$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: QLY4N9xTA0ZbXbvROj+1vquDdianXFpkIHPBSWFNrEk= Subject key identifier: DB:0D:D6:0F:9A:04:F2:F2:14:39:0E:B8:51:C8:F5:F5:65:D5:C4:A9 Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 0883 Signing time: Fri 22 Aug 2025 20:57:20 +0000 Manifest this update: Fri 22 Aug 2025 20:57:19 +0000 Manifest next update: Fri 29 Aug 2025 20:57:19 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: a4fg9Ek0SyH+5t9V5flF3u6vk6/EqoNRZk9Nf8jPZWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: Aug 22 20:57:19 2025 GMT Not After : Aug 29 20:57:19 2025 GMT Subject: CN=68a8d9b0-d43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:95:c4:06:bf:8c:ca:59:aa:bf:05:d1:1a: 58:bc:08:60:ff:a0:cd:bf:73:48:3d:39:3c:61:e1: 08:88:6e:26:00:98:05:14:54:03:c3:c6:1b:8e:9f: be:ff:3b:27:14:e9:5a:3e:86:0c:bd:9a:3b:aa:10: fb:86:3c:90:b7:be:06:15:88:13:e3:44:24:51:94: 2a:2a:96:05:5f:3d:8a:a9:f6:94:eb:81:d8:e7:cf: 68:5a:57:5c:67:be:1e:f6:ab:12:94:f1:fd:63:85: ed:d0:5e:2a:87:12:2f:1a:f7:aa:f6:90:15:dc:e6: 2f:ae:b1:5d:44:0a:61:7c:50:13:0d:c9:fc:80:cc: b2:7c:c7:a6:91:b3:f0:d4:ef:2b:18:7c:36:f3:12: 69:a7:92:8f:85:04:e3:f2:09:69:30:5d:27:e8:d2: 05:9d:6c:a1:7a:c9:b4:da:09:55:0b:d7:59:5a:a4: 41:f1:19:a7:99:72:99:86:51:15:f8:2f:73:a0:d6: 10:75:a9:3e:2d:23:74:a5:a0:58:f7:f5:5f:e3:37: 20:ef:e7:76:5d:de:1a:18:f7:f1:d3:d4:03:93:53: 65:d2:72:a0:70:b2:2c:e9:8a:07:b1:0f:06:d4:49: 3d:b3:6f:be:f3:3c:46:57:1d:dc:ea:90:7a:28:68: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:D6:0F:9A:04:F2:F2:14:39:0E:B8:51:C8:F5:F5:65:D5:C4:A9 X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:09:1d:f2:6f:22:cc:7a:02:df:e6:2d:98:45:e6:6e:9c: 35:9a:24:45:ce:f5:97:28:01:30:03:ec:2b:71:8f:15:59:e7: 75:ea:4f:7a:1f:45:7d:78:21:50:5e:8a:13:b9:96:bc:97:ff: 19:4a:e2:b3:f3:ba:a4:ee:41:d7:83:3f:a8:1a:1e:86:64:07: af:ff:c8:3a:48:f7:59:c4:f1:e3:c2:48:e1:d5:8c:97:0c:ae: 31:3a:05:70:3a:63:ba:c7:21:05:88:e3:f5:ee:ed:7d:c6:19: d1:be:45:0a:25:0d:22:22:a5:ce:9a:90:e8:e6:58:6f:46:fb: 85:09:f1:8d:55:8b:8d:4b:5d:7e:c4:9e:a4:98:17:ba:a0:5f: f2:7b:3f:7c:e9:4b:ac:09:35:c4:ef:1b:51:b6:44:0d:4a:42: 9a:03:85:8d:57:79:8b:9d:fe:6d:02:bc:7e:54:c2:fd:01:ec: 05:85:25:6f:41:1c:4f:63:d5:97:71:fc:02:26:a1:78:7d:93: 4e:d7:75:ae:7f:ab:50:cb:35:67:76:81:8a:d6:84:36:eb:67: 09:f7:28:c0:f3:ab:a9:c4:4d:d8:96:d5:34:66:06:e1:2d:3c: 81:42:03:06:88:70:f8:eb:b4:dd:97:ae:e1:5a:23:03:df:2c: 56:46:dd:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjUwODIyMjA1NzE5WhcNMjUwODI5MjA1NzE5WjAYMRYwFAYD VQQDEw02OGE4ZDliMC1kNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfOVxAa/jMpZqr8F0RpYvAhg/6DNv3NIPTk8YeEIiG4mAJgFFFQDw8Ybjp++ /zsnFOlaPoYMvZo7qhD7hjyQt74GFYgT40QkUZQqKpYFXz2KqfaU64HY589oWldc Z74e9qsSlPH9Y4Xt0F4qhxIvGveq9pAV3OYvrrFdRAphfFATDcn8gMyyfMemkbPw 1O8rGHw28xJpp5KPhQTj8glpMF0n6NIFnWyhesm02glVC9dZWqRB8RmnmXKZhlEV +C9zoNYQdak+LSN0paBY9/Vf4zcg7+d2Xd4aGPfx09QDk1Nl0nKgcLIs6YoHsQ8G 1Ek9s2++8zxGVx3c6pB6KGj9FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsN1g+a BPLyFDkOuFHI9fVl1cSpMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwnwkd8m8izHoC3+YtmEXmbpw1miRFzvWXKAEwA+wrcY8VWed16k96 H0V9eCFQXooTuZa8l/8ZSuKz87qk7kHXgz+oGh6GZAev/8g6SPdZxPHjwkjh1YyX DK4xOgVwOmO6xyEFiOP17u19xhnRvkUKJQ0iIqXOmpDo5lhvRvuFCfGNVYuNS11+ xJ6kmBe6oF/yez986UusCTXE7xtRtkQNSkKaA4WNV3mLnf5tArx+VML9AewFhSVv QRxPY9WXcfwCJqF4fZNO13Wuf6tQyzVndoGK1oQ262cJ9yjA86upxE3YltU0Zgbh LTyBQgMGiHD467Tdl67hWiMD3yxWRt1k -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:50 2025 by rpki-client