$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json) Hash identifier: +VIV2wL3wKtS18SUL/osgv6wXjBji3w/ZtiNhsosKJs= Subject key identifier: 66:C5:63:98:46:07:DD:EF:03:19:A9:00:34:98:4F:B1:41:A7:B0:D0 Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Certificate serial: 0B4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft Manifest number: 0B41 Signing time: Fri 22 Aug 2025 19:19:48 +0000 Manifest this update: Fri 22 Aug 2025 19:19:47 +0000 Manifest next update: Fri 29 Aug 2025 19:19:47 +0000 Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: vKyiGPR06N8zhJzoMxhId3A40rMTGDuMhnKOs6LPSGM=) 2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: e8DrNgU6wclV+/cuRuh0FDYWi/CeredwOHLzSK+l0vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Validity Not Before: Aug 22 19:19:47 2025 GMT Not After : Aug 29 19:19:47 2025 GMT Subject: CN=68a8c2d3-e6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:34:d3:56:9c:98:d6:c1:11:32:1a:51:b3:23: b4:5e:98:22:24:a1:3e:3b:b4:a2:6e:25:f0:2a:9e: 90:1d:63:2a:bc:b0:3a:3e:5c:fd:08:85:3f:04:e2: df:a0:2e:5c:7e:cf:85:93:c2:26:61:45:50:cf:dd: bc:35:4e:3c:26:4a:fd:d1:59:c3:e9:63:e1:cd:dc: d7:9c:b5:87:d0:06:2c:22:f4:e6:10:27:09:9e:a2: df:22:ab:11:47:92:84:23:5d:88:b8:11:d7:5a:c9: e3:49:ab:0c:2b:04:75:5e:82:e7:01:b2:dd:b9:c0: 48:0b:76:f7:39:36:aa:88:0d:db:b2:a4:68:c5:a2: 42:48:db:78:21:43:00:b4:7c:e8:96:b6:2d:51:5e: 4f:b4:b8:ed:2c:5a:79:34:3b:02:58:30:43:07:7e: 8a:91:89:76:63:86:2e:2f:18:ab:fd:1b:77:95:0e: ff:99:8c:b2:64:77:00:fd:00:1c:98:df:56:40:4b: 5d:e5:d1:3d:a8:e1:b3:8d:85:54:4e:13:1a:33:dc: dd:54:32:23:bc:3b:48:1f:f6:f8:b5:5a:c0:c9:f5: ab:4c:4e:5f:60:77:99:74:47:a9:78:a2:4d:7e:d0: b4:36:e2:35:d9:4a:cb:d9:1b:dc:1d:83:ef:9c:44: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C5:63:98:46:07:DD:EF:03:19:A9:00:34:98:4F:B1:41:A7:B0:D0 X509v3 Authority Key Identifier: keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d8:c1:65:5c:90:67:1c:68:da:4c:a1:b0:9f:2e:11:bd:67: b2:5b:78:ff:c7:56:3e:fe:9c:b4:ef:a9:32:7b:a8:5b:bf:1c: e9:67:d1:a7:7d:6c:0d:7f:15:47:e6:99:27:26:14:5b:8b:35: e6:20:ed:ed:6d:be:14:55:33:06:a6:40:ed:02:ab:82:12:fc: a7:d5:6a:bf:f2:00:6b:ea:56:61:cc:66:7d:ed:55:aa:c1:cc: cc:db:d5:b8:36:d2:a5:c6:af:4d:24:84:e5:46:32:68:ea:9b: 4f:2e:19:c8:c2:c4:94:17:74:d2:65:1e:c5:a0:8f:e9:40:75: 89:b8:e3:8b:ac:1d:8b:c6:96:de:44:76:6f:a6:27:fd:c1:82: f3:28:cc:f6:82:d0:85:30:3a:77:52:9d:86:d0:62:fc:6c:ae: ac:69:81:f8:87:71:0f:73:37:d5:fd:9f:ce:d2:c6:7c:ca:ff: 9b:78:bd:00:32:84:a0:7a:b8:06:a5:54:b1:1c:f5:ae:80:20: a6:cf:ea:b6:5c:a6:ef:c2:08:72:c1:20:44:a6:b5:0d:b9:27: 82:6e:2a:74:13:f2:58:69:29:ac:5a:e5:40:84:40:9a:89:1e: 1b:21:8f:a0:ea:80:80:3c:1c:a4:6a:c3:ad:a5:5a:df:05:60: 9f:db:e1:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3 OTExQkU1QjUwHhcNMjUwODIyMTkxOTQ3WhcNMjUwODI5MTkxOTQ3WjAYMRYwFAYD VQQDEw02OGE4YzJkMy1lNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TTTVpyY1sERMhpRsyO0XpgiJKE+O7SibiXwKp6QHWMqvLA6Plz9CIU/BOLf oC5cfs+Fk8ImYUVQz928NU48Jkr90VnD6WPhzdzXnLWH0AYsIvTmECcJnqLfIqsR R5KEI12IuBHXWsnjSasMKwR1XoLnAbLducBIC3b3OTaqiA3bsqRoxaJCSNt4IUMA tHzolrYtUV5PtLjtLFp5NDsCWDBDB36KkYl2Y4YuLxir/Rt3lQ7/mYyyZHcA/QAc mN9WQEtd5dE9qOGzjYVUThMaM9zdVDIjvDtIH/b4tVrAyfWrTE5fYHeZdEepeKJN ftC0NuI12UrL2RvcHYPvnESxfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbFY5hG B93vAxmpADSYT7FBp7DQMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS2MFlXJBnHGjaTKGwny4RvWeyW3j/x1Y+/py076kye6hbvxzpZ9Gn fWwNfxVH5pknJhRbizXmIO3tbb4UVTMGpkDtAquCEvyn1Wq/8gBr6lZhzGZ97VWq wczM29W4NtKlxq9NJITlRjJo6ptPLhnIwsSUF3TSZR7FoI/pQHWJuOOLrB2Lxpbe RHZvpif9wYLzKMz2gtCFMDp3Up2G0GL8bK6saYH4h3EPczfV/Z/O0sZ8yv+beL0A MoSgergGpVSxHPWugCCmz+q2XKbvwghywSBEprUNuSeCbip0E/JYaSmsWuVAhECa iR4bIY+g6oCAPBykasOtpVrfBWCf2+E2 -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:28 2025 by rpki-client