$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: wwS8jgVxuC8a9rpB+TZDaPBczuJbUhCZBJ7P91R13SU= Subject key identifier: 4F:E0:2C:FD:0C:EF:CB:E3:F7:0D:D3:65:8B:93:C0:A7:CC:DC:66:A8 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 04B4 Signing time: Sat 23 Aug 2025 00:06:35 +0000 Manifest this update: Sat 23 Aug 2025 00:06:35 +0000 Manifest next update: Sat 30 Aug 2025 00:06:35 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: mIroZVf6bI0eFlI/3knouf4UE1aaa1Q0m2u/fv/OIXg=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Aug 23 00:06:35 2025 GMT Not After : Aug 30 00:06:35 2025 GMT Subject: CN=68a9060b-5ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3f:1e:3b:86:e4:33:e0:8a:b6:b1:7c:ea:8b: 81:f2:ff:a2:ad:67:b1:14:7d:3c:51:28:6a:e5:a9: 05:ac:da:cf:83:a7:7e:0b:99:b7:c2:9d:0e:83:6f: b9:73:e9:47:5e:9f:80:6a:20:e0:61:3e:7c:fd:6f: 4f:d4:41:34:92:0a:c0:09:30:61:fd:1c:4f:6b:90: b1:35:b2:c5:03:1f:e4:e9:68:d3:5f:f7:ba:58:fe: 6e:14:36:d6:9b:e5:fa:7b:20:bd:b4:2f:13:c7:e0: 5f:29:f7:4c:9c:8e:bd:f5:ff:aa:d4:ec:a8:d6:93: 20:da:f5:f5:07:94:02:9c:0e:4b:6e:36:48:c6:2c: 6b:8f:25:19:48:3a:e4:d4:e5:e0:9f:fa:ec:9a:22: 25:b4:c4:23:c8:3a:bf:b8:46:4a:bf:96:e5:47:6e: 70:51:09:08:78:91:df:e9:a5:22:70:c2:4f:6f:2f: 75:0a:b5:62:b7:7d:13:ae:c8:63:4a:11:09:69:1f: d0:a3:ff:16:e6:fd:6d:6b:4e:5b:0b:e2:75:27:db: 97:01:4b:13:10:d4:8a:4e:79:43:a3:f3:9c:f6:8a: 02:43:1c:e2:82:ba:c2:b5:3f:0c:19:f8:0f:cd:fc: 21:18:5f:0c:f2:20:b1:6c:35:23:85:1e:8b:22:ba: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E0:2C:FD:0C:EF:CB:E3:F7:0D:D3:65:8B:93:C0:A7:CC:DC:66:A8 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:52:74:98:f1:fc:7e:13:6a:42:44:54:12:96:1d:c3:db:97: 2a:71:db:be:16:11:13:7e:a3:02:1b:b8:94:27:68:5b:2d:08: 4f:d1:08:e8:51:ab:30:93:ca:e5:db:93:26:d3:02:43:ee:f8: 5d:91:83:cb:73:86:e0:9e:ce:bc:49:fe:8f:df:96:53:bb:fe: 79:b4:22:2e:a6:87:88:a4:9c:a7:8e:53:85:3e:e7:1d:3f:12: f6:7a:d8:13:ea:54:1c:65:a3:27:f1:7b:24:a7:57:5a:ca:c5: 69:98:3e:b7:7b:a8:66:a7:90:7a:6f:3d:f8:17:db:d0:fb:02: a5:19:18:b5:28:ec:25:5c:67:04:a9:a2:9c:35:80:5a:11:0c: 07:6a:e8:28:5d:14:83:3c:4d:0a:d3:e6:82:6b:2c:d4:87:22: 98:1f:b1:85:83:a5:7d:58:f2:60:8f:25:9f:ec:fc:3c:ec:44: 76:90:af:0b:a8:ec:85:65:b4:8f:fb:75:f2:f6:50:25:89:2b: 91:04:1b:63:1b:65:9d:3c:8e:9b:b2:b9:8e:3c:8d:1f:0e:6a: f3:03:c0:c8:20:1e:a8:0b:32:2e:0b:a7:98:3d:de:0a:94:07: 46:e0:3c:6c:fd:26:96:52:18:e2:c0:5a:9c:8a:84:21:53:20: 6a:2a:d6:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUwODIzMDAwNjM1WhcNMjUwODMwMDAwNjM1WjAYMRYwFAYD VQQDEw02OGE5MDYwYi01ZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1j8eO4bkM+CKtrF86ouB8v+irWexFH08UShq5akFrNrPg6d+C5m3wp0Og2+5 c+lHXp+AaiDgYT58/W9P1EE0kgrACTBh/RxPa5CxNbLFAx/k6WjTX/e6WP5uFDbW m+X6eyC9tC8Tx+BfKfdMnI699f+q1Oyo1pMg2vX1B5QCnA5LbjZIxixrjyUZSDrk 1OXgn/rsmiIltMQjyDq/uEZKv5blR25wUQkIeJHf6aUicMJPby91CrVit30Trshj ShEJaR/Qo/8W5v1ta05bC+J1J9uXAUsTENSKTnlDo/Oc9ooCQxzigrrCtT8MGfgP zfwhGF8M8iCxbDUjhR6LIrrcaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/gLP0M 78vj9w3TZYuTwKfM3GaoMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeUnSY8fx+E2pCRFQSlh3D25cqcdu+FhETfqMCG7iUJ2hbLQhP0Qjo Uaswk8rl25Mm0wJD7vhdkYPLc4bgns68Sf6P35ZTu/55tCIupoeIpJynjlOFPucd PxL2etgT6lQcZaMn8Xskp1daysVpmD63e6hmp5B6bz34F9vQ+wKlGRi1KOwlXGcE qaKcNYBaEQwHaugoXRSDPE0K0+aCayzUhyKYH7GFg6V9WPJgjyWf7Pw87ER2kK8L qOyFZbSP+3Xy9lAliSuRBBtjG2WdPI6bsrmOPI0fDmrzA8DIIB6oCzIuC6eYPd4K lAdG4Dxs/SaWUhjiwFqcioQhUyBqKtbF -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:45 2025 by rpki-client