$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json) Hash identifier: TFMw/7P+8lIeT6y1qLQE3bvpjxs7UXVAcIiaIvAWLk0= Subject key identifier: AF:97:DF:20:26:1B:68:5B:E6:02:5A:BB:65:5D:4E:96:54:24:EA:42 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft Manifest number: 0D87 Signing time: Fri 18 Jul 2025 18:09:29 +0000 Manifest this update: Fri 18 Jul 2025 18:09:29 +0000 Manifest next update: Fri 25 Jul 2025 18:09:29 +0000 Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: EJ6k3GYetaHykaZOHYvntQIG4mieCikuM92YSG6WJXs=) 2: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: ZQBdoWyO873LcT1vKoBchR3Mc6PGkjTHNlXwZK5KBUA=) 3: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: vmjmVmXjdkD0vxVvLQigcrFyWXDcETievw8r2QIVv8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Jul 18 18:09:29 2025 GMT Not After : Jul 25 18:09:29 2025 GMT Subject: CN=687a8dd9-2f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:25:3e:a6:4c:f8:92:0d:1b:52:da:cc:e5: 37:1f:02:a4:ef:df:88:2c:35:6a:d2:df:6d:dd:38: 87:f8:e1:10:e6:a5:92:bc:6d:72:82:5b:6d:90:cb: 3e:ac:84:bc:2c:e2:f3:ef:57:df:9f:f9:dc:4d:af: 83:75:1c:b5:d8:85:41:bb:89:d1:f2:3a:1a:37:d0: 53:56:44:15:2a:11:d8:29:54:e7:58:2b:f7:ea:0c: 44:dc:28:7b:ab:6b:6e:93:ae:7d:1a:10:fe:d6:5e: 66:6d:9a:2e:bd:f3:ab:f3:4a:d9:88:7c:e8:9e:89: 08:81:95:fe:24:e3:94:29:d1:d8:00:3f:c7:96:3b: fb:2b:e9:cb:93:b9:30:e1:0f:29:90:21:19:06:1f: 31:1a:c1:e7:38:70:6d:41:1d:d5:fa:5d:f1:c5:02: 18:73:24:83:8e:01:08:7e:92:93:8d:8a:c8:0d:e9: f6:6b:d1:41:a4:97:c5:6b:33:0e:c4:8a:8c:1f:89: aa:6a:ea:59:16:8f:2a:c5:3b:30:c8:59:e1:72:5c: 61:08:02:95:36:00:96:a0:bd:a3:63:37:a8:9b:fc: 61:a2:c1:05:1e:7d:52:d7:88:23:06:e6:5b:5b:6f: 0a:fc:37:ff:1b:80:fb:28:02:09:cb:e7:61:72:1a: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:97:DF:20:26:1B:68:5B:E6:02:5A:BB:65:5D:4E:96:54:24:EA:42 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:0e:2f:22:b0:a5:7f:60:67:49:85:c0:d2:8c:56:e0:13:86: 43:7c:b3:d5:d0:1f:47:7a:05:53:ca:34:f9:2d:f0:da:78:b4: 45:d6:02:44:81:f6:17:58:fa:dd:1a:f6:7c:b3:8a:76:fc:45: 7b:d9:7c:35:ea:10:c4:67:27:4a:56:a4:da:cf:c5:2b:dc:77: fc:a8:0f:67:1b:33:5d:e9:3c:27:c7:e6:41:5a:b8:af:9b:08: 09:5c:03:20:2a:9e:41:d6:6b:4f:37:34:6d:c3:ad:95:28:73: aa:a4:1b:63:67:b4:78:21:ed:03:4b:e7:f8:d9:24:e5:99:58: 9e:0f:69:56:18:86:08:e7:f3:35:24:a9:24:46:5b:3c:a2:7b: 2b:15:b0:3f:46:a8:0e:00:0c:3c:79:0d:9a:a7:b1:6d:8d:5b: 96:80:24:66:18:e5:13:a2:38:34:be:c2:21:57:c2:1d:80:ff: d5:60:21:f0:76:a3:0c:5f:67:b9:9e:c1:66:1f:5d:c3:9e:da: d2:cb:c5:ff:f6:f5:36:4b:7f:3b:0a:07:f3:0e:e7:5d:e0:93: 62:ff:47:ea:1d:d4:8b:b2:b5:b1:ef:10:2d:f0:0f:a8:4d:02: 5f:85:09:bf:18:17:81:42:08:41:7e:18:26:1c:ee:e7:ac:90: ca:72:94:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjUwNzE4MTgwOTI5WhcNMjUwNzI1MTgwOTI5WjAYMRYwFAYD VQQDEw02ODdhOGRkOS0yZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PUlPqZM+JING1LazOU3HwKk79+ILDVq0t9t3TiH+OEQ5qWSvG1yglttkMs+ rIS8LOLz71ffn/ncTa+DdRy12IVBu4nR8joaN9BTVkQVKhHYKVTnWCv36gxE3Ch7 q2tuk659GhD+1l5mbZouvfOr80rZiHzonokIgZX+JOOUKdHYAD/Hljv7K+nLk7kw 4Q8pkCEZBh8xGsHnOHBtQR3V+l3xxQIYcySDjgEIfpKTjYrIDen2a9FBpJfFazMO xIqMH4mqaupZFo8qxTswyFnhclxhCAKVNgCWoL2jYzeom/xhosEFHn1S14gjBuZb W28K/Df/G4D7KAIJy+dhchqAcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+X3yAm G2hb5gJau2VdTpZUJOpCMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yRDFBNTk1QUQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RN XzI2Mk1FS0xiSjF3MVh2WFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEDi8isKV/YGdJhcDSjFbgE4ZDfLPV0B9HegVTyjT5LfDaeLRF1gJE gfYXWPrdGvZ8s4p2/EV72Xw16hDEZydKVqTaz8Ur3Hf8qA9nGzNd6Twnx+ZBWriv mwgJXAMgKp5B1mtPNzRtw62VKHOqpBtjZ7R4Ie0DS+f42STlmVieD2lWGIYI5/M1 JKkkRls8onsrFbA/RqgOAAw8eQ2ap7FtjVuWgCRmGOUTojg0vsIhV8IdgP/VYCHw dqMMX2e5nsFmH13DntrSy8X/9vU2S387CgfzDudd4JNi/0fqHdSLsrWx7xAt8A+o TQJfhQm/GBeBQghBfhgmHO7nrJDKcpRN -----END CERTIFICATE-----Generated at Sun Jul 20 13:12:48 2025 by rpki-client