$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json) Hash identifier: VdZQwFdegTklV7zi0bGEeMnf1a85pQAKpgQJKgsKVcI= Subject key identifier: 7F:8C:2B:D2:25:79:1C:75:6A:6E:72:62:22:87:21:3C:7B:EA:AC:0C Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft Manifest number: 18 Signing time: Sat 23 Aug 2025 08:11:23 +0000 Manifest this update: Sat 23 Aug 2025 08:11:22 +0000 Manifest next update: Sat 30 Aug 2025 08:11:22 +0000 Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: WU4krYLgPeY+buAyP67E4FfzjgsYT8HqRL11IRlToF4=) 2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: p5eDJJHEh4Ku0YkaqmxVa+vpX9QHKpmMPC5rYwtTVzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Validity Not Before: Aug 23 08:11:22 2025 GMT Not After : Aug 30 08:11:22 2025 GMT Subject: CN=68a977aa-490e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:99:c0:5d:67:af:54:26:2e:b6:9f:94:c6: 4f:4f:61:ec:39:fd:f8:fe:73:0d:40:a0:31:ea:20: 65:0d:95:55:b2:ac:42:98:d4:48:9a:53:c2:fe:23: 07:f2:68:6f:e1:01:21:7c:7f:71:0b:84:a6:0a:87: 0e:42:bb:ba:27:99:81:83:b2:c7:42:d2:fc:a2:b6: 25:d8:4a:68:88:f6:de:76:e4:09:0e:ae:ed:52:d4: 31:fd:d6:4c:3c:e2:81:da:70:1a:d6:d5:90:20:55: c9:42:a6:af:ed:e6:50:bf:b0:19:89:07:5d:6a:09: 04:59:a6:b8:41:04:02:85:13:7c:69:e6:fd:ae:ec: aa:f4:98:fb:b4:39:a6:2a:93:99:b4:19:e9:ba:a1: bf:cf:2c:11:b4:96:bc:a0:f3:db:d7:0f:b0:1d:9b: 97:9f:1e:aa:01:a0:9d:92:84:76:2b:64:57:cf:13: d0:97:b7:ad:f2:41:97:27:ef:fc:8e:b4:be:c2:e7: 70:ee:3c:51:f7:b4:3d:ff:f5:f8:4e:b1:72:14:49: 8b:ef:c2:5f:e9:a7:f5:15:f8:42:30:e8:90:fb:2f: cb:b3:77:a0:bd:cc:d7:71:80:7c:6b:1d:10:39:da: 2d:5c:84:1d:e6:02:7f:d8:f8:b2:3d:b7:7e:f8:d5: 69:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:2B:D2:25:79:1C:75:6A:6E:72:62:22:87:21:3C:7B:EA:AC:0C X509v3 Authority Key Identifier: keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:87:d8:8e:63:f3:50:97:f2:9d:2b:62:f6:63:35:c9:c9:e8: f3:41:b4:e4:04:f1:a0:f1:19:5c:49:fc:3f:0a:47:b0:33:f4: a5:cb:85:e4:36:2b:5d:7b:30:07:f8:26:79:e9:90:ca:91:e6: a8:73:7f:a8:26:b1:7a:57:9e:cc:d7:c3:65:9f:31:13:19:67: 8f:8a:22:c1:d2:02:64:c0:d2:f2:e3:45:93:8f:d4:0b:2e:22: 91:99:59:1e:00:1e:e4:01:ec:40:f0:72:10:7a:af:00:1b:6a: 61:4c:64:e9:d6:79:09:ec:71:24:d1:77:48:51:06:ec:af:2a: ad:d3:b8:11:7c:61:e7:68:32:e5:8a:bc:95:92:65:fa:1b:fa: 20:91:75:d2:4b:b4:ac:c6:d6:3e:09:9d:17:04:cc:27:72:9e: dc:cd:93:46:ed:5c:64:14:43:9c:9b:36:b5:8c:73:b3:23:5a: d9:4e:26:09:90:d5:9f:4d:85:3e:5a:26:3d:c4:fd:94:71:56: 58:12:e0:58:e8:3e:fa:02:91:da:0d:44:b0:12:cf:cd:6e:09: e5:ec:7f:a0:65:00:de:39:84:7d:6a:5f:97:8f:da:c9:8b:f6: 66:d9:fa:a1:c4:f1:75:46:29:59:8d:be:24:33:95:5b:2c:3f: fe:9b:69:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoRkI3QjA1ODc4MzY1MUU5M0ZBMzBERDk2RDYyNjVFNkUy RjM1MjU1NDAeFw0yNTA4MjMwODExMjJaFw0yNTA4MzAwODExMjJaMBgxFjAUBgNV BAMTDTY4YTk3N2FhLTQ5MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAcpnAXWevVCYutp+Uxk9PYew5/fj+cw1AoDHqIGUNlVWyrEKY1EiaU8L+Iwfy aG/hASF8f3ELhKYKhw5Cu7onmYGDssdC0vyitiXYSmiI9t525AkOru1S1DH91kw8 4oHacBrW1ZAgVclCpq/t5lC/sBmJB11qCQRZprhBBAKFE3xp5v2u7Kr0mPu0OaYq k5m0Gem6ob/PLBG0lryg89vXD7Adm5efHqoBoJ2ShHYrZFfPE9CXt63yQZcn7/yO tL7C53DuPFH3tD3/9fhOsXIUSYvvwl/pp/UV+EIw6JD7L8uzd6C9zNdxgHxrHRA5 2i1chB3mAn/Y+LI9t3741WlzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf4wr0iV5 HHVqbnJiIochPHvqrAwwHwYDVR0jBBgwFoAU+3sFh4NlHpP6MN2W1iZebi81JVQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0ZFQUUxMkEyNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpW US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTNzRmg0TmxIcFA2TU4yVzFpWmViaTgxSlZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0ZFQUUxMkEyNURERjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQ Nk1OMlcxaVplYmk4MUpWUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGaH2I5j81CX8p0rYvZjNcnJ6PNBtOQE8aDxGVxJ/D8KR7Az9KXLheQ2 K117MAf4JnnpkMqR5qhzf6gmsXpXnszXw2WfMRMZZ4+KIsHSAmTA0vLjRZOP1Asu IpGZWR4AHuQB7EDwchB6rwAbamFMZOnWeQnscSTRd0hRBuyvKq3TuBF8YedoMuWK vJWSZfob+iCRddJLtKzG1j4JnRcEzCdyntzNk0btXGQUQ5ybNrWMc7MjWtlOJgmQ 1Z9NhT5aJj3E/ZRxVlgS4FjoPvoCkdoNRLASz81uCeXsf6BlAN45hH1qX5eP2smL 9mbZ+qHE8XVGKVmNviQzlVssP/6baZk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:57 2025 by rpki-client