$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json) Hash identifier: ymVszNf3WEQDzG3vt/8GZF3B/l0vt56ivUHEamvg/wc= Subject key identifier: D7:78:6B:9A:7D:B4:16:E2:1B:6F:D2:39:9A:FB:A4:68:11:0A:C5:25 Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 13D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft Manifest number: 13B5 Signing time: Fri 22 Aug 2025 17:05:53 +0000 Manifest this update: Fri 22 Aug 2025 17:05:53 +0000 Manifest next update: Fri 29 Aug 2025 17:05:53 +0000 Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: ZC4TdbW2mmZqz+rN87mbga165KjWJsTdMcSDh24fG40=) 2: 337C9CE4314C11F0845D2C39C4F9AE02.roa (hash: vrIMWDHbnqPNLJF4jHYmyNS+GSDUa49JaV3JBKcCD+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5075 (0x13d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Aug 22 17:05:53 2025 GMT Not After : Aug 29 17:05:53 2025 GMT Subject: CN=68a8a371-fe0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:c6:b4:08:93:4b:9f:30:ad:a2:e2:65:52: 3a:56:61:37:dd:13:12:f7:ac:0d:9f:ed:7e:02:3e: af:4c:ad:dc:95:79:cb:e1:a9:1e:b3:13:fd:96:6e: 1b:b7:47:91:ce:ab:35:e4:81:b4:b2:56:c1:fd:86: 5f:7c:3c:6f:21:e1:81:f7:d0:d1:d8:37:ff:57:92: 15:48:28:98:5a:02:7a:a2:aa:b4:40:18:0a:37:2a: 8e:00:f3:ad:df:14:99:ee:c9:70:38:bf:ce:2c:43: 68:ca:65:33:3a:22:04:03:33:7c:96:0a:ed:f4:14: cc:da:d3:26:a6:88:7e:be:57:2c:de:3f:ab:0b:7f: 1e:3c:63:7a:3c:3e:f0:a1:f9:ca:f4:4b:06:8d:25: f6:1a:0f:85:bd:62:be:71:84:2f:cb:1a:9e:e2:56: a2:81:ac:95:ce:70:8c:4b:67:b7:b6:61:48:83:24: 90:c6:66:32:c9:53:7f:1f:54:45:97:79:f3:8c:ce: 0a:6a:dc:7d:ad:f3:16:27:81:f4:98:7a:b6:56:45: 31:cd:e2:6c:63:a4:b6:e2:46:67:f7:76:b8:f4:c5: 93:71:d6:db:09:af:6f:da:14:b1:48:61:14:15:12: 48:fd:70:cf:f7:47:aa:e3:06:dd:28:df:06:25:2d: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:78:6B:9A:7D:B4:16:E2:1B:6F:D2:39:9A:FB:A4:68:11:0A:C5:25 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:fd:12:4f:4e:63:8c:37:9e:92:63:e2:ee:97:ca:01:2f:44: d4:e5:ae:34:72:cf:6e:d6:ac:0e:b0:de:60:e4:22:4d:32:f5: b8:ab:6a:d0:8c:e7:af:62:1f:4a:f3:b5:22:f2:f5:9a:3d:b3: a3:ac:69:91:6a:e4:64:46:eb:22:f7:3c:90:7c:9b:2b:34:98: 9b:cf:e9:e1:a0:fa:e1:d5:dc:dc:7e:ba:b7:d5:ef:d9:66:d6: ea:92:ca:9c:42:7b:d9:62:a8:b8:a9:b5:6c:6b:78:3f:d0:ab: 25:ee:46:6a:33:73:b3:92:c3:c2:1d:92:5a:8b:ff:4e:00:1d: 7f:65:15:f8:ad:59:17:85:9e:a1:de:3b:af:1f:52:53:91:64: 47:f9:aa:be:ce:da:dc:71:f3:4e:5d:10:cb:7d:8d:8d:ac:ba: ff:1e:16:45:72:28:9a:24:93:a8:eb:a9:59:ac:c2:76:85:cf: fa:ce:03:dd:33:ca:77:27:31:98:bc:71:2d:80:a4:d8:f9:3e: 37:03:39:71:89:1b:3e:f4:84:01:c4:e8:0f:8b:04:75:9e:95: aa:ae:e4:05:52:6e:23:38:9e:80:dd:80:dc:c5:cf:67:ff:af: 91:82:89:f2:b6:59:5f:40:ad:01:55:31:7b:45:c9:b0:07:8e: f0:cc:cf:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUwODIyMTcwNTUzWhcNMjUwODI5MTcwNTUzWjAYMRYwFAYD VQQDEw02OGE4YTM3MS1mZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxPGtAiTS58wraLiZVI6VmE33RMS96wNn+1+Aj6vTK3clXnL4akesxP9lm4b t0eRzqs15IG0slbB/YZffDxvIeGB99DR2Df/V5IVSCiYWgJ6oqq0QBgKNyqOAPOt 3xSZ7slwOL/OLENoymUzOiIEAzN8lgrt9BTM2tMmpoh+vlcs3j+rC38ePGN6PD7w ofnK9EsGjSX2Gg+FvWK+cYQvyxqe4laigayVznCMS2e3tmFIgySQxmYyyVN/H1RF l3nzjM4Katx9rfMWJ4H0mHq2VkUxzeJsY6S24kZn93a49MWTcdbbCa9v2hSxSGEU FRJI/XDP90eq4wbdKN8GJS1pUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd4a5p9 tBbiG2/SOZr7pGgRCsUlMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR dTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD/RJPTmOMN56SY+Lul8oBL0TU5a40cs9u1qwOsN5g5CJNMvW4q2rQ jOevYh9K87Ui8vWaPbOjrGmRauRkRusi9zyQfJsrNJibz+nhoPrh1dzcfrq31e/Z ZtbqksqcQnvZYqi4qbVsa3g/0Ksl7kZqM3OzksPCHZJai/9OAB1/ZRX4rVkXhZ6h 3juvH1JTkWRH+aq+ztrccfNOXRDLfY2NrLr/HhZFciiaJJOo66lZrMJ2hc/6zgPd M8p3JzGYvHEtgKTY+T43AzlxiRs+9IQBxOgPiwR1npWqruQFUm4jOJ6A3YDcxc9n /6+RgonytllfQK0BVTF7RcmwB47wzM8l -----END CERTIFICATE-----Generated at Sun Aug 24 03:04:12 2025 by rpki-client