$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json) Hash identifier: Knt9xwzmL03eeIJEjr9jsYHalJYo8t2yfpHC2qbTSwk= Subject key identifier: 42:10:86:6F:15:BC:EE:90:12:82:D7:86:DA:5A:27:90:3A:C3:54:59 Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft Manifest number: 0B26 Signing time: Fri 04 Jul 2025 19:35:23 +0000 Manifest this update: Fri 04 Jul 2025 19:35:22 +0000 Manifest next update: Fri 11 Jul 2025 19:35:22 +0000 Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: cONMYCpIiJmeWLjj9MkFYzo30GEHlqgzf7RhXsDtMM4=) 2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: N9/aRucZG0vkV0NK+baiZCaCBLLblOnkOGbPF5TkJk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Validity Not Before: Jul 4 19:35:22 2025 GMT Not After : Jul 11 19:35:22 2025 GMT Subject: CN=68682cfa-715f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:f7:d1:11:26:2f:cb:39:db:91:e0:34:3e: 29:5f:07:3c:13:4f:d2:44:97:b0:2e:dd:83:fe:ba: a6:1d:f5:79:45:92:55:08:99:4f:3b:e8:2e:f8:0b: 3f:8c:a3:76:39:35:41:55:10:63:db:b1:5b:43:f7: 76:61:8e:bd:d3:a6:75:de:e6:eb:b7:86:c0:c3:e0: b3:c9:a1:40:53:5d:dc:a0:9f:00:85:12:88:25:c7: c4:a7:d1:09:84:01:74:55:bc:de:1d:56:02:e5:57: aa:6a:a9:26:d7:37:ee:bd:be:54:cb:cf:68:ca:96: 85:d7:60:91:c0:cc:6d:e4:71:a3:fa:6d:ba:04:f1: f8:50:87:b2:21:58:20:e7:a5:12:7e:18:25:e9:0e: 4a:8c:ee:6a:24:4f:88:73:16:a6:1d:9b:09:54:5a: a3:31:49:14:b2:f3:a9:6f:5d:af:a5:1c:37:07:14: 74:c9:c2:9b:d0:6e:8e:e7:97:5f:b1:6d:95:6a:fe: d3:14:d0:60:53:2b:6f:ab:7d:71:d8:1c:ac:94:e7: 8d:16:a5:42:59:1e:eb:9e:62:01:39:7d:3f:15:65: f8:c6:a5:9e:e9:5c:8e:84:b9:bf:56:a0:61:d5:31: 30:bf:b3:a3:da:8f:8b:7c:4e:78:b7:35:14:bd:73: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:10:86:6F:15:BC:EE:90:12:82:D7:86:DA:5A:27:90:3A:C3:54:59 X509v3 Authority Key Identifier: keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:bc:23:37:48:cf:48:a6:ed:f1:2a:90:81:55:1b:fe:f4:8e: 2f:6b:81:0f:4b:bf:28:f3:ab:13:6a:e8:a6:a5:e6:8a:e3:b7: 03:b7:71:93:cd:f2:ec:bb:03:57:13:67:cf:5c:d6:27:e4:25: 8c:f9:2f:49:2b:e2:41:96:66:91:bf:1b:e0:b6:c7:36:f4:d1: ac:15:94:79:16:80:e2:86:4a:35:1a:d4:49:28:0f:a1:7a:9f: ee:4c:f5:b2:00:be:83:c7:d4:c4:d0:bb:56:a1:7b:74:f9:e5: ba:92:c9:2f:68:68:26:d9:c2:6d:a6:d6:30:22:b1:f5:c9:8a: e9:fa:e0:08:aa:23:cf:db:95:00:02:b0:63:dd:ee:12:e2:b1: d4:af:a5:26:93:c6:9f:e7:d2:bb:e4:ea:58:00:5e:44:36:b5: c7:d9:9f:0d:f1:c9:dc:a8:0a:7c:e8:fc:0f:67:03:68:d9:3d: ff:16:dd:15:9f:d3:4a:f5:c1:d1:8b:e6:4d:42:46:bf:bd:b4: f6:62:dd:bf:15:b1:c6:19:ed:8d:53:dc:09:cc:6a:c4:d6:67: dc:72:61:23:c9:91:34:d4:38:11:75:2d:07:05:2a:20:42:a7: 70:4b:04:99:d6:2e:87:39:0b:61:c8:09:5c:ee:94:a1:95:e3: 3b:2b:57:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3 OTExQkU1QjUwHhcNMjUwNzA0MTkzNTIyWhcNMjUwNzExMTkzNTIyWjAYMRYwFAYD VQQDEw02ODY4MmNmYS03MTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDj30REmL8s525HgND4pXwc8E0/SRJewLt2D/rqmHfV5RZJVCJlPO+gu+As/ jKN2OTVBVRBj27FbQ/d2YY6906Z13ubrt4bAw+CzyaFAU13coJ8AhRKIJcfEp9EJ hAF0VbzeHVYC5Veqaqkm1zfuvb5Uy89oypaF12CRwMxt5HGj+m26BPH4UIeyIVgg 56USfhgl6Q5KjO5qJE+IcxamHZsJVFqjMUkUsvOpb12vpRw3BxR0ycKb0G6O55df sW2Vav7TFNBgUytvq31x2ByslOeNFqVCWR7rnmIBOX0/FWX4xqWe6VyOhLm/VqBh 1TEwv7Oj2o+LfE54tzUUvXPXqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIQhm8V vO6QEoLXhtpaJ5A6w1RZMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpvCM3SM9Ipu3xKpCBVRv+9I4va4EPS78o86sTauimpeaK47cDt3GT zfLsuwNXE2fPXNYn5CWM+S9JK+JBlmaRvxvgtsc29NGsFZR5FoDihko1GtRJKA+h ep/uTPWyAL6Dx9TE0LtWoXt0+eW6kskvaGgm2cJtptYwIrH1yYrp+uAIqiPP25UA ArBj3e4S4rHUr6Umk8af59K75OpYAF5ENrXH2Z8N8cncqAp86PwPZwNo2T3/Ft0V n9NK9cHRi+ZNQka/vbT2Yt2/FbHGGe2NU9wJzGrE1mfccmEjyZE01DgRdS0HBSog QqdwSwSZ1i6HOQthyAlc7pShleM7K1cv -----END CERTIFICATE-----Generated at Fri Jul 4 21:59:12 2025 by rpki-client