$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: jbECphzk3/B1m7EgaK495CA5QZc2EifIKRApuNM0kGw= Subject key identifier: C7:48:02:3D:AC:11:A3:38:5E:55:21:1A:41:63:C9:9E:50:DE:A2:E8 Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 04ED Signing time: Fri 22 Aug 2025 23:55:15 +0000 Manifest this update: Fri 22 Aug 2025 23:55:15 +0000 Manifest next update: Fri 29 Aug 2025 23:55:15 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: hcV68kQAeyyGHAjYBTFv3ZEfzPHN2OCMqtRZ6+Kyy7I=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: K+U5H/gEB39S0MtkniCqyAbmgU8k6WO9RKiUyR91DCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: Aug 22 23:55:15 2025 GMT Not After : Aug 29 23:55:15 2025 GMT Subject: CN=68a90363-8e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:8a:0f:59:8b:87:ac:33:a0:f5:d2:53:63: 96:d1:b0:f6:40:1a:a1:68:40:d8:0a:3a:76:72:dd: 24:2d:b7:ae:25:a0:4c:28:f7:6c:2a:9b:c2:3b:be: e4:6e:e9:5e:41:57:9c:5b:cb:57:ee:42:1e:7c:cb: 51:16:3f:8a:ac:21:b3:d8:20:a7:96:9b:b9:25:7e: df:05:b0:53:b4:e8:a6:19:6d:5b:77:47:b3:71:80: a8:c7:5e:81:53:59:56:f4:58:50:e2:22:54:dc:d3: f3:f1:08:44:3e:d0:a3:d8:dc:11:4f:bd:75:0d:87: a5:62:2f:43:4b:d9:e2:c0:2d:4c:9e:a7:29:04:07: e5:24:73:8e:6f:26:96:84:96:7d:34:b3:4f:7e:58: 84:f2:eb:75:ad:57:cc:26:3a:b8:e8:a8:41:18:8b: 57:c0:ef:84:48:48:1e:31:e7:2c:66:86:86:50:a1: d0:5f:de:29:d5:29:4d:87:3e:a6:de:32:9a:80:e8: 47:38:e1:73:66:c8:c4:fa:7d:ec:fa:9b:bb:1e:79: 63:e0:4b:36:6d:2b:67:c2:d7:54:53:cc:11:82:b5: e5:42:49:c4:a1:ec:8c:a9:5d:dd:54:c6:7b:ae:a8: 72:95:c0:95:2f:65:92:c9:87:f9:e1:18:96:5e:d0: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:48:02:3D:AC:11:A3:38:5E:55:21:1A:41:63:C9:9E:50:DE:A2:E8 X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:0d:9d:56:76:cc:85:fd:11:1c:0e:08:69:4f:ef:01:03:11: 83:ae:2c:23:b6:51:f2:3b:22:8b:4d:29:fd:09:93:e6:4d:bf: 0f:e9:69:68:f1:e8:81:78:b4:32:da:69:f0:b4:ad:71:93:ce: 4e:50:cd:ca:ca:b9:cf:d3:f4:aa:c3:9d:dd:78:7e:08:d0:0f: b8:c4:a1:3e:66:01:5f:29:57:cc:fd:fd:a8:84:80:88:b1:c2: eb:df:d5:c2:69:69:9e:d5:52:0c:36:6a:8a:7c:08:9f:d3:f7: a7:3d:b4:3a:e4:5f:8c:4f:67:75:be:1d:36:a2:06:d5:59:c4: 97:b7:1c:40:05:37:b1:70:1a:14:6f:67:bb:13:24:20:a4:67: 41:99:fa:2e:7e:c1:ce:85:c3:fb:a3:9e:3b:4b:a8:57:fc:88: 33:ac:4a:56:13:0b:09:81:d2:da:56:39:23:61:f4:f5:1a:2f: 35:b5:1f:01:9a:10:77:44:ea:94:12:2c:ef:fc:62:6a:db:4e: 01:f2:e2:3d:55:62:52:5e:3b:06:76:51:3d:9c:66:fa:5e:75: 54:9e:a3:44:f5:fc:66:9a:a9:9d:18:39:fc:c7:40:b0:b5:6a: d4:c1:e4:b2:0d:47:06:2a:a0:fc:f7:2c:31:35:ef:f0:2a:87: ae:7b:e6:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjUwODIyMjM1NTE1WhcNMjUwODI5MjM1NTE1WjAYMRYwFAYD VQQDEw02OGE5MDM2My04ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYeKD1mLh6wzoPXSU2OW0bD2QBqhaEDYCjp2ct0kLbeuJaBMKPdsKpvCO77k buleQVecW8tX7kIefMtRFj+KrCGz2CCnlpu5JX7fBbBTtOimGW1bd0ezcYCox16B U1lW9FhQ4iJU3NPz8QhEPtCj2NwRT711DYelYi9DS9niwC1MnqcpBAflJHOObyaW hJZ9NLNPfliE8ut1rVfMJjq46KhBGItXwO+ESEgeMecsZoaGUKHQX94p1SlNhz6m 3jKagOhHOOFzZsjE+n3s+pu7Hnlj4Es2bStnwtdUU8wRgrXlQknEoeyMqV3dVMZ7 rqhylcCVL2WSyYf54RiWXtAjCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdIAj2s EaM4XlUhGkFjyZ5Q3qLoMB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZDZ1WdsyF/REcDghpT+8BAxGDriwjtlHyOyKLTSn9CZPmTb8P6Wlo 8eiBeLQy2mnwtK1xk85OUM3KyrnP0/Sqw53deH4I0A+4xKE+ZgFfKVfM/f2ohICI scLr39XCaWme1VIMNmqKfAif0/enPbQ65F+MT2d1vh02ogbVWcSXtxxABTexcBoU b2e7EyQgpGdBmfoufsHOhcP7o547S6hX/IgzrEpWEwsJgdLaVjkjYfT1Gi81tR8B mhB3ROqUEizv/GJq204B8uI9VWJSXjsGdlE9nGb6XnVUnqNE9fxmmqmdGDn8x0Cw tWrUweSyDUcGKqD89ywxNe/wKoeue+ZJ -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:45 2025 by rpki-client