$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json) Hash identifier: ptUpqzRupEeFUIc0JZwVZ8F8uvNm2qR/DiURt5nhdyY= Subject key identifier: EA:66:31:8F:A1:8D:4F:38:7D:F6:4E:F7:D9:2C:12:75:06:F9:B8:96 Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft Manifest number: 87 Signing time: Sat 23 Aug 2025 06:54:50 +0000 Manifest this update: Sat 23 Aug 2025 06:54:49 +0000 Manifest next update: Sat 30 Aug 2025 06:54:49 +0000 Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: jp4yNazYidvUxpMX9BNhanIgySEhwtuj4AxH8G7sVR0=) 2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: 96lGjI+rVLrvfkE2WsUYkz8c8INkPpGaZ8hTU2N39nI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Validity Not Before: Aug 23 06:54:49 2025 GMT Not After : Aug 30 06:54:49 2025 GMT Subject: CN=68a965b9-7a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:41:8d:4d:7a:ce:3d:72:6d:41:cc:ca:5a:36: c3:81:bc:e4:35:bc:1a:00:aa:da:d4:4f:82:e8:3e: ac:50:40:cc:d7:f8:04:12:e2:e6:09:c5:5b:44:70: c7:d9:d4:bc:34:e5:9a:a1:e0:c0:d2:cc:66:28:20: e9:3b:1f:c2:4a:37:e8:85:f9:dc:d7:ad:30:f8:ab: 12:f6:6b:fa:58:d4:ea:84:5e:73:9d:be:a6:e4:e5: 36:71:13:ab:28:6a:69:0d:c1:65:36:b6:0c:45:07: fc:2a:fc:78:51:f4:b8:4d:3f:26:e7:5f:fa:1d:78: d0:61:9c:a5:ba:cf:3d:56:45:ce:cc:a4:58:43:07: 61:d8:36:ff:55:c7:45:d9:6a:a9:4e:62:84:26:21: 25:3b:89:f5:77:07:dc:06:c3:9a:e4:15:56:ef:4e: 13:6b:3a:d9:ed:bc:d3:bf:7e:c5:d8:83:57:4f:cd: e0:7f:18:46:32:14:ae:46:4f:4f:80:84:24:90:ab: dd:df:09:be:59:90:4f:8b:e4:d8:33:fb:5f:02:bb: bc:ca:25:07:78:9c:fa:b3:d8:c7:92:ae:94:48:1d: da:b0:85:e4:9a:e1:d2:c2:ee:0a:9f:60:3d:35:f7: 6d:10:32:b4:06:d5:ec:b9:07:63:5f:89:85:55:01: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:66:31:8F:A1:8D:4F:38:7D:F6:4E:F7:D9:2C:12:75:06:F9:B8:96 X509v3 Authority Key Identifier: keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2d:87:84:8a:33:02:fe:07:ad:7d:80:1d:bc:80:5d:46:d0: ba:db:e9:e8:ec:7b:82:aa:86:26:e9:23:8b:eb:28:ee:b6:f4: 7e:00:c1:70:73:bb:d9:c3:0f:6e:1e:e4:57:84:a4:b0:27:eb: f6:42:c4:f5:37:6c:f7:0a:30:b7:14:28:66:00:e7:a2:9b:3c: 80:86:da:7a:c0:f4:ad:fd:99:e1:9f:f5:ec:8a:50:9c:a3:1e: ab:1b:6a:a6:6d:ab:4a:6f:37:4b:76:b2:1f:68:b0:2d:a4:5e: 24:45:d6:8b:4b:f6:33:fc:7a:5c:99:a5:8c:e3:a2:a8:f3:6a: 41:e2:61:15:9f:ec:11:ba:33:0c:ce:cb:2b:a0:65:bc:20:b3: 18:19:2b:a7:26:35:62:08:36:cc:05:58:20:09:d1:17:fe:d4: 18:92:ae:c2:9e:fe:95:6a:a4:6b:37:2c:b1:7d:cf:9b:b1:40: 7c:0a:1f:04:1e:6b:f0:40:0b:91:4a:87:56:a5:34:a4:70:90: fe:9c:7b:e5:b1:19:47:d7:49:02:9e:c1:f2:3e:86:77:02:3f: 3e:23:c1:9b:56:b9:39:44:0f:6f:0b:a6:a4:a4:87:dc:f9:96: 00:02:0e:ae:f6:3d:07:c0:c7:02:5d:b6:10:ed:1e:3d:af:39: ee:19:51:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBNDcxMTAvBgNVBAUTKDdGNzc1OTIwNDJFM0M4N0JFNTZFRUQ4MUQ5Q0NCMEU5 NzQwMkNERDcwHhcNMjUwODIzMDY1NDQ5WhcNMjUwODMwMDY1NDQ5WjAYMRYwFAYD VQQDEw02OGE5NjViOS03YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20GNTXrOPXJtQczKWjbDgbzkNbwaAKra1E+C6D6sUEDM1/gEEuLmCcVbRHDH 2dS8NOWaoeDA0sxmKCDpOx/CSjfohfnc160w+KsS9mv6WNTqhF5znb6m5OU2cROr KGppDcFlNrYMRQf8Kvx4UfS4TT8m51/6HXjQYZylus89VkXOzKRYQwdh2Db/VcdF 2WqpTmKEJiElO4n1dwfcBsOa5BVW704TazrZ7bzTv37F2INXT83gfxhGMhSuRk9P gIQkkKvd3wm+WZBPi+TYM/tfAru8yiUHeJz6s9jHkq6USB3asIXkmuHSwu4Kn2A9 NfdtEDK0BtXsuQdjX4mFVQGXhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpmMY+h jU84ffZO99ksEnUG+biWMB8GA1UdIwQYMBaAFH93WSBC48h75W7tgdnMsOl0As3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny8xNTkwN0MyMkI4 MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlIdmxidTJCMmN5dzZYUUN6 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE0Ny8xNTkwN0MyMkI4MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlI dmxidTJCMmN5dzZYUUN6ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRLYeEijMC/getfYAdvIBdRtC62+no7HuCqoYm6SOL6yjutvR+AMFw c7vZww9uHuRXhKSwJ+v2QsT1N2z3CjC3FChmAOeimzyAhtp6wPSt/Znhn/XsilCc ox6rG2qmbatKbzdLdrIfaLAtpF4kRdaLS/Yz/HpcmaWM46Ko82pB4mEVn+wRujMM zssroGW8ILMYGSunJjViCDbMBVggCdEX/tQYkq7Cnv6VaqRrNyyxfc+bsUB8Ch8E HmvwQAuRSodWpTSkcJD+nHvlsRlH10kCnsHyPoZ3Aj8+I8GbVrk5RA9vC6akpIfc +ZYAAg6u9j0HwMcCXbYQ7R49rznuGVEa -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:44 2025 by rpki-client