$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: 9rz3JNfScuzAJ1Elfi/GMhZ3kSoODlgzEWvgo+U9uLg= Subject key identifier: 53:B1:24:E2:3A:87:52:8A:E3:F9:32:EE:1F:25:CA:61:10:7D:34:9B Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1ED1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1EBA Signing time: Fri 22 Aug 2025 16:06:10 +0000 Manifest this update: Fri 22 Aug 2025 16:06:09 +0000 Manifest next update: Fri 29 Aug 2025 16:06:09 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: ZCCATBm6sTKKSg4r/s0Wf05FMeOeNf8sPm3QZkmpTAc=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: h0HyLn8ocWGb9KjF4xTUCCRX3RLDUFI2FgHziz/KxqQ=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7889 (0x1ed1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Aug 22 16:06:09 2025 GMT Not After : Aug 29 16:06:09 2025 GMT Subject: CN=68a89571-dcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:07:90:75:41:11:75:3a:a8:c5:8d:f1:b5: 61:62:b4:df:a7:06:b1:1f:c4:38:19:42:29:17:0d: 04:aa:bd:ca:ec:da:90:ec:9b:71:ea:2c:aa:ba:e7: 5a:97:8e:2a:87:3c:dd:b5:39:19:42:a2:bb:e5:62: 28:ea:3c:ab:e9:ae:51:2a:86:8d:48:51:27:7e:99: c0:7a:69:34:37:a4:02:58:39:d2:8a:2e:f1:9b:4b: bc:bb:d8:6c:10:bf:a9:f7:0f:eb:d6:ab:8e:ce:3e: 66:26:03:2d:58:7e:a2:ba:34:2f:e6:46:0f:ac:02: b6:fb:cd:55:88:48:77:d2:44:1f:f6:95:b4:f5:e5: e7:46:80:bf:3e:ea:81:ee:87:02:d8:56:21:ad:3f: e8:1c:82:1b:5e:68:54:aa:b4:c2:0c:13:f9:a4:25: db:77:e6:01:f0:29:06:3e:44:13:76:f8:3b:59:1b: a2:db:b9:df:49:1b:c4:81:8b:cf:20:ab:9f:fa:53: 47:4f:a6:fb:cf:6e:d1:d6:47:59:77:f0:0d:16:bc: 2f:8c:74:8e:4a:bb:72:bb:24:48:76:8f:19:2c:d9: 44:4e:b8:5c:eb:f4:2b:a5:7c:b2:75:3c:e7:81:6c: da:8e:91:26:dc:25:e9:c3:f4:4b:52:ec:03:11:88: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B1:24:E2:3A:87:52:8A:E3:F9:32:EE:1F:25:CA:61:10:7D:34:9B X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:4e:7a:78:d7:0e:83:14:4c:1f:6e:2e:7c:18:55:22:59:94: ee:dc:eb:ba:c8:9a:8e:77:56:7f:34:ee:82:af:2e:4c:d4:0a: 75:8b:da:42:33:15:8f:53:c5:d0:34:6d:7c:56:36:dc:7a:69: e9:5e:87:75:6e:ac:43:ab:6b:b8:4f:a1:6c:d3:3f:b6:fe:a6: ce:f8:9d:f8:b4:0b:8c:5a:9e:c9:23:e6:d8:5f:58:5b:c0:3d: d2:48:73:5d:24:01:65:54:23:32:03:89:b4:10:ab:f1:bb:e5: 87:e2:c2:36:f4:31:0c:4a:45:fb:f1:6c:54:b2:57:7e:31:07: 81:22:d6:77:22:88:8a:60:7c:c5:bb:af:27:e6:36:58:42:c5: 27:97:aa:f0:1c:07:2d:35:90:b7:ac:7e:85:7c:62:7d:18:ae: 7f:24:7c:cf:32:e8:d9:ec:57:c2:78:f4:82:35:58:85:97:b5: e5:15:61:4d:b3:50:f9:c5:24:e8:f5:d5:68:fc:92:a7:55:6e: df:16:a3:13:dc:7c:fa:e3:c3:6c:4f:4f:23:4c:7e:2d:2f:8d: 51:1c:88:6c:92:74:3c:d3:22:11:58:22:5a:f3:f5:80:a5:43: 5c:ae:cf:fc:70:ac:50:59:9c:bd:ad:1b:87:c3:3b:c4:18:b9: d5:d5:ea:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjUwODIyMTYwNjA5WhcNMjUwODI5MTYwNjA5WjAYMRYwFAYD VQQDEw02OGE4OTU3MS1kY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPEHkHVBEXU6qMWN8bVhYrTfpwaxH8Q4GUIpFw0Eqr3K7NqQ7Jtx6iyquuda l44qhzzdtTkZQqK75WIo6jyr6a5RKoaNSFEnfpnAemk0N6QCWDnSii7xm0u8u9hs EL+p9w/r1quOzj5mJgMtWH6iujQv5kYPrAK2+81ViEh30kQf9pW09eXnRoC/PuqB 7ocC2FYhrT/oHIIbXmhUqrTCDBP5pCXbd+YB8CkGPkQTdvg7WRui27nfSRvEgYvP IKuf+lNHT6b7z27R1kdZd/ANFrwvjHSOSrtyuyRIdo8ZLNlETrhc6/QrpXyydTzn gWzajpEm3CXpw/RLUuwDEYj7NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOxJOI6 h1KK4/ky7h8lymEQfTSbMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Tnp41w6DFEwfbi58GFUiWZTu3Ou6yJqOd1Z/NO6Cry5M1Ap1i9pC MxWPU8XQNG18VjbcemnpXod1bqxDq2u4T6Fs0z+2/qbO+J34tAuMWp7JI+bYX1hb wD3SSHNdJAFlVCMyA4m0EKvxu+WH4sI29DEMSkX78WxUsld+MQeBItZ3IoiKYHzF u68n5jZYQsUnl6rwHActNZC3rH6FfGJ9GK5/JHzPMujZ7FfCePSCNViFl7XlFWFN s1D5xSTo9dVo/JKnVW7fFqMT3Hz648NsT08jTH4tL41RHIhsknQ80yIRWCJa8/WA pUNcrs/8cKxQWZy9rRuHwzvEGLnV1ep6 -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:56 2025 by rpki-client