$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: DLcaRxCC/uXP9eORBZIbn9hUfoI8ymHFLz5t2IPGBrQ= Subject key identifier: 72:B8:59:78:13:1D:66:59:53:CC:99:A1:B6:2F:21:D0:C0:E0:C4:61 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 11AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 11A4 Signing time: Fri 22 Aug 2025 17:19:56 +0000 Manifest this update: Fri 22 Aug 2025 17:19:56 +0000 Manifest next update: Fri 29 Aug 2025 17:19:56 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: g00G5WCrreM/L2dpFoPSN7fhIW+KrqezPHpyl3gwKDQ=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4522 (0x11aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Aug 22 17:19:56 2025 GMT Not After : Aug 29 17:19:56 2025 GMT Subject: CN=68a8a6bc-4623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:9f:13:4b:f7:b5:0c:db:cd:75:50:b9:32: 53:4d:36:13:0d:40:17:5c:b0:06:77:52:9a:6e:d1: 0b:4e:e2:0b:ad:4f:3f:d7:07:ac:aa:b9:c1:10:44: 47:21:33:0e:dd:34:47:3f:77:1c:95:37:c2:c5:a1: 8d:c8:0b:d3:da:14:1a:06:af:d6:83:f7:66:32:bc: cf:b6:b9:44:15:17:0d:82:04:4b:18:4d:69:70:0b: ef:36:c0:5e:64:24:99:b9:c3:40:32:e1:66:5b:3f: fc:e7:9a:cd:e1:45:1c:cb:e6:e8:b7:b8:ba:3a:14: 8e:8e:9a:75:af:44:c0:bc:1b:f3:7c:11:37:60:36: d5:bb:f9:ba:17:2e:c7:38:7c:ed:d1:e0:19:fa:3f: d8:9e:a1:32:8b:ca:ea:95:f9:12:e6:5a:d3:1d:aa: be:3e:00:ca:d6:b7:13:2a:6b:74:0f:47:15:49:0c: bb:87:42:5e:61:0f:1b:f8:e2:63:4e:d1:34:5d:c7: 60:a9:bc:7c:74:43:43:51:4f:5f:55:52:0b:6b:67: 91:4e:eb:be:e7:a5:23:75:19:2b:a5:b6:f3:16:ed: 67:cf:fd:4d:3a:f9:1f:f9:11:32:87:a4:b1:2b:05: 19:af:67:fc:aa:7a:50:14:d7:21:a1:ba:ae:bf:8b: 5c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B8:59:78:13:1D:66:59:53:CC:99:A1:B6:2F:21:D0:C0:E0:C4:61 X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:1a:3c:d6:19:af:da:8a:8e:c4:4f:3a:94:00:dd:fa:61:91: 0d:09:64:d5:4f:26:76:75:bc:33:1e:a8:c6:0c:00:a2:fa:74: ae:41:5b:c9:8d:f5:41:8a:5d:28:6e:ec:a3:6a:b6:d0:d9:5c: 87:92:4e:89:f0:34:37:46:1f:e1:fc:1c:eb:20:ce:13:14:84: aa:4f:59:b4:e1:88:91:0c:d1:83:fc:92:79:3b:21:21:b7:2c: 95:c0:5e:35:9b:28:f4:43:17:f9:c1:90:f9:df:ec:f4:19:00: da:a6:a2:a4:0d:58:14:39:46:26:61:21:24:9a:14:e0:e9:fe: b6:60:c1:10:ea:27:9e:74:a4:6c:44:47:f8:b0:40:89:d0:05: 71:2e:0d:86:96:19:94:3b:9d:a5:91:65:32:25:c6:9c:d9:1b: 7e:57:a4:a9:88:c0:d4:97:b8:77:4e:f4:12:e1:78:59:47:e5: 29:98:30:fd:86:4b:e5:c0:46:12:7d:68:a6:f8:ac:b6:05:79: b3:4d:e6:b7:08:16:6a:3e:55:e3:e5:71:b5:9d:cc:23:5f:3d: 24:1c:d9:79:d5:0e:f5:d7:51:bc:26:f9:bb:5f:4d:db:f1:7d: 51:55:5a:3d:b0:50:b4:44:48:33:d4:10:af:d3:ae:46:b8:0d: 5c:99:48:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUwODIyMTcxOTU2WhcNMjUwODI5MTcxOTU2WjAYMRYwFAYD VQQDEw02OGE4YTZiYy00NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMCfE0v3tQzbzXVQuTJTTTYTDUAXXLAGd1KabtELTuILrU8/1wesqrnBEERH ITMO3TRHP3cclTfCxaGNyAvT2hQaBq/Wg/dmMrzPtrlEFRcNggRLGE1pcAvvNsBe ZCSZucNAMuFmWz/855rN4UUcy+bot7i6OhSOjpp1r0TAvBvzfBE3YDbVu/m6Fy7H OHzt0eAZ+j/YnqEyi8rqlfkS5lrTHaq+PgDK1rcTKmt0D0cVSQy7h0JeYQ8b+OJj TtE0Xcdgqbx8dENDUU9fVVILa2eRTuu+56UjdRkrpbbzFu1nz/1NOvkf+REyh6Sx KwUZr2f8qnpQFNchobquv4tcBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHK4WXgT HWZZU8yZobYvIdDA4MRhMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwGjzWGa/aio7ETzqUAN36YZENCWTVTyZ2dbwzHqjGDACi+nSuQVvJ jfVBil0obuyjarbQ2VyHkk6J8DQ3Rh/h/BzrIM4TFISqT1m04YiRDNGD/JJ5OyEh tyyVwF41myj0Qxf5wZD53+z0GQDapqKkDVgUOUYmYSEkmhTg6f62YMEQ6ieedKRs REf4sECJ0AVxLg2GlhmUO52lkWUyJcac2Rt+V6SpiMDUl7h3TvQS4XhZR+UpmDD9 hkvlwEYSfWim+Ky2BXmzTea3CBZqPlXj5XG1ncwjXz0kHNl51Q7111G8Jvm7X03b 8X1RVVo9sFC0REgz1BCv065GuA1cmUi+ -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:24 2025 by rpki-client