n6O81DE6Lduuc Rov/RJ576aeJXBy34KXfIRjUNryChmZcdVBnxflgMIJDz/yfNvUh/k5TIjowah4s snGdJJO2adkLSHOm9k0YwI6WbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNL486U u8UUrMjS0FkEeMIQprxEMB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZdGD9y2faOCceusQIYFP+0HW9R0GX5rRWl/g/TP0wF7tcUZCvQAZ6 jE8rzfz3hL/oO03V7qXgT85b1uYgIepcLw1ann7VPlsDZ7vurSmYMJGb/DMqsOtn dPP+0nMBknh+9cRXEKqDxmoX/RgDPOrDaS6boD0+nzrzkwY76imWO54gegp/XdCt n8RIPTfyznjJthScT9kO8NMT3T+mQO41ifYIT+sHk3jX6UgMYJIVUAAY7Oj5zRp2 z5zRKiXaMMjMOe2v8KKU3hz/+sUCZyWSp7gZ6yO+Sp7GwTUEX1FICUae1w2IXYQO i424ROFSNPUq4JtlIN79q06s+klWUVGU -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:31 2025 by rpki-client