$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: DqejNIIKbOptlWQVYOqgrlZ4rpggtjGoR6zr6Qp1pBU= Subject key identifier: 9D:2F:01:9B:26:26:5A:81:73:5D:45:D7:2D:7B:86:3F:53:53:96:5D Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 0210 Signing time: Sat 23 Aug 2025 02:17:49 +0000 Manifest this update: Sat 23 Aug 2025 02:17:48 +0000 Manifest next update: Sat 30 Aug 2025 02:17:48 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: 5/QQYhHzCQqmklT+f/7JLPbdK6aaUZrxqCdJzEyzMmg=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: RxZVoTNoSPk+sPPkKG/4HF99n9loOp00db2bHVAlJ14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Aug 23 02:17:48 2025 GMT Not After : Aug 30 02:17:48 2025 GMT Subject: CN=68a924cc-0137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a6:c6:e1:9b:07:43:f7:ed:ed:38:57:6f:20: 6c:69:37:48:51:85:e6:2a:08:87:aa:e4:c6:f9:eb: fd:4c:e3:94:cd:b3:6f:a5:c6:95:ab:db:b5:69:3d: 83:f0:09:9c:a0:db:1a:c5:24:aa:b2:93:eb:ab:c1: 28:16:c1:f1:4d:d9:fc:3c:4a:c0:90:71:ab:15:e3: 85:6f:65:3e:9c:a2:f0:76:4b:cc:e1:41:52:ff:4e: 8c:fc:4c:f7:03:b8:85:6d:28:0b:c4:75:7e:c2:23: a1:8f:50:ef:9f:16:ac:53:75:c5:a6:38:2d:fd:cd: d3:b4:2a:ca:ca:71:ae:a4:25:66:b4:dd:28:89:e2: a4:93:21:ac:2c:68:68:41:bf:8d:8f:c1:9d:75:5f: 8d:dd:86:54:c4:ed:64:f0:02:9c:fc:fc:4e:16:f2: 10:16:f9:b9:a7:9d:04:aa:04:07:4c:44:36:4c:f0: de:54:d4:a4:53:33:e6:96:63:9e:35:99:7e:f1:f9: 70:27:4d:a2:21:11:29:e9:13:e7:4d:f7:c5:4c:c0: c2:15:02:44:c5:c4:d2:82:be:e6:d1:8a:05:cc:29: ce:92:6d:4d:e6:56:b6:61:c0:0b:fb:a5:d8:f2:ce: 8b:d5:ca:86:b2:d2:43:d9:04:8a:01:f0:23:c3:3f: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:01:9B:26:26:5A:81:73:5D:45:D7:2D:7B:86:3F:53:53:96:5D X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:52:58:5c:12:8a:69:fa:96:b9:ab:bf:b3:08:e5:4e:47:de: 3a:a7:51:59:6f:36:85:9c:a9:8b:3e:dd:e0:6e:29:74:15:ed: dc:95:66:a2:51:7d:06:b0:8f:6f:7b:60:33:aa:68:99:fa:75: ae:d3:c6:50:45:dc:da:b0:35:6a:33:4d:b5:2f:82:66:b4:cf: d6:8a:0c:9e:05:71:0d:da:08:55:93:7b:42:03:e7:3b:6a:4e: 9e:3c:70:f4:4b:ae:ef:81:68:0d:72:08:b5:22:23:af:bb:b2: 69:41:37:54:27:b2:bd:af:98:19:74:ed:e2:95:1e:1a:3c:8e: b3:5e:68:51:91:79:fe:48:fd:7a:98:2d:12:4a:8b:ff:27:6c: 78:38:9a:d6:e6:23:63:20:14:84:35:79:26:8c:4b:db:bc:d3: 1e:09:19:9f:ff:fd:16:e7:f3:b9:84:ce:07:ad:b7:93:b3:cc: 5f:e7:cf:03:97:cb:b7:8c:93:b5:da:db:5c:a1:d8:63:9e:10: f0:40:64:a5:87:78:50:73:77:07:fc:18:49:d7:18:53:45:2d: 8e:0d:13:05:dc:8d:de:d4:29:57:bc:01:a3:dc:2e:f8:95:ed: 7b:12:19:2b:28:e8:f4:af:8e:8f:2e:ab:bc:34:1a:9d:e2:3e: ce:eb:8b:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUwODIzMDIxNzQ4WhcNMjUwODMwMDIxNzQ4WjAYMRYwFAYD VQQDEw02OGE5MjRjYy0wMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2abG4ZsHQ/ft7ThXbyBsaTdIUYXmKgiHquTG+ev9TOOUzbNvpcaVq9u1aT2D 8AmcoNsaxSSqspPrq8EoFsHxTdn8PErAkHGrFeOFb2U+nKLwdkvM4UFS/06M/Ez3 A7iFbSgLxHV+wiOhj1DvnxasU3XFpjgt/c3TtCrKynGupCVmtN0oieKkkyGsLGho Qb+Nj8GddV+N3YZUxO1k8AKc/PxOFvIQFvm5p50EqgQHTEQ2TPDeVNSkUzPmlmOe NZl+8flwJ02iIREp6RPnTffFTMDCFQJExcTSgr7m0YoFzCnOkm1N5la2YcAL+6XY 8s6L1cqGstJD2QSKAfAjwz8qYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0vAZsm JlqBc11F1y17hj9TU5ZdMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMUlhcEopp+pa5q7+zCOVOR946p1FZbzaFnKmLPt3gbil0Fe3clWai UX0GsI9ve2AzqmiZ+nWu08ZQRdzasDVqM021L4JmtM/WigyeBXEN2ghVk3tCA+c7 ak6ePHD0S67vgWgNcgi1IiOvu7JpQTdUJ7K9r5gZdO3ilR4aPI6zXmhRkXn+SP16 mC0SSov/J2x4OJrW5iNjIBSENXkmjEvbvNMeCRmf//0W5/O5hM4HrbeTs8xf588D l8u3jJO12ttcodhjnhDwQGSlh3hQc3cH/BhJ1xhTRS2ODRMF3I3e1ClXvAGj3C74 le17EhkrKOj0r46PLqu8NBqd4j7O64sg -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:19 2025 by rpki-client