$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json) Hash identifier: EEwYsXbz5i1C5tw0ZKoe7FVeX8tAW1n32qkybM4gnbA= Subject key identifier: 5C:4E:C7:57:E6:40:A6:8D:F6:9A:15:F3:44:EC:17:0E:FB:B0:BE:19 Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Certificate serial: 02DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft Manifest number: 02D7 Signing time: Sat 23 Aug 2025 01:35:29 +0000 Manifest this update: Sat 23 Aug 2025 01:35:29 +0000 Manifest next update: Sat 30 Aug 2025 01:35:29 +0000 Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: u5FvPFGoDGxx5HbNWatSsLpPepD4rY3YBk1NnE2h5jk=) 2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: 42NoXRc68AJI33l+b1k0SiSR1RteYpJ6pHpYeUhh2BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Validity Not Before: Aug 23 01:35:29 2025 GMT Not After : Aug 30 01:35:29 2025 GMT Subject: CN=68a91ae1-f1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0c:70:f2:66:e3:1b:8c:a9:8c:be:59:64:7f: 10:37:14:45:09:1c:0a:28:d3:56:8e:6c:c5:49:59: 0c:53:07:79:de:aa:d3:31:ba:b8:f1:6b:6a:b1:f5: 02:aa:8e:d3:30:f9:54:77:d9:87:11:49:a0:4c:92: a7:d1:14:b2:4a:28:4e:f7:f9:89:f3:41:42:1d:3e: 6e:e0:dd:62:91:e8:ab:06:bb:00:b9:9c:0d:a8:34: 4b:91:94:35:bf:af:04:bf:75:36:f8:90:99:9b:14: c2:6f:f5:d9:ed:32:2c:f1:0d:6f:92:4a:f1:26:6b: 5f:f0:b0:ff:7b:6b:97:72:43:ea:ab:00:3d:49:d8: 64:2d:e8:4a:4a:9c:f7:45:7b:05:4b:a0:4c:1f:7d: c1:d5:70:39:65:34:19:ad:05:bb:df:1c:26:fa:d6: 88:1e:ad:2a:e1:21:55:db:4b:9d:e4:95:26:01:3a: 29:9e:0f:f6:67:fd:e2:ae:c6:6c:e3:c5:92:1e:52: d2:e9:29:30:ac:58:1f:f5:1b:8d:30:98:b3:64:1a: 05:f3:c5:d7:6d:82:75:1d:b6:ce:6b:f1:cd:ce:74: 77:5c:db:36:e6:c7:45:c5:8a:65:2b:ef:77:d5:a0: c1:99:74:b2:ac:bc:f2:4a:72:c5:4a:fc:1e:21:87: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4E:C7:57:E6:40:A6:8D:F6:9A:15:F3:44:EC:17:0E:FB:B0:BE:19 X509v3 Authority Key Identifier: keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:94:9c:2b:f2:d2:b5:bd:7a:86:bb:4d:cb:e9:e7:7b:19: 11:ae:91:0e:af:89:d5:8f:c1:9c:5e:51:3e:05:14:7b:23:95: 9a:0d:97:ee:81:2a:99:6a:b9:94:e5:5b:37:cb:63:8c:d3:c2: c4:c8:43:88:d4:d3:64:5f:9e:80:f9:09:e9:af:af:55:7f:3c: 4e:43:92:28:ec:6e:7b:99:ff:23:ed:8f:94:2f:7b:67:0f:c5: 6e:15:ed:47:d1:9d:27:5c:03:ad:95:a7:86:56:8b:5f:b1:23: 13:4c:24:1f:0c:97:36:b4:0f:fd:d7:93:60:37:d2:90:87:2e: 20:f8:63:2d:b2:b1:ff:d9:7a:c5:06:32:08:96:fd:9d:07:91: 37:28:e6:87:2e:6e:e4:c6:73:b2:91:34:8c:05:55:c3:b8:72: e7:d6:ba:6f:5c:7b:9d:f9:a8:d7:76:ac:1a:1e:22:bc:4c:8f: 10:1f:62:fb:51:3d:26:41:f1:40:98:31:85:96:48:7c:a5:e8: 74:0e:b6:57:47:51:24:db:6d:37:fb:dc:a6:88:84:2a:10:cc: 37:0f:07:0d:00:44:24:a7:fd:b5:4b:e8:70:2c:c5:64:a5:9f: af:c9:c7:95:f3:46:8e:0a:95:ab:9e:6f:86:f3:07:06:8b:1b: 74:f3:2a:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5RUExMTAvBgNVBAUTKDdEM0REQjIwQUZGRTcxNEM4RjM1NDk2NTFDMUVFODBG NTU2MDExQjgwHhcNMjUwODIzMDEzNTI5WhcNMjUwODMwMDEzNTI5WjAYMRYwFAYD VQQDEw02OGE5MWFlMS1mMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gxw8mbjG4ypjL5ZZH8QNxRFCRwKKNNWjmzFSVkMUwd53qrTMbq48WtqsfUC qo7TMPlUd9mHEUmgTJKn0RSySihO9/mJ80FCHT5u4N1ikeirBrsAuZwNqDRLkZQ1 v68Ev3U2+JCZmxTCb/XZ7TIs8Q1vkkrxJmtf8LD/e2uXckPqqwA9SdhkLehKSpz3 RXsFS6BMH33B1XA5ZTQZrQW73xwm+taIHq0q4SFV20ud5JUmATopng/2Z/3irsZs 48WSHlLS6SkwrFgf9RuNMJizZBoF88XXbYJ1HbbOa/HNznR3XNs25sdFxYplK+93 1aDBmXSyrLzySnLFSvweIYe0xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxOx1fm QKaN9poV80TsFw77sL4ZMB8GA1UdIwQYMBaAFH092yCv/nFMjzVJZRwe6A9VYBG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTlFQS9EMjZDNDEyOEY4 RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNVeVBOVWxsSEI3b0QxVmdF YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUM2JJS18tY1V5UE5VbGxIQjdvRDFWZ0ViZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTlFQS9EMjZDNDEyOEY4RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNV eVBOVWxsSEI3b0QxVmdFYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA4pScK/LStb16hrtNy+nnexkRrpEOr4nVj8GcXlE+BRR7I5WaDZfu gSqZarmU5Vs3y2OM08LEyEOI1NNkX56A+Qnpr69VfzxOQ5Io7G57mf8j7Y+UL3tn D8VuFe1H0Z0nXAOtlaeGVotfsSMTTCQfDJc2tA/915NgN9KQhy4g+GMtsrH/2XrF BjIIlv2dB5E3KOaHLm7kxnOykTSMBVXDuHLn1rpvXHud+ajXdqwaHiK8TI8QH2L7 UT0mQfFAmDGFlkh8peh0DrZXR1Ek2203+9ymiIQqEMw3DwcNAEQkp/21S+hwLMVk pZ+vyceV80aOCpWrnm+G8wcGixt08yrz -----END CERTIFICATE-----Generated at Sun Aug 24 04:49:51 2025 by rpki-client