$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json) Hash identifier: n/IyUM5HGHMw90gUR4wMQ9Ky32PPJ79HMG4DHopzFCc= Subject key identifier: B8:F1:58:66:0A:44:79:C4:91:E9:8F:AB:2E:96:53:A6:11:98:D4:12 Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft Manifest number: 0242 Signing time: Sat 23 Aug 2025 02:05:04 +0000 Manifest this update: Sat 23 Aug 2025 02:05:04 +0000 Manifest next update: Sat 30 Aug 2025 02:05:04 +0000 Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: uI+n7rJyM/8+mAuFUGuTmSzh+JY2O2xEzGrY3qG+Bn4=) 2: 623705DA339111ED9249064BC4F9AE02.roa (hash: 3xXR0x6j8N4PVf2/cUiVsVNe4o0Qs5z+0StILd/4bVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Validity Not Before: Aug 23 02:05:04 2025 GMT Not After : Aug 30 02:05:04 2025 GMT Subject: CN=68a921d0-a0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0d:78:1a:f3:f7:d2:50:2e:ac:27:a6:09:77: 41:5c:5e:bf:b5:6e:34:65:b0:b8:da:4e:bd:fb:d3: c8:6d:68:b1:5f:31:ba:1c:1e:11:c6:38:fe:e3:31: b5:1e:2a:ec:6d:af:4f:88:d9:d2:22:c8:2c:38:5a: 11:00:e9:ce:85:45:69:28:c1:1a:4a:c4:41:b5:ba: 25:74:72:14:62:c1:04:d2:7a:ff:f9:51:82:3a:3f: 64:bc:a8:17:84:00:ea:13:c6:ab:44:25:ce:c2:d9: 04:e3:99:72:f5:57:4d:6b:e0:f2:f8:8b:8a:c0:80: 40:4a:c7:f2:33:04:40:cc:62:2f:2b:26:1b:02:ec: 28:b4:03:36:dc:b8:7b:71:a6:c1:c7:6d:33:99:99: 7e:3a:76:c1:76:4d:a7:27:f3:62:24:a0:28:0d:1d: f3:dc:b0:75:a5:bb:ee:69:1c:b8:8b:42:60:bc:82: 0d:e3:42:97:43:d0:47:06:e7:7b:ea:7a:2b:7d:bd: 90:f8:bd:0b:bc:cb:a8:ad:47:49:cf:cf:95:ca:4d: 6a:d0:2b:3a:a9:d4:fa:a5:2a:61:b9:ff:08:ab:ad: 0e:c8:e5:db:13:79:4b:50:b9:31:92:a0:ce:fb:d1: a9:e5:b1:71:f1:8d:16:a6:92:9f:7b:77:57:d1:fe: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F1:58:66:0A:44:79:C4:91:E9:8F:AB:2E:96:53:A6:11:98:D4:12 X509v3 Authority Key Identifier: keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:9f:de:95:24:61:0b:c0:c2:05:70:d7:e9:0e:ba:0e:10: 27:1e:13:cb:18:90:db:8a:fd:65:49:60:29:6c:7d:79:fb:ef: 21:51:dc:3f:4a:3d:37:0d:37:d9:6f:bf:2d:45:bd:7a:71:b0: c8:68:7e:11:b2:fe:bb:34:21:fc:3d:c9:f3:ee:70:f5:72:02: 9b:f0:77:7e:0e:a9:71:a5:73:60:2f:b9:d6:4c:e7:11:62:7b: 95:de:34:b6:9e:b6:8b:ff:ed:47:1f:ad:16:2b:0d:4c:c5:89: eb:63:27:b4:47:7c:db:23:ae:3d:e9:ea:44:93:90:33:5f:d6: 54:22:06:b5:a5:9d:c8:83:99:c3:e5:7f:f4:6b:d0:6d:4c:e9: 8e:cf:b7:a8:b5:12:11:aa:42:f3:0e:a7:b5:52:4f:64:b1:3b: 08:c4:f1:f3:ce:1d:03:0f:10:1d:88:02:61:77:c1:f9:35:7f: 41:6f:a4:43:1d:ab:bc:df:4e:44:e5:f4:8b:53:0b:10:07:86: 96:62:5d:91:90:a2:a8:31:a9:fc:a9:1c:3f:57:3e:c2:4a:04: c9:a1:63:76:95:71:73:94:62:1b:d4:60:da:e5:4a:d1:a2:a3: 1e:b1:1b:9e:5e:62:28:57:61:4c:cb:58:44:d7:48:2c:56:7e: ac:5b:98:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2 OTFEQzA2MTUwHhcNMjUwODIzMDIwNTA0WhcNMjUwODMwMDIwNTA0WjAYMRYwFAYD VQQDEw02OGE5MjFkMC1hMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+A14GvP30lAurCemCXdBXF6/tW40ZbC42k69+9PIbWixXzG6HB4Rxjj+4zG1 Hirsba9PiNnSIsgsOFoRAOnOhUVpKMEaSsRBtboldHIUYsEE0nr/+VGCOj9kvKgX hADqE8arRCXOwtkE45ly9VdNa+Dy+IuKwIBASsfyMwRAzGIvKyYbAuwotAM23Lh7 cabBx20zmZl+OnbBdk2nJ/NiJKAoDR3z3LB1pbvuaRy4i0JgvIIN40KXQ9BHBud7 6norfb2Q+L0LvMuorUdJz8+Vyk1q0Cs6qdT6pSphuf8Iq60OyOXbE3lLULkxkqDO +9Gp5bFx8Y0WppKfe3dX0f78vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjxWGYK RHnEkemPqy6WU6YRmNQSMB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFNS9GNUUzNEU2NDMzOEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFP Ul9BYnlMOTRRN2RwSGNCaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP95/elSRhC8DCBXDX6Q66DhAnHhPLGJDbiv1lSWApbH15++8hUdw/ Sj03DTfZb78tRb16cbDIaH4Rsv67NCH8Pcnz7nD1cgKb8Hd+DqlxpXNgL7nWTOcR YnuV3jS2nraL/+1HH60WKw1MxYnrYye0R3zbI6496epEk5AzX9ZUIga1pZ3Ig5nD 5X/0a9BtTOmOz7eotRIRqkLzDqe1Uk9ksTsIxPHzzh0DDxAdiAJhd8H5NX9Bb6RD Hau8305E5fSLUwsQB4aWYl2RkKKoMan8qRw/Vz7CSgTJoWN2lXFzlGIb1GDa5UrR oqMesRueXmIoV2FMy1hE10gsVn6sW5ig -----END CERTIFICATE-----Generated at Sat Aug 23 16:08:40 2025 by rpki-client