$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: 2Hw5h0IxWfy+UkY0owL0j33xKK5uasuWptLbaNju9vM= Subject key identifier: AB:76:2B:38:9D:8C:3F:57:A0:BC:3A:8A:60:C9:C7:94:2C:30:C3:B6 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 1542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 153A Signing time: Sun 24 Aug 2025 16:46:29 +0000 Manifest this update: Sun 24 Aug 2025 16:46:29 +0000 Manifest next update: Sun 31 Aug 2025 16:46:29 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: sDgSgaU5pK+RDoO7xjO5sAn6YoffPitci1bgC01Er8A=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5442 (0x1542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Aug 24 16:46:29 2025 GMT Not After : Aug 31 16:46:29 2025 GMT Subject: CN=68ab41e5-bd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e0:c8:62:47:24:21:0a:b3:51:cd:59:ef:68: 5f:12:2b:82:d6:11:94:7c:aa:3e:3b:52:10:95:c6: d6:31:b3:91:06:67:07:24:88:f7:3b:d9:05:65:fe: d7:83:92:4c:d3:36:c7:39:45:bf:b6:2a:8f:ae:0c: 04:71:c0:97:25:1a:40:30:ed:18:1c:85:b3:f4:66: 1f:c2:19:c7:a6:da:21:84:68:c0:4e:82:92:76:a8: 1d:b1:7e:c0:aa:c6:7b:88:c5:d4:08:aa:9b:f6:dd: 4d:d1:f9:ed:94:e1:49:5c:dc:e4:d1:84:cc:ee:63: 19:a8:43:e4:ba:be:1e:b9:45:53:af:40:e2:29:ba: 16:ca:90:9f:bb:07:5a:43:d9:dd:e6:29:ce:6d:f0: c6:12:57:a4:f2:f2:b0:02:4c:97:1e:53:3a:b7:a7: bc:28:8f:3f:1d:a2:b1:0d:6c:35:9b:d1:cc:4c:d1: cf:7b:16:83:85:5a:2a:6e:5c:bc:8e:71:52:50:69: 31:be:20:11:1a:2b:57:84:31:40:01:be:af:eb:d8: fd:95:0f:1a:53:32:62:09:6a:78:12:4f:2a:12:df: 8c:1d:da:b0:96:81:60:4b:b0:1e:6f:c2:10:71:8f: ab:46:06:66:83:fe:1e:66:20:d3:d0:32:3a:cb:dc: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:76:2B:38:9D:8C:3F:57:A0:BC:3A:8A:60:C9:C7:94:2C:30:C3:B6 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:78:19:f0:70:73:87:92:f2:ae:63:4c:36:5b:07:3f:ea:e6: 44:ce:44:b6:19:d0:f8:80:24:fd:8d:5f:69:82:71:e2:c9:b3: f0:05:7a:a8:86:57:03:94:6f:73:32:47:9f:4e:1c:0f:a2:d4: d0:da:e2:0d:57:2e:4e:87:98:a3:dc:f6:f2:3a:0c:8e:db:e2: d6:82:01:69:fe:cf:ee:f8:2c:8d:86:39:0f:c9:9e:9d:33:a5: 53:59:67:28:46:30:6f:08:66:a7:f0:a3:4d:16:bf:40:ee:d1: b5:b5:f9:56:67:80:55:70:0e:7b:4b:26:90:58:55:20:b2:32: 16:29:b8:f8:f4:a9:9c:89:0b:a0:ed:f7:4d:b1:e5:49:15:c2: 37:5c:53:01:8b:9c:fb:6f:ef:1d:64:f9:34:6b:71:ec:0f:d5: 25:eb:98:e8:ee:96:80:14:f4:47:70:95:d9:5f:2d:67:cc:7c: 63:36:09:18:e0:a0:00:e0:3d:08:23:31:4d:d7:f3:75:64:2b: 70:ee:b5:1f:76:e8:59:09:12:2b:c6:3e:18:78:60:d6:4e:ec: de:fd:e7:a7:30:8b:36:01:a2:8b:64:a2:b3:c1:3c:f6:46:94: 38:07:43:88:56:87:e5:f0:72:96:96:76:7d:50:09:6c:6d:7f: 91:d6:76:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUwODI0MTY0NjI5WhcNMjUwODMxMTY0NjI5WjAYMRYwFAYD VQQDEw02OGFiNDFlNS1iZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+DIYkckIQqzUc1Z72hfEiuC1hGUfKo+O1IQlcbWMbORBmcHJIj3O9kFZf7X g5JM0zbHOUW/tiqPrgwEccCXJRpAMO0YHIWz9GYfwhnHptohhGjAToKSdqgdsX7A qsZ7iMXUCKqb9t1N0fntlOFJXNzk0YTM7mMZqEPkur4euUVTr0DiKboWypCfuwda Q9nd5inObfDGElek8vKwAkyXHlM6t6e8KI8/HaKxDWw1m9HMTNHPexaDhVoqbly8 jnFSUGkxviARGitXhDFAAb6v69j9lQ8aUzJiCWp4Ek8qEt+MHdqwloFgS7Aeb8IQ cY+rRgZmg/4eZiDT0DI6y9yHzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt2Kzid jD9XoLw6imDJx5QsMMO2MB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeeBnwcHOHkvKuY0w2Wwc/6uZEzkS2GdD4gCT9jV9pgnHiybPwBXqo hlcDlG9zMkefThwPotTQ2uINVy5Oh5ij3PbyOgyO2+LWggFp/s/u+CyNhjkPyZ6d M6VTWWcoRjBvCGan8KNNFr9A7tG1tflWZ4BVcA57SyaQWFUgsjIWKbj49KmciQug 7fdNseVJFcI3XFMBi5z7b+8dZPk0a3HsD9Ul65jo7paAFPRHcJXZXy1nzHxjNgkY 4KAA4D0IIzFN1/N1ZCtw7rUfduhZCRIrxj4YeGDWTuze/eenMIs2AaKLZKKzwTz2 RpQ4B0OIVofl8HKWlnZ9UAlsbX+R1nbn -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:47 2025 by rpki-client