$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: UHIjGqyVqTB2dCFJMCKKA/pNP4UHZO3tLPW8XvRBG0A= Subject key identifier: 2B:7F:D1:92:47:2F:8B:27:A8:49:43:5F:AC:74:AE:2B:5B:E3:CA:8F Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 0137 Signing time: Sat 23 Aug 2025 04:36:53 +0000 Manifest this update: Sat 23 Aug 2025 04:36:52 +0000 Manifest next update: Sat 30 Aug 2025 04:36:52 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: qFkWKmoUdLRiq92VX63SK24zgW4y41uTc/Od1qLaz7w=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Aug 23 04:36:52 2025 GMT Not After : Aug 30 04:36:52 2025 GMT Subject: CN=68a94564-101e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:8b:ca:f1:95:f5:fc:ee:6f:60:33:1d:c2: 1c:9d:39:33:32:46:b8:94:0d:f3:0e:2b:be:c6:70: 04:1d:87:d1:f3:33:61:3e:9c:be:86:5f:66:16:58: dc:b1:e5:f8:74:2f:66:14:d1:b4:56:bc:bb:04:59: 97:2c:0d:08:ad:b8:5d:c3:19:5b:52:5e:0b:33:19: d5:81:45:9c:48:c6:61:e0:d7:b5:20:7d:bf:e1:8c: 43:3e:ba:16:ab:e6:c2:ab:f3:69:8d:e1:4a:c4:68: a8:52:79:85:31:bb:df:05:f2:1a:7a:73:60:5c:b7: 4c:f1:84:92:26:e0:dd:ea:0b:10:09:47:8f:9b:08: 86:58:71:ac:2b:22:e9:78:0e:43:e3:72:aa:02:45: 8a:6b:a2:ea:8a:f9:55:41:bf:0f:bd:ae:11:be:c5: 1e:8a:c4:f6:43:aa:3a:19:5c:78:2f:24:5f:04:b1: a7:b4:db:69:17:c4:3b:52:c2:d5:dc:10:a9:fe:50: 37:2e:c0:09:0f:9e:8d:60:64:8f:37:04:49:de:fd: f3:26:3d:50:ae:8f:8c:17:5c:31:06:be:dc:91:65: aa:2b:6d:fd:3e:9d:e8:14:51:c6:4c:f6:dc:ed:d1: 36:7e:be:d0:7f:ec:69:8f:b3:7b:49:6c:cc:b3:35: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7F:D1:92:47:2F:8B:27:A8:49:43:5F:AC:74:AE:2B:5B:E3:CA:8F X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:f7:ea:79:49:cb:a6:d5:89:4f:db:ed:d9:af:b5:4d:8a:27: dc:66:a0:f7:f5:e2:9e:35:86:87:63:dc:f5:d3:7d:79:e2:5c: 6c:f1:99:c3:ff:49:a0:2b:69:76:ec:0f:6d:cb:72:fc:14:b8: c1:1b:d8:e8:f8:47:07:1d:78:a9:2e:7a:d4:72:d9:94:2b:3d: 12:12:c4:59:49:eb:bd:7c:2a:ed:af:a9:fa:9b:7a:89:7e:50: 1d:81:a3:15:29:17:d8:f8:a5:f2:ab:77:3d:ea:1f:f6:d7:b1: 07:36:c5:64:ff:01:8e:a3:c6:20:3c:11:ac:0f:ca:7a:49:01: 99:89:16:60:c4:43:87:d0:9c:f9:ab:8b:16:8f:99:6e:80:74: 32:aa:03:57:05:1d:94:95:2f:66:4c:ed:54:68:f8:d8:2f:63: 42:c1:75:04:9c:17:41:82:15:07:0f:49:8e:98:b5:ee:20:c3: 23:b2:cc:32:b2:15:40:a0:f3:38:02:4d:c0:60:4e:aa:d9:38: 1a:fe:4d:4e:6b:5e:24:ad:7f:06:5c:b4:3d:d9:84:d8:e0:52: 61:98:1c:e7:db:b1:0a:35:37:23:96:1a:4d:9c:5d:17:76:a9: 30:bc:30:d2:5f:cf:a2:81:d0:ef:c5:46:2e:79:74:43:87:1d: 7d:c4:1d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUwODIzMDQzNjUyWhcNMjUwODMwMDQzNjUyWjAYMRYwFAYD VQQDEw02OGE5NDU2NC0xMDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGiLyvGV9fzub2AzHcIcnTkzMka4lA3zDiu+xnAEHYfR8zNhPpy+hl9mFljc seX4dC9mFNG0Vry7BFmXLA0IrbhdwxlbUl4LMxnVgUWcSMZh4Ne1IH2/4YxDProW q+bCq/NpjeFKxGioUnmFMbvfBfIaenNgXLdM8YSSJuDd6gsQCUePmwiGWHGsKyLp eA5D43KqAkWKa6LqivlVQb8Pva4RvsUeisT2Q6o6GVx4LyRfBLGntNtpF8Q7UsLV 3BCp/lA3LsAJD56NYGSPNwRJ3v3zJj1Qro+MF1wxBr7ckWWqK239Pp3oFFHGTPbc 7dE2fr7Qf+xpj7N7SWzMszXWDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt/0ZJH L4snqElDX6x0ritb48qPMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD9+p5Scum1YlP2+3Zr7VNiifcZqD39eKeNYaHY9z103154lxs8ZnD /0mgK2l27A9ty3L8FLjBG9jo+EcHHXipLnrUctmUKz0SEsRZSeu9fCrtr6n6m3qJ flAdgaMVKRfY+KXyq3c96h/217EHNsVk/wGOo8YgPBGsD8p6SQGZiRZgxEOH0Jz5 q4sWj5lugHQyqgNXBR2UlS9mTO1UaPjYL2NCwXUEnBdBghUHD0mOmLXuIMMjsswy shVAoPM4Ak3AYE6q2Tga/k1Oa14krX8GXLQ92YTY4FJhmBzn27EKNTcjlhpNnF0X dqkwvDDSX8+igdDvxUYueXRDhx19xB1E -----END CERTIFICATE-----Generated at Sat Aug 23 19:00:53 2025 by rpki-client