$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: 3nxadyc3U7tNggvGPRMpXFX8PMh5NWYTjhdV1KEmqhY= Subject key identifier: F4:B9:4C:8C:BB:F3:B5:EA:C0:32:A4:D6:1B:F9:8F:4E:6A:07:BF:FE Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: 0109 Signing time: Sat 23 Aug 2025 05:07:10 +0000 Manifest this update: Sat 23 Aug 2025 05:07:10 +0000 Manifest next update: Sat 30 Aug 2025 05:07:10 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: 1dg3m6mIovwYhHBI3hfBD8q9Sj/pd1B3mY/n8Wmm4Ro=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: Aug 23 05:07:10 2025 GMT Not After : Aug 30 05:07:10 2025 GMT Subject: CN=68a94c7e-6223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:5a:53:af:fa:ae:97:fd:91:38:85:91:08: 8a:72:2b:fb:6c:08:b4:af:80:2e:c7:15:3d:bf:8f: 7d:09:ae:a7:2c:af:27:2f:25:dc:60:27:7d:44:87: dd:e8:72:01:07:02:78:2b:65:6b:1c:83:f4:80:a4: 0c:f6:15:0e:3e:e1:92:c2:e3:29:33:bd:ae:87:e3: 95:e9:c7:fa:db:90:cc:cc:f2:2e:37:b0:71:35:39: 77:88:ad:bb:2b:1d:ee:dc:1a:d3:d8:df:d3:c0:56: 20:2a:8c:88:ed:8d:57:6d:38:7f:9a:bc:ea:a4:ea: 00:80:be:98:97:b1:a0:cf:ba:e4:4b:4a:8f:9a:a1: 36:98:d4:77:c6:a8:2d:2a:a7:1e:c3:d1:ca:36:e0: 97:a2:68:1e:fc:a7:22:81:a1:ad:19:cb:e6:08:0a: be:b5:40:cd:a2:37:bf:93:57:d9:94:59:3f:86:07: 3d:e7:8d:f2:19:be:26:c9:da:1f:ff:d9:6f:16:aa: 7e:55:14:e3:c4:57:30:22:c3:82:9f:21:4d:ff:f4: c2:d1:11:29:00:3e:3a:95:62:9e:5f:ea:5d:e9:38: 0c:87:a3:b6:89:3f:21:96:5b:30:68:75:06:5d:39: 95:53:e0:5b:04:58:67:2b:02:e4:75:f3:f5:da:a2: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B9:4C:8C:BB:F3:B5:EA:C0:32:A4:D6:1B:F9:8F:4E:6A:07:BF:FE X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2a:34:10:34:97:8a:bb:0e:ba:bf:7c:59:0f:4b:f4:f7:15: ad:d0:15:e2:a6:ba:b0:5f:d0:77:1e:2d:6b:a3:0a:3f:3b:27: 67:5e:e4:1a:75:7d:a7:4c:76:fb:39:29:00:d5:56:0a:c7:69: 52:7a:e8:22:90:ee:90:d1:38:a6:1a:50:d1:7e:c1:b6:d8:64: 78:74:f6:04:74:7b:cb:0c:ea:7d:4b:d9:d6:de:ad:2e:9f:b8: c0:08:89:87:e5:0e:76:d3:ed:37:19:96:74:6d:a5:c0:78:97: ee:b0:d9:5e:60:89:95:e0:66:c4:c3:e6:fb:6b:84:5f:27:8b: cb:2d:bb:51:f3:b0:2b:aa:05:bf:fc:1d:3d:75:01:5d:68:5e: 17:03:08:73:2c:60:3a:71:69:eb:0a:38:9a:e8:2b:66:73:f6: 50:f7:7d:05:e7:f9:c3:18:20:60:ab:a7:60:b5:5c:5b:2d:69: 70:8d:b5:ea:8d:6e:a8:9c:f5:20:75:e4:c8:6b:c2:be:9b:e7: 8b:c0:aa:44:36:a8:d7:c3:ed:f4:e1:a6:87:66:63:c2:0a:de: 1e:44:e2:ac:11:77:48:4d:55:cb:af:b2:a5:cc:67:92:30:69: aa:d4:78:0f:d1:b8:85:bc:18:34:e5:43:23:63:be:29:52:72: 47:75:b9:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjUwODIzMDUwNzEwWhcNMjUwODMwMDUwNzEwWjAYMRYwFAYD VQQDEw02OGE5NGM3ZS02MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr5aU6/6rpf9kTiFkQiKciv7bAi0r4AuxxU9v499Ca6nLK8nLyXcYCd9RIfd 6HIBBwJ4K2VrHIP0gKQM9hUOPuGSwuMpM72uh+OV6cf625DMzPIuN7BxNTl3iK27 Kx3u3BrT2N/TwFYgKoyI7Y1XbTh/mrzqpOoAgL6Yl7Ggz7rkS0qPmqE2mNR3xqgt Kqcew9HKNuCXomge/KcigaGtGcvmCAq+tUDNoje/k1fZlFk/hgc9543yGb4mydof /9lvFqp+VRTjxFcwIsOCnyFN//TC0REpAD46lWKeX+pd6TgMh6O2iT8hllswaHUG XTmVU+BbBFhnKwLkdfP12qJR7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS5TIy7 87XqwDKk1hv5j05qB7/+MB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmKjQQNJeKuw66v3xZD0v09xWt0BXiprqwX9B3Hi1rowo/OydnXuQa dX2nTHb7OSkA1VYKx2lSeugikO6Q0TimGlDRfsG22GR4dPYEdHvLDOp9S9nW3q0u n7jACImH5Q520+03GZZ0baXAeJfusNleYImV4GbEw+b7a4RfJ4vLLbtR87ArqgW/ /B09dQFdaF4XAwhzLGA6cWnrCjia6Ctmc/ZQ930F5/nDGCBgq6dgtVxbLWlwjbXq jW6onPUgdeTIa8K+m+eLwKpENqjXw+304aaHZmPCCt4eROKsEXdITVXLr7KlzGeS MGmq1HgP0biFvBg05UMjY74pUnJHdblQ -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:42 2025 by rpki-client