$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: oLFn0Lp7mhSQUbXghXOu+3NKbLElrIvSblN9ysRd/l8= Subject key identifier: 75:BB:E6:1A:C2:76:59:1D:E6:BB:24:92:96:0D:70:D5:E3:24:18:53 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0872 Signing time: Sun 20 Jul 2025 14:47:15 +0000 Manifest this update: Sun 20 Jul 2025 14:47:15 +0000 Manifest next update: Sun 27 Jul 2025 14:47:15 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: HCU3ooHsNYmJ9YfPeYZ4cY640OHlUhcl42zg9sXfrFY=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: qF9QEK3QPpy3Uy+0VtrwIu1I68i1XFjo3G0NKyyWueo=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: 1TGK4JO2Zf1/5yi9BJnBuBHhCgKzzBchGgX4YKczTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jul 20 14:47:15 2025 GMT Not After : Jul 27 14:47:15 2025 GMT Subject: CN=687d0173-7528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e8:3f:72:c3:3e:02:b3:0f:7b:61:04:b8:b7: e9:0d:5c:3e:35:58:55:54:3f:01:81:3e:16:d8:f0: dd:d0:48:d1:7c:bf:b2:96:71:a2:2f:31:df:24:6b: 83:bc:f9:53:6d:fe:39:eb:5d:46:03:fd:d9:e5:83: c1:94:37:e7:54:13:e7:bb:ed:f7:d8:00:77:eb:77: a5:9b:ce:79:d1:c7:34:eb:73:16:1c:e6:27:82:30: 97:67:4a:1a:fc:41:6f:f9:92:d2:b4:74:c4:c1:7b: 93:f0:42:c0:2c:11:c2:8e:23:f4:e1:f2:24:73:89: d5:90:c4:fe:18:18:d6:e2:f2:cf:92:a6:23:ee:e5: 35:7b:d9:2e:34:51:43:eb:a9:48:74:c6:0d:a8:8e: 53:ae:a9:fb:4e:51:d4:c2:11:61:fa:48:5d:f5:1f: db:5a:88:a3:62:9e:69:31:3d:7c:56:00:f8:3e:fc: 68:c5:fd:2b:b0:fe:67:dc:fb:7a:ec:33:38:ca:2d: 8b:40:29:c8:77:a2:5a:6c:b7:46:ff:b8:1f:13:2c: 8e:49:ab:6e:b6:be:19:cd:a0:ac:06:47:5a:ab:77: ea:5f:5d:34:e7:df:b4:0f:64:67:17:62:ac:ec:5a: 5f:dc:70:e3:53:07:01:a1:25:6b:c1:36:74:df:9e: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BB:E6:1A:C2:76:59:1D:E6:BB:24:92:96:0D:70:D5:E3:24:18:53 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e3:0e:47:5e:23:dd:07:db:f3:b7:94:39:1e:ed:b2:9c:8e: 1a:01:30:02:75:17:d1:76:45:97:6b:3b:06:80:d2:5a:4d:d6: e8:4c:90:6c:18:ba:2e:49:b9:f0:20:b8:a3:e1:88:f2:54:3e: 37:0c:2b:b3:a0:28:f0:0d:6d:d1:6a:6f:bf:64:6f:3e:86:33: 8d:cc:c6:b4:f0:8e:53:b2:aa:47:0f:68:04:b5:86:0f:a7:be: ef:9d:c1:6b:76:39:b2:0e:8e:9f:f9:61:a0:e4:7c:d4:e0:70: 1f:c6:c3:f2:e5:3e:a9:0e:58:ff:64:57:f3:9a:ad:01:4b:d6: 11:2e:2d:5c:35:89:c2:d2:8b:ef:bc:fe:84:3a:55:70:32:99: 3f:26:40:c9:29:66:9a:aa:4f:0f:e6:3b:de:80:22:c5:c3:4a: f3:f3:9f:3d:90:4c:34:41:18:5e:ff:e7:51:b8:74:4f:a9:bc: eb:e5:5f:d6:0c:d3:13:78:f0:19:b7:dc:b5:ac:ef:07:2d:16: c7:63:42:b1:d1:08:b7:e9:24:b7:4b:76:3e:5d:dc:17:fb:57: 45:f5:ec:e8:7d:cf:15:28:d6:1c:45:2d:c4:0d:de:2f:0f:6c: c7:18:f8:fb:0b:39:3a:94:ca:4e:e3:9f:0a:c9:65:3b:d3:6a: 32:85:e2:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwNzIwMTQ0NzE1WhcNMjUwNzI3MTQ0NzE1WjAYMRYwFAYD VQQDEw02ODdkMDE3My03NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkug/csM+ArMPe2EEuLfpDVw+NVhVVD8BgT4W2PDd0EjRfL+ylnGiLzHfJGuD vPlTbf45611GA/3Z5YPBlDfnVBPnu+332AB363elm8550cc063MWHOYngjCXZ0oa /EFv+ZLStHTEwXuT8ELALBHCjiP04fIkc4nVkMT+GBjW4vLPkqYj7uU1e9kuNFFD 66lIdMYNqI5Trqn7TlHUwhFh+khd9R/bWoijYp5pMT18VgD4Pvxoxf0rsP5n3Pt6 7DM4yi2LQCnId6JabLdG/7gfEyyOSatutr4ZzaCsBkdaq3fqX10059+0D2RnF2Ks 7Fpf3HDjUwcBoSVrwTZ0357pDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW75hrC dlkd5rskkpYNcNXjJBhTMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD4w5HXiPdB9vzt5Q5Hu2ynI4aATACdRfRdkWXazsGgNJaTdboTJBs GLouSbnwILij4YjyVD43DCuzoCjwDW3Ram+/ZG8+hjONzMa08I5TsqpHD2gEtYYP p77vncFrdjmyDo6f+WGg5HzU4HAfxsPy5T6pDlj/ZFfzmq0BS9YRLi1cNYnC0ovv vP6EOlVwMpk/JkDJKWaaqk8P5jvegCLFw0rz8589kEw0QRhe/+dRuHRPqbzr5V/W DNMTePAZt9y1rO8HLRbHY0Kx0Qi36SS3S3Y+XdwX+1dF9ezofc8VKNYcRS3EDd4v D2zHGPj7Czk6lMpO458KyWU702oyheJ5 -----END CERTIFICATE-----Generated at Mon Jul 21 12:38:12 2025 by rpki-client