$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json) Hash identifier: answw0zrT7N4cTVFkk8r0F7sZAMVdTp4rScqSdBWSJc= Subject key identifier: AD:1D:38:6A:3D:26:F5:69:7D:33:0D:40:4C:26:5C:39:1E:57:F8:4D Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Certificate serial: 0E57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft Manifest number: 0E4F Signing time: Fri 22 Aug 2025 17:52:44 +0000 Manifest this update: Fri 22 Aug 2025 17:52:43 +0000 Manifest next update: Fri 29 Aug 2025 17:52:43 +0000 Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: 9+mvzVjSdsaYvFJbwQsfs0x0EzONFScdCQB22Err6Lc=) 2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: X7Dq3eZ/GJf+9yPNH4D4Wvo3ddILMQm0OljP2i+67DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3671 (0xe57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Validity Not Before: Aug 22 17:52:43 2025 GMT Not After : Aug 29 17:52:43 2025 GMT Subject: CN=68a8ae6b-5a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:43:1d:0c:1a:89:45:34:2b:33:0d:8f:f6: 36:98:5d:ff:a8:63:71:7b:c3:55:29:88:e4:0b:b4: 28:1d:41:2b:a6:b6:d2:4d:66:6f:55:4d:bf:de:ec: 26:ec:93:80:3f:39:d9:0a:a8:05:73:3b:06:fa:8c: d1:61:a1:e0:c7:a6:5e:49:dc:7b:4e:e3:14:1b:b4: 7c:be:03:a4:09:b5:80:a9:53:f0:c1:49:24:63:e4: 62:df:d4:fb:59:91:45:4e:86:ca:6f:16:3b:7e:2f: 03:56:ee:8a:f2:7e:4b:01:84:b1:b9:d6:0d:1a:1a: da:aa:43:64:dc:d5:03:19:f6:81:d9:bb:f5:cf:22: 97:27:47:cd:7b:1f:4b:1b:1c:3c:5e:f7:e5:3a:7b: d9:4d:8c:58:2d:ef:b9:2e:22:72:0c:2e:6e:d4:12: 5b:2f:1c:b8:bb:9e:4f:b4:29:03:25:0f:79:24:7e: 1a:4b:e0:c5:c2:5d:dd:0a:fe:51:7f:98:f9:7d:87: 4b:79:a7:06:bb:90:ac:fa:b5:6b:f0:80:1a:7a:f2: 63:61:f8:6d:af:b1:cd:88:70:3c:0a:de:75:59:05: ab:c6:6f:72:9e:48:2a:5b:2f:7f:90:55:98:3c:b7: ea:8c:7b:6d:e7:59:0f:98:83:c4:d3:54:ec:7a:6e: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1D:38:6A:3D:26:F5:69:7D:33:0D:40:4C:26:5C:39:1E:57:F8:4D X509v3 Authority Key Identifier: keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ef:c3:1b:34:9e:d0:be:01:3d:d4:b8:22:b3:65:52:72:0d: 97:03:7d:f3:18:29:8e:e0:ec:a2:a3:73:f3:b9:8c:e7:6d:d1: 50:11:8b:45:22:ce:5b:a2:2e:59:f1:03:98:de:d8:06:b6:11: 50:69:26:07:e7:be:72:0c:a2:f3:67:27:83:97:cb:bc:5f:c1: ed:91:62:f6:cf:c9:1c:ff:1a:85:05:24:83:0c:ca:42:21:38: 8d:c4:19:a8:ff:e7:7b:14:eb:80:5f:47:a8:4e:0f:6f:31:48: 22:db:28:18:7d:fe:c6:e4:74:0a:82:0c:4d:ff:82:61:83:72: f9:5e:d3:73:7f:40:52:fc:a9:c3:ee:0b:49:5f:28:20:d9:72: 28:cb:b8:aa:67:4b:11:4f:d1:a5:7a:27:c6:7e:a7:2a:33:46: 91:2c:67:ed:f8:ac:2a:2e:73:74:cd:0e:3b:4a:f6:70:20:d4: 5c:4c:67:7f:3e:a3:04:79:ab:bc:cd:56:be:2c:48:af:ff:54: b5:2c:0a:93:66:2a:94:04:cd:0c:6b:13:cf:cc:32:d4:b0:6e: e0:96:00:ee:e7:14:84:48:fa:fb:00:21:be:e8:ca:25:45:48: 18:79:95:c5:86:b4:f3:29:61:11:1b:08:bc:fc:19:c9:89:7b: cd:03:b0:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEE3NzdFNDgxOENBMERDQzYzODJFNTYyNTcwNkY5OEM4 MUU5MzA3MjAwHhcNMjUwODIyMTc1MjQzWhcNMjUwODI5MTc1MjQzWjAYMRYwFAYD VQQDEw02OGE4YWU2Yi01YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssBDHQwaiUU0KzMNj/Y2mF3/qGNxe8NVKYjkC7QoHUErprbSTWZvVU2/3uwm 7JOAPznZCqgFczsG+ozRYaHgx6ZeSdx7TuMUG7R8vgOkCbWAqVPwwUkkY+Ri39T7 WZFFTobKbxY7fi8DVu6K8n5LAYSxudYNGhraqkNk3NUDGfaB2bv1zyKXJ0fNex9L Gxw8XvflOnvZTYxYLe+5LiJyDC5u1BJbLxy4u55PtCkDJQ95JH4aS+DFwl3dCv5R f5j5fYdLeacGu5Cs+rVr8IAaevJjYfhtr7HNiHA8Ct51WQWrxm9ynkgqWy9/kFWY PLfqjHtt51kPmIPE01Tsem7VbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0dOGo9 JvVpfTMNQEwmXDkeV/hNMB8GA1UdIwQYMBaAFKd35IGMoNzGOC5WJXBvmMgekwcg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81QjI0QTVDOEE2 QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNNWTRMbFlsY0ctWXlCNlRC eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZmtnWXlnM01ZNExsWWxjRy1ZeUI2VEJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81QjI0QTVDOEE2QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNN WTRMbFlsY0ctWXlCNlRCeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq78MbNJ7QvgE91Lgis2VScg2XA33zGCmO4Oyio3PzuYznbdFQEYtF Is5boi5Z8QOY3tgGthFQaSYH575yDKLzZyeDl8u8X8HtkWL2z8kc/xqFBSSDDMpC ITiNxBmo/+d7FOuAX0eoTg9vMUgi2ygYff7G5HQKggxN/4Jhg3L5XtNzf0BS/KnD 7gtJXygg2XIoy7iqZ0sRT9GleifGfqcqM0aRLGft+KwqLnN0zQ47SvZwINRcTGd/ PqMEeau8zVa+LEiv/1S1LAqTZiqUBM0MaxPPzDLUsG7glgDu5xSESPr7ACG+6Mol RUgYeZXFhrTzKWERGwi8/BnJiXvNA7Dc -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:24 2025 by rpki-client