$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: FuOVWPHxBVp4FViSQWxPHK67rZZqDRPLTSCXKXmrd9w= Subject key identifier: F7:41:4C:EB:2C:62:82:ED:A0:E9:E3:63:84:39:B2:8C:28:8C:49:7E Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 04ED Signing time: Fri 22 Aug 2025 23:54:52 +0000 Manifest this update: Fri 22 Aug 2025 23:54:52 +0000 Manifest next update: Fri 29 Aug 2025 23:54:52 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: mIvYDcm6OXtqYP3xadOh8jxud+7qo86ZKngHj+rEZqY=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: wh1NM+NSrXNgk+dMjusznA6q+s8v+UAafuQbIX3k9wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: Aug 22 23:54:52 2025 GMT Not After : Aug 29 23:54:52 2025 GMT Subject: CN=68a9034c-1bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:4d:41:96:70:42:f1:5d:e2:9d:f4:6a:7b: b1:9a:b4:73:5d:45:36:77:f8:f3:23:4b:97:36:43: f3:57:3c:12:1b:40:0e:22:5d:9e:4d:82:bc:51:8b: 82:49:00:ef:52:3c:3f:43:ef:59:c5:32:10:44:bf: bc:29:a2:b7:63:fe:33:f3:41:ef:c0:d7:ab:08:7a: 53:b4:c8:e3:87:7e:77:b7:dd:a1:e1:58:10:5c:43: 3e:71:57:f8:b5:1b:a7:ed:e8:ae:be:c4:eb:e0:d3: 04:09:13:0b:76:05:d5:f6:50:9f:fa:58:33:d4:16: 19:f2:6c:06:e5:7a:e5:5c:41:6e:9e:91:e8:22:7b: f8:10:aa:1b:6a:29:fa:ac:52:11:77:b7:cc:aa:82: 58:d0:6a:07:55:0d:04:39:7b:70:1a:9c:55:3a:5b: 5e:39:be:75:e5:51:3f:b3:b2:cf:c8:64:4a:ff:23: 26:10:ca:03:6d:d1:dc:42:d5:d5:d6:55:44:f6:04: f0:75:8c:fd:e1:11:ef:df:86:cb:f8:46:84:86:64: cf:e4:9c:34:94:86:e3:41:19:54:7c:dd:1a:35:ff: 95:03:ff:1b:1e:5c:d2:8d:85:dc:8b:83:6a:7b:f6: c1:64:7b:7e:05:86:97:ac:db:4b:91:20:7e:c8:94: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:41:4C:EB:2C:62:82:ED:A0:E9:E3:63:84:39:B2:8C:28:8C:49:7E X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f0:2f:35:14:a9:ce:70:0f:47:eb:c7:57:14:42:a6:8a:a1: b3:f8:9f:2c:05:54:67:df:61:17:df:0d:3f:95:3e:66:13:af: 73:ad:0d:84:c0:3f:51:c9:ab:b1:a8:2c:f9:7d:63:5f:72:4b: 53:64:68:04:a6:fb:f6:aa:d1:91:c5:20:9d:3c:b9:22:c6:fc: 59:b7:5a:b9:82:f3:c5:d5:55:e2:63:41:65:93:a4:3b:02:cf: ab:b5:70:19:d0:b5:bb:3b:53:b6:98:20:8d:90:6a:54:43:16: 3c:66:db:bf:56:cb:95:67:2d:ba:c6:80:64:4f:bb:5c:1d:f2: 06:52:75:00:f1:0a:f1:a0:53:00:99:9a:08:50:c0:0d:67:34: c2:00:d2:c3:36:a3:da:8c:08:d6:0d:9b:e3:5d:4f:cc:82:79: 95:2a:79:90:25:e6:7d:e4:27:89:fa:a3:a9:a4:38:13:21:b4: f8:5b:c9:65:d7:ca:2a:04:4c:ac:1b:db:ac:f1:19:e4:8f:f0: 76:5a:18:a2:89:c3:32:45:ef:9b:52:0e:ae:98:df:7c:3c:ce: fd:a8:a2:4b:99:96:44:b7:bf:fe:a4:c5:e5:09:45:23:55:21: 86:2a:7f:29:e1:8a:f6:45:3c:d4:5a:17:b4:68:c9:d6:5f:3a: b2:d1:80:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjUwODIyMjM1NDUyWhcNMjUwODI5MjM1NDUyWjAYMRYwFAYD VQQDEw02OGE5MDM0Yy0xYmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvihNQZZwQvFd4p30anuxmrRzXUU2d/jzI0uXNkPzVzwSG0AOIl2eTYK8UYuC SQDvUjw/Q+9ZxTIQRL+8KaK3Y/4z80HvwNerCHpTtMjjh353t92h4VgQXEM+cVf4 tRun7eiuvsTr4NMECRMLdgXV9lCf+lgz1BYZ8mwG5XrlXEFunpHoInv4EKobain6 rFIRd7fMqoJY0GoHVQ0EOXtwGpxVOlteOb515VE/s7LPyGRK/yMmEMoDbdHcQtXV 1lVE9gTwdYz94RHv34bL+EaEhmTP5Jw0lIbjQRlUfN0aNf+VA/8bHlzSjYXci4Nq e/bBZHt+BYaXrNtLkSB+yJSc0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdBTOss YoLtoOnjY4Q5sowojEl+MB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB68C81FKnOcA9H68dXFEKmiqGz+J8sBVRn32EX3w0/lT5mE69zrQ2E wD9RyauxqCz5fWNfcktTZGgEpvv2qtGRxSCdPLkixvxZt1q5gvPF1VXiY0Flk6Q7 As+rtXAZ0LW7O1O2mCCNkGpUQxY8Ztu/VsuVZy26xoBkT7tcHfIGUnUA8QrxoFMA mZoIUMANZzTCANLDNqPajAjWDZvjXU/MgnmVKnmQJeZ95CeJ+qOppDgTIbT4W8ll 18oqBEysG9us8Rnkj/B2WhiiicMyRe+bUg6umN98PM79qKJLmZZEt7/+pMXlCUUj VSGGKn8p4Yr2RTzUWhe0aMnWXzqy0YCa -----END CERTIFICATE-----Generated at Sat Aug 23 07:07:43 2025 by rpki-client