$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json) Hash identifier: JTFRSeRSeGppOv+UF7wDUbxh38iihwEk+Bi9Wsr8FLw= Subject key identifier: 37:C9:29:5C:14:74:11:6C:3B:C7:7E:02:FE:12:E6:D9:60:D0:F4:69 Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft Manifest number: 0E0E Signing time: Wed 02 Jul 2025 18:02:33 +0000 Manifest this update: Wed 02 Jul 2025 18:02:33 +0000 Manifest next update: Wed 09 Jul 2025 18:02:33 +0000 Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: yy6PKciLpA9OBul2vBdrh6aBpc0H1/77YP9g8kuuFqY=) 2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: 1jbkg9LW6RgDfHIeGNZI/aPYd/3lSxoGjvv7ph3A8oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3608 (0xe18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Jul 2 18:02:33 2025 GMT Not After : Jul 9 18:02:33 2025 GMT Subject: CN=68657439-d7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:06:28:b9:82:09:6b:89:a9:27:f4:25:63: f3:70:36:e8:bf:b6:99:77:1a:17:d4:55:96:26:6a: 8d:6a:b7:5e:88:34:34:60:5f:09:14:0b:40:11:11: ee:2a:ea:c2:3a:22:7e:6c:92:2e:aa:b5:6c:98:fe: 41:9e:c5:7b:df:90:50:8d:4d:03:17:9c:85:bf:9d: 75:46:d5:4b:85:df:5b:2a:20:87:44:2d:5b:58:51: f5:7d:2e:52:e6:40:f7:2e:c7:a6:78:1a:ca:0c:02: 3a:c5:45:9a:81:fb:a2:4d:9a:3a:0d:4c:67:7d:65: f6:3c:5f:72:ae:b0:1c:0a:6a:8f:03:4e:91:b3:1a: 32:5e:ac:67:d6:65:37:ee:cf:29:07:d8:01:ac:1b: 10:5d:61:79:10:9e:91:fa:e4:47:36:8c:b4:6e:1f: ac:ff:8b:ef:b7:4a:ee:45:83:5f:93:ef:96:cc:9e: 3e:be:23:fd:fe:2d:62:1f:45:10:c4:8c:14:53:a9: 4c:63:0e:fb:0f:2a:d5:49:09:1c:a6:f0:45:eb:8a: 80:3e:41:26:20:fa:24:14:d9:42:4d:4f:1d:b4:ee: 4e:52:6a:80:09:37:9b:a9:52:c6:4c:98:60:48:54: d3:bf:e3:fe:02:09:61:0f:35:b9:87:60:9f:99:d7: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C9:29:5C:14:74:11:6C:3B:C7:7E:02:FE:12:E6:D9:60:D0:F4:69 X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0c:e1:d0:68:2e:f3:dc:58:c3:67:be:3f:53:c3:74:a9:0a: f3:8e:ac:6c:05:6d:50:15:eb:7d:63:56:72:6e:cb:77:cf:5a: c7:dd:ab:65:e2:21:9c:6e:5d:0d:23:3d:bc:8d:8b:59:23:f6: 9d:58:e8:76:6f:34:79:14:20:c8:81:b5:0c:bb:56:f4:8e:44: 89:d4:d8:42:91:45:ba:07:e2:ed:55:2c:23:b1:fa:c9:2f:93: dc:a9:1e:92:6c:10:b1:b8:64:9e:b6:e3:46:f5:d8:44:f6:f0: fb:6c:61:e2:a1:da:c4:af:21:ad:4e:7e:47:53:9b:11:79:20: 4c:ec:22:e8:77:04:d4:d3:a4:ba:98:69:c4:af:da:73:71:bf: fe:d8:d8:70:e3:dc:31:aa:78:c3:9a:18:51:4c:70:91:bb:f3: 60:c4:aa:2e:d5:f7:08:30:fb:c2:d9:6e:a5:eb:b8:2b:53:cd: 2a:38:77:22:39:25:33:be:5e:a5:c0:3d:79:67:63:d4:51:a0: d9:dd:86:4a:2d:ea:71:3c:56:41:20:3e:29:07:c0:49:e6:26: ea:af:62:9e:6b:49:b8:c1:15:1c:82:3c:b8:33:af:cb:d7:31: 78:d0:81:f6:2a:cf:10:3e:96:e4:4d:6f:31:5a:e7:a5:b6:f3: 23:01:49:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjUwNzAyMTgwMjMzWhcNMjUwNzA5MTgwMjMzWjAYMRYwFAYD VQQDEw02ODY1NzQzOS1kN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoR8GKLmCCWuJqSf0JWPzcDbov7aZdxoX1FWWJmqNardeiDQ0YF8JFAtAERHu KurCOiJ+bJIuqrVsmP5BnsV735BQjU0DF5yFv511RtVLhd9bKiCHRC1bWFH1fS5S 5kD3LsemeBrKDAI6xUWagfuiTZo6DUxnfWX2PF9yrrAcCmqPA06RsxoyXqxn1mU3 7s8pB9gBrBsQXWF5EJ6R+uRHNoy0bh+s/4vvt0ruRYNfk++WzJ4+viP9/i1iH0UQ xIwUU6lMYw77DyrVSQkcpvBF64qAPkEmIPokFNlCTU8dtO5OUmqACTebqVLGTJhg SFTTv+P+AglhDzW5h2CfmdcpKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfJKVwU dBFsO8d+Av4S5tlg0PRpMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF NFd6T01ocVdXcExHWVVSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDDOHQaC7z3FjDZ74/U8N0qQrzjqxsBW1QFet9Y1Zybst3z1rH3atl 4iGcbl0NIz28jYtZI/adWOh2bzR5FCDIgbUMu1b0jkSJ1NhCkUW6B+LtVSwjsfrJ L5PcqR6SbBCxuGSetuNG9dhE9vD7bGHiodrEryGtTn5HU5sReSBM7CLodwTU06S6 mGnEr9pzcb/+2Nhw49wxqnjDmhhRTHCRu/NgxKou1fcIMPvC2W6l67grU80qOHci OSUzvl6lwD15Z2PUUaDZ3YZKLepxPFZBID4pB8BJ5ibqr2Kea0m4wRUcgjy4M6/L 1zF40IH2Ks8QPpbkTW8xWueltvMjAUlR -----END CERTIFICATE-----Generated at Wed Jul 2 23:28:49 2025 by rpki-client