$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft File: V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json) Hash identifier: U0+XDNWg5e8VCJOkUmSd89pweSJQYykA4kFju/NCDpA= Subject key identifier: 3E:22:2E:57:34:30:3D:CD:23:04:95:18:95:10:71:A8:FB:DB:7D:E7 Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB Certificate issuer: /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft Manifest number: 0680 Signing time: Fri 22 Aug 2025 14:48:43 +0000 Manifest this update: Fri 22 Aug 2025 14:48:43 +0000 Manifest next update: Fri 29 Aug 2025 14:48:43 +0000 Files and hashes: 1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: L2W+OhT+uDSRXG+LCmgd4ciX0rTNOwOsIJnD5L6MMUM=) 2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: jVO5wSX7TJcWYZD+VE2YuDs8rKtO7MY++7pypycZONE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Validity Not Before: Aug 22 14:48:43 2025 GMT Not After : Aug 29 14:48:43 2025 GMT Subject: CN=68a8834b-4f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d3:d4:99:17:a4:9e:05:1a:82:2c:49:6e:87: c5:4f:6c:61:8c:cf:2c:e6:1f:e5:7a:df:98:75:27: f1:ca:1b:c5:f9:de:69:d9:57:11:f2:21:0c:f7:6e: 0c:d4:8d:f0:dd:78:5d:26:6e:86:fa:8f:82:fe:d6: 44:ff:98:ca:f3:e7:76:2b:c7:e6:2f:00:9f:8d:9c: 64:8b:a3:53:c2:f5:03:9d:02:70:bd:b3:49:03:ef: 21:14:59:14:b1:36:db:55:5d:3d:24:ed:fa:e4:8d: be:66:cb:e8:45:5a:4f:1e:7f:74:ac:77:33:78:e6: c4:56:be:31:d8:51:0b:7a:b5:aa:31:58:90:b3:78: 21:aa:f0:f3:dd:f8:0f:7d:c5:00:d9:c5:44:79:37: 92:a0:0d:5d:d0:e1:6e:0d:25:a2:1e:15:6b:0f:d4: 25:3d:e8:76:2c:fe:b9:74:e2:cb:14:c1:46:10:ee: 21:2b:08:04:f2:aa:0f:05:94:c7:e5:d8:0d:22:10: 74:9b:4a:f3:0d:e6:23:da:01:ee:7b:b4:ec:8b:97: 88:fb:95:47:d0:71:9f:c2:ff:e5:28:29:a1:2f:3c: 6d:ce:d8:66:93:78:31:ec:f0:f6:8f:e3:6b:08:70: fe:d1:08:f7:e7:af:6c:69:c9:f8:6e:f8:ed:34:ba: e6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:22:2E:57:34:30:3D:CD:23:04:95:18:95:10:71:A8:FB:DB:7D:E7 X509v3 Authority Key Identifier: keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c1:a1:13:94:52:cc:1b:88:58:56:36:f7:be:6d:b6:70:b1: d2:8d:6e:1f:6b:8c:9b:15:38:0a:25:e3:8b:8d:c7:fb:43:cc: 4c:e7:8a:35:12:62:ae:1d:b7:a0:e4:ad:6d:57:ab:29:85:21: 6e:92:96:15:1b:16:b1:31:ab:40:3c:f4:4e:d1:0d:a7:78:13: 01:f2:57:40:4f:03:f7:c8:b5:7a:b3:57:8b:c3:7d:57:b9:7d: ed:4f:db:21:93:2a:a6:7a:15:79:47:58:c4:21:b8:b5:be:a9: 7a:84:ec:cb:22:bd:89:c7:43:09:40:fc:27:d3:1a:d4:7b:65: 91:72:dd:26:a2:c6:42:22:0a:db:ef:96:4d:2a:fa:17:29:de: de:64:22:63:64:ea:03:c7:45:97:8e:af:6a:d7:07:12:13:ed: 19:a3:a1:c0:1a:6d:cf:5c:e8:6f:63:b3:1e:85:cf:27:ce:5e: a4:40:e3:56:ba:00:15:27:47:56:ad:db:35:4d:09:30:1d:20: d4:11:5e:a3:f9:db:b9:b0:5d:6b:84:74:a7:f3:58:2b:ac:a7: 1b:ff:5a:fb:d7:df:80:46:ff:3d:47:1c:1d:2a:4b:b1:44:70: 55:79:ca:69:6a:44:65:59:27:44:72:03:1a:ac:d3:72:f5:91: 3d:46:24:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKDU3Q0YzOUYzOUFCNjFCNTM4RUVBN0NCMkQ1NkEzNEJF NTdCODlBRkIwHhcNMjUwODIyMTQ0ODQzWhcNMjUwODI5MTQ0ODQzWjAYMRYwFAYD VQQDEw02OGE4ODM0Yi00Zjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49PUmRekngUagixJbofFT2xhjM8s5h/let+YdSfxyhvF+d5p2VcR8iEM924M 1I3w3XhdJm6G+o+C/tZE/5jK8+d2K8fmLwCfjZxki6NTwvUDnQJwvbNJA+8hFFkU sTbbVV09JO365I2+ZsvoRVpPHn90rHczeObEVr4x2FELerWqMViQs3ghqvDz3fgP fcUA2cVEeTeSoA1d0OFuDSWiHhVrD9QlPeh2LP65dOLLFMFGEO4hKwgE8qoPBZTH 5dgNIhB0m0rzDeYj2gHue7Tsi5eI+5VH0HGfwv/lKCmhLzxtzthmk3gx7PD2j+Nr CHD+0Qj3569sacn4bvjtNLrmbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4iLlc0 MD3NIwSVGJUQcaj7233nMB8GA1UdIwQYMBaAFFfPOfOathtTjup8stVqNL5XuJr7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC8zQTA3RTBCQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcxT082bnl5MVdvMHZsZTRt dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Y4ODU4NXEyRzFPTzZueXkxV28wdmxlNG12cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC8zQTA3RTBCQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcx T082bnl5MVdvMHZsZTRtdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXwaETlFLMG4hYVjb3vm22cLHSjW4fa4ybFTgKJeOLjcf7Q8xM54o1 EmKuHbeg5K1tV6sphSFukpYVGxaxMatAPPRO0Q2neBMB8ldATwP3yLV6s1eLw31X uX3tT9shkyqmehV5R1jEIbi1vql6hOzLIr2Jx0MJQPwn0xrUe2WRct0mosZCIgrb 75ZNKvoXKd7eZCJjZOoDx0WXjq9q1wcSE+0Zo6HAGm3PXOhvY7Mehc8nzl6kQONW ugAVJ0dWrds1TQkwHSDUEV6j+du5sF1rhHSn81grrKcb/1r719+ARv89RxwdKkux RHBVecppakRlWSdEcgMarNNy9ZE9RiTv -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:16 2025 by rpki-client