$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: lUBOSbbX99d/rzJ+fxX7BA00gz5Ypg/56fxrYJysjKo= Subject key identifier: AD:3E:79:9A:52:DA:D5:1F:28:40:DF:17:79:B8:47:C4:2D:3D:31:A8 Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0C43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0C3C Signing time: Fri 22 Aug 2025 18:44:44 +0000 Manifest this update: Fri 22 Aug 2025 18:44:43 +0000 Manifest next update: Fri 29 Aug 2025 18:44:43 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: j4U5vp6RAPg8cSaG7BwU48Z1L7LUNM8OhpRPXUFeHjs=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: H306zJ6w0u++pxJwnmCEZeb1MJYQzvBqunxs7beIBF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Aug 22 18:44:43 2025 GMT Not After : Aug 29 18:44:43 2025 GMT Subject: CN=68a8ba9c-9470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:09:32:c3:d8:32:fa:9f:78:03:30:36:fa: 61:8d:46:53:dc:38:4c:c6:94:00:65:0d:06:0f:27: 6f:cf:6b:83:e0:3d:46:60:d9:9c:95:86:a9:ca:f7: 8b:42:30:85:c5:dc:ec:ad:43:76:51:cd:ae:87:b6: 03:6c:95:f9:ac:83:da:0f:08:aa:70:5e:30:25:47: 43:ad:36:f3:b6:11:78:44:c4:53:b3:be:43:59:dc: fa:2e:08:c0:3a:24:0c:24:93:9c:d8:38:0d:b7:d4: 48:ea:09:22:75:d2:85:11:79:d9:d2:20:08:96:2c: c0:3f:62:fd:b9:7e:ae:3c:6b:a2:01:c2:99:67:6f: 22:89:83:dc:1d:f8:31:02:6f:88:4c:c9:3e:27:3d: 21:87:5d:63:f4:80:0e:b0:0a:4c:28:31:7c:83:e9: 9d:3b:0b:0d:42:16:b6:ab:dd:c0:55:a9:c8:2b:1f: fb:9c:83:1d:60:8c:28:e8:87:4a:fa:08:08:39:09: 6c:58:ca:cd:0e:8c:c6:98:9d:53:d2:d2:77:0a:9a: e9:57:09:e5:59:0b:97:34:20:42:e0:1a:e9:3a:90: 3b:8c:1a:50:82:c7:64:6a:70:98:c7:a5:13:0c:f9: dc:76:f9:8c:e7:34:c0:f4:c1:fd:50:93:54:0f:cc: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3E:79:9A:52:DA:D5:1F:28:40:DF:17:79:B8:47:C4:2D:3D:31:A8 X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:72:91:a7:2f:71:11:95:10:2f:02:7b:86:cb:55:d7:d7:ae: 1f:81:ab:16:8a:9a:69:7c:5b:b7:12:de:ed:16:13:18:bc:a1: 2c:41:8f:ce:b3:ce:63:49:47:52:1b:02:00:c6:b6:d9:b7:9e: f3:8f:2c:09:de:05:51:17:00:b5:88:06:b3:22:f5:90:34:86: 00:8b:a2:41:5c:54:bb:4b:4a:e5:b6:19:b3:f3:df:46:73:31: 94:06:6d:3d:2b:fb:37:3c:41:9e:39:bd:95:f4:95:04:22:e1: b2:30:1f:3d:6f:97:2f:51:27:5c:4a:39:51:3b:90:51:ab:fa: ab:78:1a:56:dc:6a:55:18:d7:c9:31:9c:37:13:3a:69:ba:59: f8:57:63:22:f5:12:65:4d:3a:a9:97:38:61:39:4d:5c:9b:2e: 9c:25:d1:4d:c6:8c:8e:1c:16:c2:82:bb:b3:69:92:fe:76:b4: 16:7e:db:73:8f:de:37:77:d5:68:15:aa:c8:60:7a:b2:db:62: 35:17:56:ca:0b:44:4e:c9:1f:be:a2:f8:e7:03:d7:90:aa:21: d1:ac:09:2b:77:e5:57:28:10:26:54:a9:ea:fd:a1:a2:81:b6: 40:3c:96:c0:eb:b1:3b:33:ed:d3:9e:11:4f:8b:ca:05:df:f1: 7b:ac:9a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjUwODIyMTg0NDQzWhcNMjUwODI5MTg0NDQzWjAYMRYwFAYD VQQDEw02OGE4YmE5Yy05NDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGgJMsPYMvqfeAMwNvphjUZT3DhMxpQAZQ0GDydvz2uD4D1GYNmclYapyveL QjCFxdzsrUN2Uc2uh7YDbJX5rIPaDwiqcF4wJUdDrTbzthF4RMRTs75DWdz6LgjA OiQMJJOc2DgNt9RI6gkiddKFEXnZ0iAIlizAP2L9uX6uPGuiAcKZZ28iiYPcHfgx Am+ITMk+Jz0hh11j9IAOsApMKDF8g+mdOwsNQha2q93AVanIKx/7nIMdYIwo6IdK +ggIOQlsWMrNDozGmJ1T0tJ3CprpVwnlWQuXNCBC4BrpOpA7jBpQgsdkanCYx6UT DPncdvmM5zTA9MH9UJNUD8zNBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0+eZpS 2tUfKEDfF3m4R8QtPTGoMB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIcpGnL3ERlRAvAnuGy1XX164fgasWipppfFu3Et7tFhMYvKEsQY/O s85jSUdSGwIAxrbZt57zjywJ3gVRFwC1iAazIvWQNIYAi6JBXFS7S0rlthmz899G czGUBm09K/s3PEGeOb2V9JUEIuGyMB89b5cvUSdcSjlRO5BRq/qreBpW3GpVGNfJ MZw3Ezppuln4V2Mi9RJlTTqplzhhOU1cmy6cJdFNxoyOHBbCgruzaZL+drQWfttz j943d9VoFarIYHqy22I1F1bKC0ROyR++ovjnA9eQqiHRrAkrd+VXKBAmVKnq/aGi gbZAPJbA67E7M+3TnhFPi8oF3/F7rJoV -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:39 2025 by rpki-client