$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: 9AkJz+l3kh/gCQuqy6UyLd8eGlGVOmzPkT5fpFTyo54= Subject key identifier: 07:C1:F4:19:C1:94:D8:6B:11:A4:DD:03:28:92:B9:8D:C6:CD:7D:23 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 08B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0883 Signing time: Fri 22 Aug 2025 14:46:51 +0000 Manifest this update: Fri 22 Aug 2025 14:46:50 +0000 Manifest next update: Fri 29 Aug 2025 14:46:50 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: 1l2mL05zT+jV42jrRNA0aQARcm7zR9qbFg8jFvM3fYA=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: qF9QEK3QPpy3Uy+0VtrwIu1I68i1XFjo3G0NKyyWueo=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: 1TGK4JO2Zf1/5yi9BJnBuBHhCgKzzBchGgX4YKczTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Aug 22 14:46:50 2025 GMT Not After : Aug 29 14:46:50 2025 GMT Subject: CN=68a882da-a89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:90:63:e1:5d:1b:c9:af:36:f2:99:46:42: bc:e4:74:b9:20:18:e9:e3:6f:1f:e4:73:ab:c6:22: 2a:44:73:21:2d:14:92:1e:9e:5e:2e:f1:08:9e:59: 2e:31:81:9c:0d:1c:58:54:4c:5f:d0:90:bb:e9:a1: c0:33:c8:5f:a2:b0:37:57:6e:25:79:d9:07:45:3a: d9:9f:69:94:42:3c:7d:32:06:d8:95:0b:9a:6a:0d: cd:15:ca:ba:28:e2:af:16:19:4f:1b:91:2e:30:e1: 8f:07:13:d4:8e:3a:a8:11:25:16:8b:ca:97:1a:53: 14:79:67:94:5a:76:28:25:c9:fb:af:61:14:e8:b5: 33:60:45:1d:97:fd:57:fa:98:d1:c7:d1:47:58:69: 71:f9:fa:33:6e:66:74:a1:79:65:2e:18:87:e7:2d: 4d:30:5c:c6:3e:76:87:45:49:a3:72:57:ef:ea:e1: 1a:d4:0d:9f:63:8b:51:93:d0:e1:e7:0f:13:cd:10: cb:d6:59:33:c9:b3:ed:44:d6:87:bf:10:47:e0:fd: b2:c2:a0:72:23:96:f0:7e:79:a9:db:f7:83:05:de: 77:a7:7d:4d:29:15:46:ca:b6:d2:df:e1:79:bd:fa: 06:14:1c:04:15:e5:89:ea:31:51:cd:d7:d9:7e:3e: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C1:F4:19:C1:94:D8:6B:11:A4:DD:03:28:92:B9:8D:C6:CD:7D:23 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:9d:9d:59:34:53:8f:76:b6:f5:06:94:1f:b7:eb:65:af:07: 47:c5:a8:eb:33:8a:73:1d:1b:51:50:66:1c:6c:2e:11:57:02: ae:9e:3e:f3:fe:88:8b:7f:a4:65:57:b6:90:80:be:f5:85:4e: ae:40:e7:3e:24:0a:4a:d1:66:82:0e:aa:d8:67:84:79:03:89: 0e:61:e1:c4:8f:58:3e:73:54:71:9a:23:91:49:12:80:35:bd: 13:29:45:e5:fd:25:45:4f:c7:af:4c:a8:76:08:1c:57:4b:d5: 53:40:64:e4:e2:68:d6:95:80:bf:67:00:d0:a2:bb:2f:25:c4: 29:65:eb:8c:1b:63:d1:c9:0c:39:11:80:6e:40:24:65:1e:bb: 4a:5a:d8:5d:9a:8a:78:26:1c:95:45:3f:1e:46:4f:09:f8:d3: 53:7b:7b:c8:31:3e:71:d4:64:cf:3e:61:53:48:4d:7f:79:fd: 39:17:48:a9:b3:e6:bb:94:75:ca:f9:bc:18:fe:ce:30:05:82: b9:74:4b:be:62:b8:76:81:5a:e7:fb:62:cc:f6:8e:4b:b2:53: e7:fe:5a:02:a5:9d:93:8f:68:48:8b:0f:2a:99:d9:c2:c6:4a: 5b:25:64:c5:19:73:1f:ff:a3:a6:b9:ff:34:cb:7a:01:09:77: d7:bc:6e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwODIyMTQ0NjUwWhcNMjUwODI5MTQ0NjUwWjAYMRYwFAYD VQQDEw02OGE4ODJkYS1hODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDeQY+FdG8mvNvKZRkK85HS5IBjp428f5HOrxiIqRHMhLRSSHp5eLvEInlku MYGcDRxYVExf0JC76aHAM8hforA3V24ledkHRTrZn2mUQjx9MgbYlQuaag3NFcq6 KOKvFhlPG5EuMOGPBxPUjjqoESUWi8qXGlMUeWeUWnYoJcn7r2EU6LUzYEUdl/1X +pjRx9FHWGlx+fozbmZ0oXllLhiH5y1NMFzGPnaHRUmjclfv6uEa1A2fY4tRk9Dh 5w8TzRDL1lkzybPtRNaHvxBH4P2ywqByI5bwfnmp2/eDBd53p31NKRVGyrbS3+F5 vfoGFBwEFeWJ6jFRzdfZfj7zAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfB9BnB lNhrEaTdAyiSuY3GzX0jMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmnZ1ZNFOPdrb1BpQft+tlrwdHxajrM4pzHRtRUGYcbC4RVwKunj7z /oiLf6RlV7aQgL71hU6uQOc+JApK0WaCDqrYZ4R5A4kOYeHEj1g+c1RxmiORSRKA Nb0TKUXl/SVFT8evTKh2CBxXS9VTQGTk4mjWlYC/ZwDQorsvJcQpZeuMG2PRyQw5 EYBuQCRlHrtKWthdmop4JhyVRT8eRk8J+NNTe3vIMT5x1GTPPmFTSE1/ef05F0ip s+a7lHXK+bwY/s4wBYK5dEu+Yrh2gVrn+2LM9o5LslPn/loCpZ2Tj2hIiw8qmdnC xkpbJWTFGXMf/6Omuf80y3oBCXfXvG4q -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:21 2025 by rpki-client