$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json) Hash identifier: 1GIDWZl2Gz0bYc0qVY0kdWt6AQ95Rnmvk1uo4T4oqfM= Subject key identifier: DA:FB:7C:E7:35:85:01:49:BD:BB:1C:3D:66:D3:39:E7:F6:48:F9:B9 Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft Manifest number: 34E0 Signing time: Fri 22 Aug 2025 14:49:02 +0000 Manifest this update: Fri 22 Aug 2025 14:49:01 +0000 Manifest next update: Fri 29 Aug 2025 14:49:01 +0000 Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: t/LWLF7wWfqtr8uxDepqyK2+ETHoHN+asbO5xxFcVHc=) 2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: y1aP2xpWM5Z9p4X69/I0EqD92yLEHPJ0HdxDyd7A8wI=) 3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: aTe2/qHECp604MTOZNBT11/TWC/3VIpR1RLRNWUq1YA=) 4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: 059V5evvVlwvqhYmAH8RCR6WncgUFs2g2N8S+IGfKUE=) 5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: jtNYB2wRKxdcsyRMOMGrPRMxmPYLg6mXDKTfhKPhrtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Validity Not Before: Aug 22 14:49:01 2025 GMT Not After : Aug 29 14:49:01 2025 GMT Subject: CN=68a8835d-a635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:a1:96:01:14:45:e2:a3:c3:22:24:db:1f: 5b:01:e4:f3:5e:16:03:00:2a:13:c5:09:58:eb:4d: 47:95:90:af:a3:75:77:b0:9e:7e:c0:af:d5:cf:aa: e0:bb:57:67:32:99:20:ea:a2:e7:9c:c8:a2:86:f6: 9c:5e:f6:99:fb:d7:cf:0b:24:a8:66:ed:e0:0d:5b: 92:5f:7d:4d:79:43:b5:7c:9a:cd:8c:ce:85:39:fb: 10:a3:21:a5:e9:63:33:20:1f:bf:1b:65:5a:e7:bd: 1a:85:c3:c9:fa:10:e0:79:01:eb:8e:d0:66:23:2c: bb:fb:2a:dc:73:0f:cb:f5:d9:37:e3:ec:69:8b:51: 44:99:04:74:16:25:20:e8:0e:5a:c3:01:bf:5b:39: 9d:59:f7:c1:2a:ca:6b:24:3e:ad:a9:f4:12:95:e2: 43:ae:97:2a:32:95:79:96:94:72:e5:a5:60:54:59: d1:f7:26:1b:80:0d:7d:ea:96:81:8f:7c:80:a8:35: 85:d9:85:ec:43:d4:a6:bb:2f:72:67:5d:9c:f6:2a: 51:73:31:ce:7f:d3:c5:1d:38:c0:bd:45:bd:e8:bd: dd:7c:41:2a:e8:51:d4:a7:e8:db:a2:25:ec:30:c4: 7f:da:51:62:10:53:05:d6:e2:e0:b7:fc:74:de:2b: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FB:7C:E7:35:85:01:49:BD:BB:1C:3D:66:D3:39:E7:F6:48:F9:B9 X509v3 Authority Key Identifier: keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:3d:0e:b0:fb:5b:2b:b2:fd:64:c5:69:c4:c6:33:5a:37:5d: b6:41:3b:9e:07:ef:ed:84:af:47:cb:13:89:11:f9:3b:dd:41: 63:49:c4:cc:72:78:ea:f4:3a:08:9e:f0:2e:6e:e6:68:85:55: 1c:b5:39:6f:d0:a4:1d:61:76:b5:17:e5:31:d0:de:56:f1:c4: e8:2b:17:8a:e0:3b:11:45:40:39:c6:a6:57:1e:e1:53:c0:ad: d9:23:96:5a:e7:dd:09:2b:ba:5e:de:b5:6c:cf:a9:04:e2:b9: 82:bc:dd:88:0c:b2:71:a2:5a:65:81:1e:f2:b9:5e:d1:03:4e: 71:06:4f:23:6e:45:cb:62:03:b8:b6:68:81:f6:d7:8e:d2:44: 54:c9:97:97:ae:41:42:e0:c6:c5:8e:9f:9b:b3:e5:a4:66:d4: c9:8d:9a:f8:a3:03:d8:d7:d6:7b:15:94:30:f2:b0:c7:a8:fb: 60:f8:d4:79:8b:72:73:68:3e:4e:f6:71:79:20:dc:9d:6a:68: 1c:e5:87:39:5d:7b:96:35:d2:79:b4:1e:e9:78:b4:09:18:e3: bf:20:08:bd:03:3a:f4:d7:cf:0b:dd:52:6a:6a:78:b7:42:f9: b2:95:5c:e0:fb:e7:1f:a0:4e:66:a7:ba:5a:70:31:b8:61:52: 99:cd:be:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD OTU4NzY2MDgwHhcNMjUwODIyMTQ0OTAxWhcNMjUwODI5MTQ0OTAxWjAYMRYwFAYD VQQDEw02OGE4ODM1ZC1hNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufqhlgEUReKjwyIk2x9bAeTzXhYDACoTxQlY601HlZCvo3V3sJ5+wK/Vz6rg u1dnMpkg6qLnnMiihvacXvaZ+9fPCySoZu3gDVuSX31NeUO1fJrNjM6FOfsQoyGl 6WMzIB+/G2Va570ahcPJ+hDgeQHrjtBmIyy7+yrccw/L9dk34+xpi1FEmQR0FiUg 6A5awwG/WzmdWffBKsprJD6tqfQSleJDrpcqMpV5lpRy5aVgVFnR9yYbgA196paB j3yAqDWF2YXsQ9Smuy9yZ12c9ipRczHOf9PFHTjAvUW96L3dfEEq6FHUp+jboiXs MMR/2lFiEFMF1uLgt/x03isqJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNr7fOc1 hQFJvbscPWbTOef2SPm5MB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUQzNS9CNjNCQTdFRTFEOTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhF dEIyWnhETXBVdm5KV0haZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDuPQ6w+1srsv1kxWnExjNaN122QTueB+/thK9HyxOJEfk73UFjScTM cnjq9DoInvAubuZohVUctTlv0KQdYXa1F+Ux0N5W8cToKxeK4DsRRUA5xqZXHuFT wK3ZI5Za590JK7pe3rVsz6kE4rmCvN2IDLJxolplgR7yuV7RA05xBk8jbkXLYgO4 tmiB9teO0kRUyZeXrkFC4MbFjp+bs+WkZtTJjZr4owPY19Z7FZQw8rDHqPtg+NR5 i3JzaD5O9nF5INydamgc5Yc5XXuWNdJ5tB7peLQJGOO/IAi9Azr0188L3VJqani3 QvmylVzg++cfoE5mp7pacDG4YVKZzb7Z -----END CERTIFICATE-----Generated at Sun Aug 24 00:03:30 2025 by rpki-client