$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: NCbDjZKzcyrKyG+BBGws7t92n8i0zSMMWOfPXI1BGkk= Subject key identifier: 84:8A:D1:74:DC:A6:2A:A5:5B:EE:BC:8B:03:7F:70:70:2E:80:29:4A Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0897 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0869 Signing time: Wed 02 Jul 2025 14:48:18 +0000 Manifest this update: Wed 02 Jul 2025 14:48:17 +0000 Manifest next update: Wed 09 Jul 2025 14:48:17 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: mTLYYn8wQYvto/joxadkZ7cn9d6eZz3+aqEugp7tgRU=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: qF9QEK3QPpy3Uy+0VtrwIu1I68i1XFjo3G0NKyyWueo=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: 1TGK4JO2Zf1/5yi9BJnBuBHhCgKzzBchGgX4YKczTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jul 2 14:48:17 2025 GMT Not After : Jul 9 14:48:17 2025 GMT Subject: CN=686546b1-e925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7d:de:68:36:07:35:dd:bd:09:86:1f:94:9e: 5e:e1:ef:9d:10:0d:af:74:08:b0:df:3a:0f:d9:2d: 49:6d:94:80:ce:0f:27:00:f5:43:d4:15:f7:02:8e: 75:35:51:22:a2:35:96:15:e4:53:b9:c0:6c:71:41: da:b9:8c:2a:23:1a:cc:45:62:31:5a:d6:38:0b:ad: b7:85:1c:6f:0b:cd:bf:dc:e1:82:43:96:c3:8c:f4: 4c:80:f5:bb:9c:71:b9:00:e1:77:0b:c7:f1:46:a0: 02:8d:2e:77:13:9d:37:44:f2:0f:f6:98:d4:cb:f3: 64:4e:34:07:c3:82:18:e6:c3:69:b8:0c:ba:c2:6a: 08:45:76:17:9d:ff:0d:b4:d5:12:87:de:c3:e2:bf: dd:1b:ef:29:aa:e8:68:0f:32:be:82:65:86:b3:97: c1:ed:9d:84:7d:61:2b:e3:f7:c7:ac:7c:34:8c:e0: f7:8c:31:4e:9b:a9:7d:4a:57:8f:32:32:49:95:2c: 85:64:fb:75:e8:09:e5:ae:9d:40:b2:00:42:38:f9: 8c:1a:ed:4e:b5:c9:4f:c9:c0:9f:19:6a:14:52:68: cd:04:f9:cb:aa:f6:b6:d3:b7:f9:9e:3e:01:29:44: 02:f3:47:d3:90:8a:22:a8:90:4e:85:fb:0a:ab:60: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8A:D1:74:DC:A6:2A:A5:5B:EE:BC:8B:03:7F:70:70:2E:80:29:4A X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bb:05:e1:5e:3d:9d:f0:12:40:9c:e7:60:2d:ae:7f:69:99: 08:1c:6f:00:68:84:8e:d2:53:f6:c6:10:1e:04:43:39:9c:e3: 8d:d7:59:2c:ad:f8:0f:76:89:8d:90:9b:62:b2:05:df:35:00: 03:d3:88:5b:49:b3:ad:e3:c9:be:62:dc:50:01:f7:91:26:81: 46:a0:7d:23:e4:44:10:82:5b:c0:1a:9f:e6:a4:c7:62:4f:99: 76:d6:f9:88:42:ce:18:7f:03:ec:3e:ad:2d:b4:f2:4c:2c:a1: cc:23:4a:ca:22:79:e0:d7:c1:14:3a:9d:89:d0:b6:11:2c:a7: 7e:1c:2d:11:b4:7a:1a:50:24:6c:be:00:53:2f:5c:ca:2e:c3: c8:02:c2:ad:95:86:73:fe:34:12:20:ae:d0:dc:74:6f:62:cd: ee:b9:8f:be:5b:9a:9a:36:0e:91:40:7f:a5:49:aa:6d:1f:4e: 2c:fe:d6:0d:42:13:60:8d:d6:ab:db:2c:95:3a:c4:b5:1e:0b: 99:a2:cd:c5:33:01:21:c2:30:98:6d:ad:2b:ca:49:ef:de:ea: ff:ff:bc:2f:fd:f8:46:1a:c5:76:71:5f:ce:92:33:e5:8c:05: 77:b0:07:b1:9e:70:00:c0:8a:fe:a8:03:bd:f6:69:68:73:ff: a1:25:31:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwNzAyMTQ0ODE3WhcNMjUwNzA5MTQ0ODE3WjAYMRYwFAYD VQQDEw02ODY1NDZiMS1lOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1n3eaDYHNd29CYYflJ5e4e+dEA2vdAiw3zoP2S1JbZSAzg8nAPVD1BX3Ao51 NVEiojWWFeRTucBscUHauYwqIxrMRWIxWtY4C623hRxvC82/3OGCQ5bDjPRMgPW7 nHG5AOF3C8fxRqACjS53E503RPIP9pjUy/NkTjQHw4IY5sNpuAy6wmoIRXYXnf8N tNUSh97D4r/dG+8pquhoDzK+gmWGs5fB7Z2EfWEr4/fHrHw0jOD3jDFOm6l9SleP MjJJlSyFZPt16Anlrp1AsgBCOPmMGu1OtclPycCfGWoUUmjNBPnLqva207f5nj4B KUQC80fTkIoiqJBOhfsKq2CYDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISK0XTc piqlW+68iwN/cHAugClKMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBuwXhXj2d8BJAnOdgLa5/aZkIHG8AaISO0lP2xhAeBEM5nOON11ks rfgPdomNkJtisgXfNQAD04hbSbOt48m+YtxQAfeRJoFGoH0j5EQQglvAGp/mpMdi T5l21vmIQs4YfwPsPq0ttPJMLKHMI0rKInng18EUOp2J0LYRLKd+HC0RtHoaUCRs vgBTL1zKLsPIAsKtlYZz/jQSIK7Q3HRvYs3uuY++W5qaNg6RQH+lSaptH04s/tYN QhNgjdar2yyVOsS1HguZos3FMwEhwjCYba0ryknv3ur//7wv/fhGGsV2cV/OkjPl jAV3sAexnnAAwIr+qAO99mloc/+hJTFg -----END CERTIFICATE-----Generated at Thu Jul 3 23:22:38 2025 by rpki-client