$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json) Hash identifier: xY1amWs6bcgkh/HUGhgSH7GX3Cc2JCz9M4xgW3Iy23o= Subject key identifier: 2F:95:B6:25:D3:F6:75:BE:53:F8:2C:95:C8:6C:62:E8:C9:95:EE:62 Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0E32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft Manifest number: 0E28 Signing time: Fri 22 Aug 2025 17:55:15 +0000 Manifest this update: Fri 22 Aug 2025 17:55:15 +0000 Manifest next update: Fri 29 Aug 2025 17:55:15 +0000 Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: fdgAXrFksgZcT/A++ppvakhQKSz9A2tM8d63gDo9UF4=) 2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: 1jbkg9LW6RgDfHIeGNZI/aPYd/3lSxoGjvv7ph3A8oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3634 (0xe32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Aug 22 17:55:15 2025 GMT Not After : Aug 29 17:55:15 2025 GMT Subject: CN=68a8af03-7586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:85:56:23:0d:30:78:ff:5f:f5:91:4c:f1: bd:3d:37:27:36:b4:cf:11:9e:69:af:d4:63:d3:5f: 4b:19:9e:39:fa:9a:f3:85:f0:fd:18:1d:21:b2:61: c2:4d:fe:68:79:17:a0:2c:e0:56:1f:e8:c0:37:e9: e2:6e:ad:2b:a6:33:f6:3e:a2:f1:66:26:7c:4e:fb: c9:9d:9c:ed:aa:e5:e0:ba:63:4e:da:6d:83:7f:52: 37:fc:00:43:03:0b:eb:af:c4:da:f4:44:41:46:6a: 54:16:68:83:b4:01:d2:8b:b9:fd:01:37:9a:61:72: 5b:03:06:01:c9:9a:0d:32:03:e2:33:7e:5e:3b:a6: 7c:de:0d:86:b6:14:71:c2:6f:55:14:17:ae:ef:2e: 96:7c:46:0b:ba:c3:62:92:1d:9c:90:48:a1:bc:d1: 2d:3e:4d:8f:09:73:be:ff:52:a9:fb:d2:2c:2a:6c: 51:63:96:56:20:48:02:76:8b:be:74:99:b4:9e:91: ce:1e:17:ea:13:2b:a4:42:45:1c:1a:36:12:3a:69: 15:c9:e2:e7:91:85:11:f1:36:03:80:f6:0f:64:f3: 6d:63:b8:4e:c9:8e:2e:b1:71:99:c7:ba:45:b9:49: 28:75:09:d2:f9:d2:6a:b9:30:8b:45:df:1e:54:4f: e2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:95:B6:25:D3:F6:75:BE:53:F8:2C:95:C8:6C:62:E8:C9:95:EE:62 X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:97:04:4b:6b:e1:be:01:12:4d:32:e6:9a:e5:61:c3:06:de: 4f:a4:30:32:b3:2d:f6:b7:5c:ec:4b:de:13:1c:14:91:35:1e: 25:da:a9:00:25:16:86:5c:ac:e7:2e:5b:5c:b7:9e:83:84:27: fe:4c:02:9a:f7:2d:dc:0b:94:4e:8c:a6:86:b0:14:67:0d:83: a9:3d:bb:36:e0:59:af:82:71:ed:fd:60:d6:70:1a:30:c3:5e: af:69:6f:4b:4c:1d:0e:82:4a:b9:c8:a4:7f:22:bc:ba:07:88: 25:bb:bb:db:38:41:aa:27:51:c6:5b:6f:43:04:88:31:06:7f: be:9f:7e:ae:ba:c3:2f:4b:20:47:17:75:eb:a5:f4:52:bf:a6: e2:c7:ff:d9:30:9b:72:a9:08:95:4e:10:5a:1b:4c:df:9b:f5: 03:bc:ad:68:8e:70:21:3c:f3:f9:2e:22:9e:28:34:ad:bd:34: a8:1a:90:e5:d1:64:4d:5b:58:cb:b2:11:d2:35:e8:98:13:13: 83:00:ec:d2:72:a6:8a:43:40:21:60:44:4a:95:ae:14:b7:b8: ff:e9:d8:59:86:12:04:1f:7f:d0:21:fc:c9:5e:a9:1c:c9:2e: 3f:36:c1:01:54:33:4f:23:f6:7d:b5:2c:48:23:b5:5c:f1:b4: 6b:57:d3:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjUwODIyMTc1NTE1WhcNMjUwODI5MTc1NTE1WjAYMRYwFAYD VQQDEw02OGE4YWYwMy03NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnmFViMNMHj/X/WRTPG9PTcnNrTPEZ5pr9Rj019LGZ45+przhfD9GB0hsmHC Tf5oeRegLOBWH+jAN+nibq0rpjP2PqLxZiZ8TvvJnZztquXgumNO2m2Df1I3/ABD Awvrr8Ta9ERBRmpUFmiDtAHSi7n9ATeaYXJbAwYByZoNMgPiM35eO6Z83g2GthRx wm9VFBeu7y6WfEYLusNikh2ckEihvNEtPk2PCXO+/1Kp+9IsKmxRY5ZWIEgCdou+ dJm0npHOHhfqEyukQkUcGjYSOmkVyeLnkYUR8TYDgPYPZPNtY7hOyY4usXGZx7pF uUkodQnS+dJquTCLRd8eVE/iOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+VtiXT 9nW+U/gslchsYujJle5iMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF NFd6T01ocVdXcExHWVVSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBslwRLa+G+ARJNMuaa5WHDBt5PpDAysy32t1zsS94THBSRNR4l2qkA JRaGXKznLltct56DhCf+TAKa9y3cC5ROjKaGsBRnDYOpPbs24FmvgnHt/WDWcBow w16vaW9LTB0Ogkq5yKR/Iry6B4glu7vbOEGqJ1HGW29DBIgxBn++n36uusMvSyBH F3XrpfRSv6bix//ZMJtyqQiVThBaG0zfm/UDvK1ojnAhPPP5LiKeKDStvTSoGpDl 0WRNW1jLshHSNeiYExODAOzScqaKQ0AhYERKla4Ut7j/6dhZhhIEH3/QIfzJXqkc yS4/NsEBVDNPI/Z9tSxII7Vc8bRrV9PR -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:34 2025 by rpki-client