$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json) Hash identifier: FnruO25jtV4oKNZSRNcv0w3nJIQl9AtAYUYZ7sdtAHg= Subject key identifier: BF:B9:0C:AD:6E:D0:78:C3:AF:61:BA:39:A3:7A:38:54:86:B6:29:15 Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Certificate serial: 0BF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft Manifest number: 0BED Signing time: Sat 26 Jul 2025 18:54:39 +0000 Manifest this update: Sat 26 Jul 2025 18:54:38 +0000 Manifest next update: Sat 02 Aug 2025 18:54:38 +0000 Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: +k4YheCxyvsv/8xFor7Il5pKJwxtboTEdxFIVqZfQpU=) 2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: ELFkrkGvrGXpvAeGB34G/wdhCkAvgz4ejLB+gQtN8Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 18:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3061 (0xbf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Validity Not Before: Jul 26 18:54:38 2025 GMT Not After : Aug 2 18:54:38 2025 GMT Subject: CN=6885246f-212e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:01:06:33:d4:df:c9:8e:bb:14:a5:4a:06: 7b:1b:9b:93:7c:53:bb:c9:31:22:5b:e8:37:d7:67: 63:30:42:a3:a3:da:f3:0d:39:5d:8e:62:e9:48:93: 08:d9:6b:ef:78:22:73:ee:87:06:d8:97:d2:63:97: ed:2f:7d:73:46:97:3e:48:a9:b1:50:7d:06:39:c0: bd:24:5b:cb:1b:6c:a1:64:76:ae:32:68:84:12:32: 98:f9:c9:08:c0:0b:cc:38:6f:b3:dd:be:cc:39:e2: f0:55:5b:72:60:32:24:8e:89:94:e3:51:62:74:c6: c7:c1:0d:31:67:ba:01:49:30:07:e7:db:c3:36:de: 08:21:b8:6c:c6:8c:fc:d5:9e:2e:a0:f0:cc:6e:d5: 50:d1:a6:cc:91:0c:19:d2:16:c7:28:17:b6:be:90: d1:a7:b2:2c:85:0a:3a:ce:a8:17:9f:81:19:6f:bc: a7:37:bc:08:9e:1d:cb:e2:a2:0d:31:6c:1c:5a:af: 4a:f1:7c:e3:1e:5c:59:37:b1:1d:4d:6a:72:27:9f: 2a:d7:9f:b8:dd:bc:61:b3:25:d3:97:d5:dd:1e:8f: 32:47:b4:7b:38:d0:f5:47:33:3e:47:37:d2:d4:0c: 05:0c:c1:a4:52:f0:a2:b0:4f:b0:e4:57:38:17:bf: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B9:0C:AD:6E:D0:78:C3:AF:61:BA:39:A3:7A:38:54:86:B6:29:15 X509v3 Authority Key Identifier: keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:dc:2a:77:e4:2f:8f:57:2c:73:31:14:2b:81:83:a4:fa:81: 98:11:33:78:dc:82:21:75:d0:9b:43:f8:f1:90:f5:4c:4a:de: 24:dc:52:d8:7e:6e:f8:7b:b9:b6:bb:9b:b2:8e:bc:63:d0:eb: f4:29:61:09:5b:33:3c:7c:67:90:65:f4:49:ad:57:fe:27:4f: 66:42:b6:fc:9f:13:0f:af:77:cc:39:d9:95:65:4e:92:6e:92: f0:c6:e8:39:7f:71:1a:fa:96:2a:f2:9e:c0:e9:b0:48:fd:99: 35:d7:9f:f6:62:c0:e3:14:96:dc:79:61:22:2f:d4:5a:48:f0: 0a:1c:c5:7c:73:f8:67:94:75:21:4b:58:b7:81:1c:60:03:1e: 2d:ee:76:59:82:79:d4:0d:8c:f2:00:25:02:87:1c:08:dc:e6: f0:c5:18:fc:58:a9:08:68:23:7b:91:3a:4a:33:8e:c8:31:69: fa:34:ff:3a:c2:b2:aa:97:27:69:fe:b9:46:6d:8a:2e:20:ad: 6b:7f:13:64:6a:61:cb:d3:55:2c:22:36:b1:f0:36:2b:87:49: dc:92:c2:75:c6:37:c5:1f:6f:bb:37:62:ad:75:99:63:55:22: cd:70:4f:cd:e0:9e:24:f8:c8:82:11:e1:91:07:e5:ad:50:dc: 7e:88:18:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix NTU1RDJCRDQwHhcNMjUwNzI2MTg1NDM4WhcNMjUwODAyMTg1NDM4WjAYMRYwFAYD VQQDEw02ODg1MjQ2Zi0yMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPoBBjPU38mOuxSlSgZ7G5uTfFO7yTEiW+g312djMEKjo9rzDTldjmLpSJMI 2WvveCJz7ocG2JfSY5ftL31zRpc+SKmxUH0GOcC9JFvLG2yhZHauMmiEEjKY+ckI wAvMOG+z3b7MOeLwVVtyYDIkjomU41FidMbHwQ0xZ7oBSTAH59vDNt4IIbhsxoz8 1Z4uoPDMbtVQ0abMkQwZ0hbHKBe2vpDRp7IshQo6zqgXn4EZb7ynN7wInh3L4qIN MWwcWq9K8XzjHlxZN7EdTWpyJ58q15+43bxhsyXTl9XdHo8yR7R7OND1RzM+RzfS 1AwFDMGkUvCisE+w5Fc4F7+2QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+5DK1u 0HjDr2G6OaN6OFSGtikVMB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjJCRi8xMDM5QkM0MDFBREIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIw YWFXUnRNVXRKTXNWVmRLOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS3Cp35C+PVyxzMRQrgYOk+oGYETN43IIhddCbQ/jxkPVMSt4k3FLY fm74e7m2u5uyjrxj0Ov0KWEJWzM8fGeQZfRJrVf+J09mQrb8nxMPr3fMOdmVZU6S bpLwxug5f3Ea+pYq8p7A6bBI/Zk115/2YsDjFJbceWEiL9RaSPAKHMV8c/hnlHUh S1i3gRxgAx4t7nZZgnnUDYzyACUChxwI3ObwxRj8WKkIaCN7kTpKM47IMWn6NP86 wrKqlydp/rlGbYouIK1rfxNkamHL01UsIjax8DYrh0ncksJ1xjfFH2+7N2KtdZlj VSLNcE/N4J4k+MiCEeGRB+WtUNx+iBhT -----END CERTIFICATE-----Generated at Sun Jul 27 06:32:55 2025 by rpki-client