$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: hdtWSus67EvwjOlELL/zLeB4twExvXEm7lq7N1RFmBo= Subject key identifier: 3D:D5:1C:C6:B4:E9:D0:8C:62:80:80:35:5E:B9:C7:45:D2:D1:6A:24 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 012C Signing time: Fri 05 Sep 2025 04:59:23 +0000 Manifest this update: Fri 05 Sep 2025 04:59:23 +0000 Manifest next update: Fri 12 Sep 2025 04:59:23 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: TDrtf9qcWuO7sLBpdObIfwOy+FAj1nAlk9GdlG7GdXw=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Sep 5 04:59:23 2025 GMT Not After : Sep 12 04:59:23 2025 GMT Subject: CN=68ba6e2b-8945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:01:d3:51:a6:f4:cf:55:3d:7c:e9:c2:12: 9c:11:d2:b8:1d:02:ce:6d:11:c2:03:31:59:1e:1b: 59:c2:aa:55:d5:bf:66:8e:0a:7a:ab:2d:f4:59:1d: f0:37:1e:8c:9a:a8:3a:c7:8b:a7:6d:a7:5a:ef:ee: 90:80:97:7c:1b:8a:eb:cf:0a:77:7c:13:d2:6c:1b: c2:a7:d3:5e:49:58:4d:0e:31:36:22:97:38:ef:d1: bf:99:6d:da:fb:fa:2d:ed:87:91:d2:d8:46:e0:08: 24:3c:43:67:76:63:4c:dc:62:e8:b2:a6:27:19:42: ae:e7:1c:fe:5c:1c:d7:fb:eb:76:10:04:b3:5b:62: 3a:98:87:44:39:2a:e5:10:ff:ed:71:5e:ca:56:fa: 9b:66:9c:57:6f:b5:6d:cf:93:13:6a:4d:22:63:ab: d4:92:4e:12:16:71:07:61:ce:a6:9c:39:4f:5f:fa: 51:e2:22:cc:00:e2:d3:d5:c7:09:f3:bc:f0:ee:3f: b4:0b:c7:9c:63:2b:bb:a2:58:e6:81:62:f5:c9:28: d4:07:bf:d3:4b:79:41:71:f4:7d:e9:db:f1:60:de: 52:58:8c:73:a4:cc:b8:42:b3:a6:44:50:17:33:a7: 27:44:f5:ec:ac:af:21:a8:c1:bb:de:49:b1:9f:b7: f5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D5:1C:C6:B4:E9:D0:8C:62:80:80:35:5E:B9:C7:45:D2:D1:6A:24 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:99:dd:c4:78:f7:53:f1:ae:78:99:79:76:a9:ce:c9:13:9b: e9:85:24:6d:11:20:d3:01:d1:4d:ba:ac:ea:f3:a2:ca:20:78: 63:db:70:4f:6f:52:8d:f4:d9:e2:e9:10:f8:84:68:27:66:4f: 9b:38:3d:68:37:83:03:2d:24:7c:0a:bc:ce:22:16:d3:6b:c4: 1a:08:1a:0f:91:a6:96:e2:af:73:52:51:10:27:13:23:78:b6: ac:f9:ee:1c:a2:5d:07:f5:ab:a7:38:c1:4c:64:80:4a:2f:b1: 95:a8:f6:e2:1e:40:f4:74:f6:f3:fe:c5:d6:2a:fa:4b:e0:80: 31:1a:d1:be:5b:d7:9b:bf:15:58:c7:e1:5e:b5:fa:08:a3:e9: 61:84:af:2c:7c:2b:9e:c2:a2:b7:6a:7f:35:79:7f:c5:26:05: 34:2e:fa:a2:fa:7e:81:be:dd:10:ff:e1:81:92:47:65:34:c4: 1a:2d:71:ae:16:9d:ea:eb:d8:89:83:1a:07:85:17:30:16:6f: ae:4f:b9:33:2b:bd:de:5d:a3:e7:cf:df:b7:cf:1f:04:de:2b: 8f:26:a5:e2:d2:60:41:44:96:3e:3f:68:1f:81:d7:f0:a3:51: f2:a0:53:6d:af:b3:a8:9e:c9:54:ff:7c:f1:8f:1d:17:e5:d0: 71:d8:6f:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUwOTA1MDQ1OTIzWhcNMjUwOTEyMDQ1OTIzWjAYMRYwFAYD VQQDEw02OGJhNmUyYi04OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLUB01Gm9M9VPXzpwhKcEdK4HQLObRHCAzFZHhtZwqpV1b9mjgp6qy30WR3w Nx6Mmqg6x4unbada7+6QgJd8G4rrzwp3fBPSbBvCp9NeSVhNDjE2Ipc479G/mW3a +/ot7YeR0thG4AgkPENndmNM3GLosqYnGUKu5xz+XBzX++t2EASzW2I6mIdEOSrl EP/tcV7KVvqbZpxXb7Vtz5MTak0iY6vUkk4SFnEHYc6mnDlPX/pR4iLMAOLT1ccJ 87zw7j+0C8ecYyu7oljmgWL1ySjUB7/TS3lBcfR96dvxYN5SWIxzpMy4QrOmRFAX M6cnRPXsrK8hqMG73kmxn7f1LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3VHMa0 6dCMYoCANV65x0XS0WokMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFmd3EePdT8a54mXl2qc7JE5vphSRtESDTAdFNuqzq86LKIHhj23BP b1KN9Nni6RD4hGgnZk+bOD1oN4MDLSR8CrzOIhbTa8QaCBoPkaaW4q9zUlEQJxMj eLas+e4col0H9aunOMFMZIBKL7GVqPbiHkD0dPbz/sXWKvpL4IAxGtG+W9ebvxVY x+FetfoIo+lhhK8sfCuewqK3an81eX/FJgU0Lvqi+n6Bvt0Q/+GBkkdlNMQaLXGu Fp3q69iJgxoHhRcwFm+uT7kzK73eXaPnz9+3zx8E3iuPJqXi0mBBRJY+P2gfgdfw o1HyoFNtr7OonslU/3zxjx0X5dBx2G/D -----END CERTIFICATE-----Generated at Sat Sep 6 20:59:08 2025 by rpki-client