$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: +z/RXCEXk0eeDYOSZYTehRh532vZW8PXcF3/Wl7EqKQ= Subject key identifier: 7D:06:8E:8A:A4:FF:B4:ED:7A:94:B1:57:2D:4E:22:E2:5B:9C:5B:1F Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1D4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1D38 Signing time: Fri 22 Aug 2025 16:24:19 +0000 Manifest this update: Fri 22 Aug 2025 16:24:19 +0000 Manifest next update: Fri 29 Aug 2025 16:24:19 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: gujvkzNSj9zqDX9j6Axyocr5NnFXDALazfpKotIlAuY=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: /prr9YJCzmst/EHhwq+RVn+bdS5HeKi3OTJCcnb49ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7501 (0x1d4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Aug 22 16:24:19 2025 GMT Not After : Aug 29 16:24:19 2025 GMT Subject: CN=68a899b3-6f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:26:86:e8:5c:a5:8a:bd:49:81:c3:29:38:5b: a6:41:22:e8:b2:ba:5f:c4:2e:ff:84:fd:b9:5a:f4: 47:a0:ec:7b:6e:57:c3:5a:7d:8d:95:dd:66:d4:da: f1:bf:0b:16:99:35:a7:ab:11:99:f9:95:71:56:6a: 72:2e:8f:aa:ea:54:a0:14:0b:a0:fa:24:11:ba:f6: 48:cc:c6:33:cb:79:31:00:92:b1:7e:8f:a6:ab:50: 31:90:ba:d6:da:22:ce:65:84:f6:9a:6a:ab:fd:3e: 0c:12:dd:12:4c:39:2e:90:73:b2:d0:18:b5:4e:f3: ad:72:a9:0e:89:1a:04:35:8c:19:b1:76:b8:ff:e9: 9b:1d:39:fc:28:c1:38:79:26:a3:19:a9:e7:08:54: 68:8d:78:7e:33:d3:01:47:82:10:da:3b:e2:5d:9d: f6:ad:89:86:2d:f6:8f:e1:e1:64:f3:f0:e5:9f:7b: 7c:fb:1a:21:c8:b0:38:c4:3b:f4:9f:63:95:27:91: db:b1:ce:69:a0:6e:21:d6:bb:76:52:90:32:e8:d9: c8:f9:1f:d4:2b:16:33:27:ae:19:c5:56:9e:3a:60: 37:be:1a:13:5a:b7:3b:c7:72:e2:88:15:cd:ff:c2: 70:a2:80:c8:f2:fe:29:3b:10:90:9e:5a:09:b9:e4: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:06:8E:8A:A4:FF:B4:ED:7A:94:B1:57:2D:4E:22:E2:5B:9C:5B:1F X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:57:8a:27:17:4e:db:35:c5:12:ed:a1:42:b0:cf:15:2b:7f: 73:86:0b:35:bd:83:3b:ca:61:4d:b6:b1:56:b6:87:5c:37:af: fc:50:01:55:78:29:5a:b1:6b:65:47:8c:10:0b:ba:4a:30:6b: 70:ca:eb:10:a6:13:e0:a1:21:c9:32:5a:d6:29:cd:43:31:65: 48:2d:6c:e0:b0:7e:14:69:fa:86:a2:42:86:be:1e:67:ed:b2: e3:bd:52:d4:88:17:43:b7:e6:fc:22:c9:71:31:42:d4:e0:82: 3c:eb:32:50:14:b8:53:77:e1:22:e4:6b:48:35:21:6f:f9:8b: 7d:30:85:7f:55:5f:3c:5f:a8:94:5d:2c:4f:dd:bb:c6:12:01: fb:10:88:e4:41:d9:8f:a7:0d:66:a0:e5:da:41:93:cd:61:6c: d0:14:4f:33:84:60:a9:9a:85:14:ce:d8:32:d3:f6:b8:bf:82: f2:9f:85:58:56:dd:17:de:cf:52:dc:d4:17:0f:da:8b:73:27: 10:2c:b2:07:52:dd:0c:46:8d:32:d6:a6:a5:4c:de:93:f8:9d: 5a:db:ea:13:26:b0:bf:88:b2:89:a1:92:b6:32:fe:9a:b3:4d: 75:39:02:1f:2e:7d:49:bd:73:27:e4:48:e6:84:b8:da:d9:ed: 17:c8:5b:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjUwODIyMTYyNDE5WhcNMjUwODI5MTYyNDE5WjAYMRYwFAYD VQQDEw02OGE4OTliMy02ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CaG6Fylir1JgcMpOFumQSLosrpfxC7/hP25WvRHoOx7blfDWn2Nld1m1Nrx vwsWmTWnqxGZ+ZVxVmpyLo+q6lSgFAug+iQRuvZIzMYzy3kxAJKxfo+mq1AxkLrW 2iLOZYT2mmqr/T4MEt0STDkukHOy0Bi1TvOtcqkOiRoENYwZsXa4/+mbHTn8KME4 eSajGannCFRojXh+M9MBR4IQ2jviXZ32rYmGLfaP4eFk8/Dln3t8+xohyLA4xDv0 n2OVJ5Hbsc5poG4h1rt2UpAy6NnI+R/UKxYzJ64ZxVaeOmA3vhoTWrc7x3LiiBXN /8JwooDI8v4pOxCQnloJueRpCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0Gjoqk /7TtepSxVy1OIuJbnFsfMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhV4onF07bNcUS7aFCsM8VK39zhgs1vYM7ymFNtrFWtodcN6/8UAFV eClasWtlR4wQC7pKMGtwyusQphPgoSHJMlrWKc1DMWVILWzgsH4UafqGokKGvh5n 7bLjvVLUiBdDt+b8IslxMULU4II86zJQFLhTd+Ei5GtINSFv+Yt9MIV/VV88X6iU XSxP3bvGEgH7EIjkQdmPpw1moOXaQZPNYWzQFE8zhGCpmoUUztgy0/a4v4Lyn4VY Vt0X3s9S3NQXD9qLcycQLLIHUt0MRo0y1qalTN6T+J1a2+oTJrC/iLKJoZK2Mv6a s011OQIfLn1JvXMn5EjmhLja2e0XyFsU -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:25 2025 by rpki-client