$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json) Hash identifier: NYrY6sXLaxc4kKEuqFM2XksuMWPH7XN7QYh8WoCOZ2Q= Subject key identifier: 1F:D6:FC:B1:A0:70:56:48:1A:B1:CA:96:D7:9D:CB:8A:D0:E6:C6:4D Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 0777 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft Manifest number: 0712 Signing time: Fri 22 Aug 2025 22:08:00 +0000 Manifest this update: Fri 22 Aug 2025 22:07:59 +0000 Manifest next update: Fri 29 Aug 2025 22:07:59 +0000 Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: ZZrHqmQ9YhAcAjFx1AzM3TGsmwJZ+78ZHXp+CpHrvHY=) 2: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: S6sSUQCmJtkaMtMbA1O0Mmg6DyeiEI+XUAJAroLQzw0=) 3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: 3GgLx+CbNEwoDetwa0xclFosAF0ThnHDNkGy9hkBwHY=) 4: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: gFTQhXxxWg+vWFd9YUvmY8166bjE5yYi7F/AL03zQaU=) 5: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: e4/df1ZKDr4aEamOFlzJbyomY0cdDHsDrVrwwMv17eI=) 6: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 4feN6gwvjlguQsUZ0+vuacffttVLy9DJIXoMNN8hWOI=) 7: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: zplnnTYrDs6ATh1oYF/06orqoqHtQxFtplLwmc2mqPA=) 8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: 53gHj/OrKFXtL8aMTpoTUjSuuGCGwdKOy6cQhgB55pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1911 (0x777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Aug 22 22:07:59 2025 GMT Not After : Aug 29 22:07:59 2025 GMT Subject: CN=68a8ea40-9e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:bf:75:db:4b:85:a0:55:ca:97:7c:19:b1: 9c:fd:0e:e8:5f:28:6d:ac:b7:0a:39:b0:73:24:c8: 30:f6:79:94:99:5f:46:a0:58:de:be:8d:13:0c:9c: 70:fc:cc:07:22:a3:f0:16:7f:25:55:59:64:1f:29: d9:f4:bd:a7:47:6e:12:47:8e:df:7c:08:c8:de:78: 58:8a:0d:dd:0e:4b:14:93:4b:cb:dc:f4:52:9d:9b: 0c:8a:5b:f7:31:6d:9e:b0:1d:30:01:0a:f6:c7:0a: 6d:b1:00:35:7f:17:62:ea:29:0a:47:da:de:f9:ce: 7d:1b:e5:74:ed:a1:8e:3c:05:26:4f:26:6f:54:07: 11:06:3a:7f:7f:a2:fc:82:28:b1:53:d3:b5:52:a3: db:ca:8a:02:5d:68:c1:1f:e2:24:06:f3:65:d4:94: c3:ad:f4:b2:1f:18:30:cc:3d:ed:4b:22:a9:96:aa: 38:bb:4c:7f:00:2d:04:fb:76:68:db:31:8f:7f:eb: ef:8a:a9:ff:c1:6d:dc:9e:2a:b3:73:b1:4f:dc:25: 49:48:dc:05:23:a3:9a:2b:ce:4a:3c:16:8c:12:a3: f2:29:bd:88:bc:94:da:e9:a4:a8:61:68:3b:64:af: b9:c1:4e:e9:4d:f4:ad:98:40:70:3a:61:b7:c4:c1: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:FC:B1:A0:70:56:48:1A:B1:CA:96:D7:9D:CB:8A:D0:E6:C6:4D X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:3c:36:47:55:5b:24:cb:7d:c0:e1:f9:22:42:f5:5f:3a:a6: 66:fd:08:f4:2e:34:03:cf:2e:61:be:9e:03:3e:dc:92:d6:a9: 7f:46:ec:46:aa:52:0b:23:22:78:a8:63:4c:33:11:23:11:ff: 4e:68:fe:71:cc:f5:11:f8:07:cf:b0:5e:b3:49:23:1f:fc:78: 6a:a9:47:63:f7:70:48:2e:23:49:55:87:4f:8e:b7:41:a6:d9: 38:1a:1a:45:00:f4:3f:92:96:74:a4:ca:b7:17:bb:89:a4:72: 94:fd:b5:84:64:ea:32:11:a3:88:a3:79:fe:b4:c9:71:ed:b5: 8e:cf:d5:a3:b7:a9:da:51:12:71:61:0f:e7:9c:db:10:26:0b: 33:8d:0d:a5:7a:4b:c6:99:42:a3:79:02:53:bc:42:7d:66:c5: 16:75:c7:98:61:80:1b:f7:da:9f:7e:04:df:11:60:52:4e:ef: 88:17:82:4b:67:3d:75:82:20:35:c1:36:2f:6a:57:03:8d:29: 18:60:a5:07:c0:36:fe:40:4b:98:e7:86:7a:2e:57:34:dc:5a: 8c:0b:ee:65:9f:63:cf:8a:c5:f5:46:cf:ea:87:62:f6:ba:05: e5:08:6d:cc:ee:bd:ba:39:4b:8a:e3:76:92:61:02:c3:34:b9: fd:57:8f:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUwODIyMjIwNzU5WhcNMjUwODI5MjIwNzU5WjAYMRYwFAYD VQQDEw02OGE4ZWE0MC05ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGK/ddtLhaBVypd8GbGc/Q7oXyhtrLcKObBzJMgw9nmUmV9GoFjevo0TDJxw /MwHIqPwFn8lVVlkHynZ9L2nR24SR47ffAjI3nhYig3dDksUk0vL3PRSnZsMilv3 MW2esB0wAQr2xwptsQA1fxdi6ikKR9re+c59G+V07aGOPAUmTyZvVAcRBjp/f6L8 giixU9O1UqPbyooCXWjBH+IkBvNl1JTDrfSyHxgwzD3tSyKplqo4u0x/AC0E+3Zo 2zGPf+vviqn/wW3cniqzc7FP3CVJSNwFI6OaK85KPBaMEqPyKb2IvJTa6aSoYWg7 ZK+5wU7pTfStmEBwOmG3xMGpswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/W/LGg cFZIGrHKltedy4rQ5sZNMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB NXFnTndTN2tJdjZMYmpZX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnPDZHVVsky33A4fkiQvVfOqZm/Qj0LjQDzy5hvp4DPtyS1ql/RuxG qlILIyJ4qGNMMxEjEf9OaP5xzPUR+AfPsF6zSSMf/HhqqUdj93BILiNJVYdPjrdB ptk4GhpFAPQ/kpZ0pMq3F7uJpHKU/bWEZOoyEaOIo3n+tMlx7bWOz9Wjt6naURJx YQ/nnNsQJgszjQ2lekvGmUKjeQJTvEJ9ZsUWdceYYYAb99qffgTfEWBSTu+IF4JL Zz11giA1wTYvalcDjSkYYKUHwDb+QEuY54Z6Llc03FqMC+5ln2PPisX1Rs/qh2L2 ugXlCG3M7r26OUuK43aSYQLDNLn9V4+8 -----END CERTIFICATE-----Generated at Sat Aug 23 20:39:17 2025 by rpki-client