$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: V/DUK65YOl9P9Knv8D10FrdWVpyCzsmC79GqcVkzmQo= Subject key identifier: 72:85:4A:66:2D:F4:42:C6:3C:61:F2:FC:0C:BE:0E:D6:03:A1:D8:5B Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 08B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 088B Signing time: Sat 06 Sep 2025 14:46:26 +0000 Manifest this update: Sat 06 Sep 2025 14:46:26 +0000 Manifest next update: Sat 13 Sep 2025 14:46:26 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: iFTYxQi+QIKRXROnfIh0l3y53IufZC8SAsfw8jLoxvY=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: qF9QEK3QPpy3Uy+0VtrwIu1I68i1XFjo3G0NKyyWueo=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: 1TGK4JO2Zf1/5yi9BJnBuBHhCgKzzBchGgX4YKczTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Sep 6 14:46:26 2025 GMT Not After : Sep 13 14:46:26 2025 GMT Subject: CN=68bc4942-5304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:e1:c5:9f:c2:a3:d6:c7:b2:fc:7d:7a:c2: 1b:dd:06:e3:1a:da:bc:d8:dd:af:bd:ef:3e:7f:a4: 05:2e:f7:b9:5d:63:61:83:af:83:89:ff:74:67:e0: 2d:be:85:01:f8:9f:b8:fa:0a:65:2c:e0:7c:42:b7: 5b:0a:18:4f:a3:e9:b5:98:e2:2f:80:4a:44:f9:f7: c0:66:d6:65:7a:49:32:bd:d5:ef:24:49:d4:3e:d2: b2:6b:a9:b4:37:06:e0:c1:4a:bd:bd:4d:06:07:e8: a6:f9:1d:52:f9:ef:bf:11:4c:78:05:15:95:79:07: 30:1d:1e:8c:e4:07:ad:9c:67:6f:9b:90:6b:7d:f8: f6:a3:c9:8f:88:0c:e0:c4:44:89:6d:8c:d0:84:e3: fd:27:35:77:77:0f:0c:89:07:54:4a:b6:21:d2:f4: a5:84:2e:12:c2:92:06:dc:2d:0c:41:e9:ee:00:1a: e3:16:f9:d4:86:56:5c:93:c8:ea:66:1d:82:69:91: 2d:29:55:f9:0e:dc:61:14:e6:bd:d1:6d:d2:a4:20: 3c:9c:02:6a:dc:4a:12:25:a3:fd:4b:d0:9c:40:9f: 6d:71:7a:38:88:c2:44:07:52:d3:6d:27:40:5f:bf: ea:94:b1:f1:17:26:ee:92:6c:43:6f:d9:0c:20:69: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:85:4A:66:2D:F4:42:C6:3C:61:F2:FC:0C:BE:0E:D6:03:A1:D8:5B X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:33:40:86:09:d4:fb:5c:4d:a7:52:2b:50:0f:a2:ca:01:99: 55:8c:dd:2f:06:14:9e:ca:14:84:1f:f9:14:aa:f3:e3:4a:3e: 1a:6d:f8:cc:e4:26:27:c6:0f:41:3c:18:f7:bc:a5:ef:f4:94: 01:e9:01:69:66:83:02:65:d4:e6:fa:22:be:44:04:33:39:5f: 8e:30:5b:83:3e:54:c0:7b:df:e4:04:cb:94:9e:1a:f3:3b:ad: de:bf:8f:8a:ac:c4:c4:19:34:32:3f:d8:d8:7b:ec:97:06:f4: 4e:d7:3f:39:d7:28:21:97:93:ea:42:49:e3:6d:94:2e:90:9c: 1f:d2:e8:96:6f:d8:b0:7d:cb:15:2e:ba:d0:75:e2:9c:23:98: 9c:91:cc:19:6e:e2:52:e5:6a:84:1c:c3:ef:f4:66:16:37:42: d5:9a:3b:38:f0:fc:79:e8:70:41:d5:fe:e7:37:79:d6:fa:6c: b2:47:f8:e8:74:00:34:9e:47:41:e9:6d:52:43:ea:93:05:a1: 66:61:d9:15:ac:4e:73:86:50:1a:db:35:0f:b6:0c:ec:46:41: ed:1d:08:2a:83:5d:bc:f6:41:1a:06:e9:64:a1:6a:07:bc:ce: d5:2d:61:0f:b3:aa:0a:b3:3b:e1:02:fe:75:94:7a:32:d5:4f: 60:fe:ef:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwOTA2MTQ0NjI2WhcNMjUwOTEzMTQ0NjI2WjAYMRYwFAYD VQQDEw02OGJjNDk0Mi01MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf/hxZ/Co9bHsvx9esIb3QbjGtq82N2vve8+f6QFLve5XWNhg6+Dif90Z+At voUB+J+4+gplLOB8QrdbChhPo+m1mOIvgEpE+ffAZtZlekkyvdXvJEnUPtKya6m0 NwbgwUq9vU0GB+im+R1S+e+/EUx4BRWVeQcwHR6M5AetnGdvm5Brffj2o8mPiAzg xESJbYzQhOP9JzV3dw8MiQdUSrYh0vSlhC4SwpIG3C0MQenuABrjFvnUhlZck8jq Zh2CaZEtKVX5DtxhFOa90W3SpCA8nAJq3EoSJaP9S9CcQJ9tcXo4iMJEB1LTbSdA X7/qlLHxFybukmxDb9kMIGkDZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKFSmYt 9ELGPGHy/Ay+DtYDodhbMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeM0CGCdT7XE2nUitQD6LKAZlVjN0vBhSeyhSEH/kUqvPjSj4abfjM 5CYnxg9BPBj3vKXv9JQB6QFpZoMCZdTm+iK+RAQzOV+OMFuDPlTAe9/kBMuUnhrz O63ev4+KrMTEGTQyP9jYe+yXBvRO1z851yghl5PqQknjbZQukJwf0uiWb9iwfcsV LrrQdeKcI5ickcwZbuJS5WqEHMPv9GYWN0LVmjs48Px56HBB1f7nN3nW+myyR/jo dAA0nkdB6W1SQ+qTBaFmYdkVrE5zhlAa2zUPtgzsRkHtHQgqg1289kEaBulkoWoH vM7VLWEPs6oKszvhAv51lHoy1U9g/u9L -----END CERTIFICATE-----Generated at Sat Sep 6 20:51:59 2025 by rpki-client