$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: /438dx11UfFMIPGpbKKKVY3TKqWHH4eeJ/T0IGoL5Lc= Subject key identifier: 7F:35:2B:48:DB:09:B5:42:22:3A:0F:9C:F0:87:9D:FA:FF:53:D2:CE Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 34B3 Signing time: Fri 22 Aug 2025 14:52:22 +0000 Manifest this update: Fri 22 Aug 2025 14:52:21 +0000 Manifest next update: Fri 29 Aug 2025 14:52:21 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: oR4iPCDYa8A0zqINgkdNXDRQzHDOkE+93KCEZLgM1QI=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: 6tys2kBORt2e9LfTgwSygjIdDqVtnmqGXLJS1SjEsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Aug 22 14:52:21 2025 GMT Not After : Aug 29 14:52:21 2025 GMT Subject: CN=68a88426-1c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:04:f8:65:1a:60:da:0c:14:c9:a8:9c:14: 9d:e4:1f:83:02:90:9b:58:bb:21:cd:19:8f:86:a2: 41:a0:3b:c1:44:33:24:5b:44:a6:26:39:63:63:75: d1:b4:c9:78:af:2a:58:03:04:6d:80:70:08:bf:85: 98:6e:be:49:8f:b5:47:f4:44:40:da:71:24:82:b8: ff:fb:a5:c7:38:32:c1:a9:dd:cd:75:40:fe:8d:b6: 6d:84:ed:c0:64:20:5f:89:f8:30:2b:b1:33:57:a8: a2:84:5a:c2:96:02:57:72:23:db:93:a7:ae:c4:61: 3c:17:43:9f:4a:12:f8:7a:32:18:23:ad:b2:9f:87: 1b:db:25:24:74:45:e0:7c:c9:32:3e:4a:f7:b0:b4: 14:4d:2b:c8:f2:2d:ed:97:91:3b:9d:78:3d:ce:94: 9e:ec:19:eb:5a:84:ea:88:a0:0a:9c:c7:c2:c9:d6: 57:f8:70:8b:41:a5:26:3b:91:f7:83:2b:e8:b3:cf: 2c:9d:82:2a:80:82:a1:d9:6a:3d:6b:94:79:8f:2b: 75:5e:20:68:5e:a0:4b:ea:e3:99:49:65:14:da:02: a5:ed:d4:14:f3:09:9d:db:ea:e0:b8:d5:eb:4a:df: 6a:70:23:9a:b0:b7:14:b2:27:cd:41:bc:a9:c6:03: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:35:2B:48:DB:09:B5:42:22:3A:0F:9C:F0:87:9D:FA:FF:53:D2:CE X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:dc:85:66:f4:90:95:ac:f9:1b:62:94:30:0a:3d:f2:08:d2: 10:38:0b:1d:b0:53:cf:34:e8:d3:a7:97:21:00:ba:2e:ec:f1: dd:33:00:43:eb:25:59:03:05:44:0b:3d:97:8d:0e:09:f2:97: 9e:86:5b:88:c5:7a:52:91:5f:15:0d:97:95:03:8d:e1:a0:bc: 9a:e5:89:ae:9a:f6:17:ec:c6:e9:63:14:3a:f1:b9:80:84:51: 44:e9:e1:65:a8:df:ad:f7:57:14:c3:11:74:a2:dd:52:d8:32: c9:11:e5:e5:a1:31:dc:03:81:3f:b1:57:cf:8b:2f:35:bc:06: d5:f6:20:c5:bd:c3:9d:df:9a:23:39:22:1e:cf:c1:c3:cd:2a: c2:77:6e:8e:c8:29:1c:63:a2:6b:bd:70:24:d6:53:69:21:f0: ab:00:aa:1b:b5:7e:47:ae:7f:b0:89:27:24:56:4d:71:62:40: 00:44:7c:dd:e8:d8:20:6d:69:3b:3e:4e:07:c1:73:40:a7:88: 04:9b:0c:f3:e0:9b:b6:1f:30:f6:e7:1c:01:ef:3b:82:e7:ca: 8f:c1:ca:8c:5b:1a:c7:53:e2:f4:c8:36:c2:36:96:bd:92:d6: 16:85:1d:59:f4:64:0d:de:23:fa:5e:f4:b5:2a:54:2c:1d:f7: 8a:2b:f5:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjUwODIyMTQ1MjIxWhcNMjUwODI5MTQ1MjIxWjAYMRYwFAYD VQQDEw02OGE4ODQyNi0xYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJsE+GUaYNoMFMmonBSd5B+DApCbWLshzRmPhqJBoDvBRDMkW0SmJjljY3XR tMl4rypYAwRtgHAIv4WYbr5Jj7VH9ERA2nEkgrj/+6XHODLBqd3NdUD+jbZthO3A ZCBfifgwK7EzV6iihFrClgJXciPbk6euxGE8F0OfShL4ejIYI62yn4cb2yUkdEXg fMkyPkr3sLQUTSvI8i3tl5E7nXg9zpSe7BnrWoTqiKAKnMfCydZX+HCLQaUmO5H3 gyvos88snYIqgIKh2Wo9a5R5jyt1XiBoXqBL6uOZSWUU2gKl7dQU8wmd2+rguNXr St9qcCOasLcUsifNQbypxgMLNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH81K0jb CbVCIjoPnPCHnfr/U9LOMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG3IVm9JCVrPkbYpQwCj3yCNIQOAsdsFPPNOjTp5chALou7PHdMwBD 6yVZAwVECz2XjQ4J8peehluIxXpSkV8VDZeVA43hoLya5YmumvYX7MbpYxQ68bmA hFFE6eFlqN+t91cUwxF0ot1S2DLJEeXloTHcA4E/sVfPiy81vAbV9iDFvcOd35oj OSIez8HDzSrCd26OyCkcY6JrvXAk1lNpIfCrAKobtX5Hrn+wiSckVk1xYkAARHzd 6NggbWk7Pk4HwXNAp4gEmwzz4Ju2HzD25xwB7zuC58qPwcqMWxrHU+L0yDbCNpa9 ktYWhR1Z9GQN3iP6XvS1KlQsHfeKK/VB -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:50 2025 by rpki-client