$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: LFaspLYHMaolNNqSxRRSH7DKDMWmO7NVRispP/N8IIw= Subject key identifier: 1A:BA:17:D6:00:3B:3C:E0:96:D3:8D:D4:88:B0:FE:4C:BA:4A:EB:23 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1D20 Signing time: Sun 24 Aug 2025 16:08:01 +0000 Manifest this update: Sun 24 Aug 2025 16:08:01 +0000 Manifest next update: Sun 31 Aug 2025 16:08:01 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: u4nQohcLSfQqKxB8CaoxtO11ENWroORJNjSXIJsGbvM=) 2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: fz4f6MmX7R6kRL2gcaEtaQrQoy9cdumfsJWJxUL1YME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7466 (0x1d2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Aug 24 16:08:01 2025 GMT Not After : Aug 31 16:08:01 2025 GMT Subject: CN=68ab38e1-89db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:ad:9e:bd:81:51:3c:8c:6d:ab:98:c7:1a: 39:4e:e9:20:18:1d:e5:da:23:aa:e0:c0:be:ae:b4: 0a:f0:bf:1e:15:77:b6:b4:6b:a8:48:3e:d7:64:29: 1a:7a:e0:30:82:2c:ce:62:60:3f:a8:65:05:ce:69: 4f:4c:72:bb:c6:42:ff:6d:59:84:d4:1a:ba:30:67: d9:d5:ca:b1:13:3e:8e:66:6f:0b:51:c6:2b:27:db: 41:f5:8d:b8:46:ae:d6:64:59:ff:55:0e:ca:8c:ce: bd:38:99:32:25:34:2f:01:55:24:fe:f9:ba:dc:87: 78:84:94:48:c7:ea:cd:87:db:9c:23:3d:d5:77:db: e2:71:cc:2a:5d:17:0e:07:f7:da:90:68:88:8e:06: 55:59:c5:10:f4:65:30:0a:b7:33:8d:fc:18:52:13: 5d:a1:9b:da:43:7c:b1:f9:a2:a5:14:78:16:e7:02: 7c:77:b9:22:4f:97:4f:2c:da:94:6c:65:5a:d1:8e: aa:3e:1b:ff:5b:f0:5a:c8:37:70:6d:19:9b:53:06: 3b:0c:66:51:67:fb:85:df:6e:71:9e:d0:95:95:8f: 9f:f7:29:7f:a9:55:41:92:1b:c7:9d:0f:bf:cf:46: 5c:03:2e:a0:c5:33:8f:f9:55:33:d5:00:d9:68:2a: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:17:D6:00:3B:3C:E0:96:D3:8D:D4:88:B0:FE:4C:BA:4A:EB:23 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f4:e0:27:0e:ce:72:bf:96:aa:96:5b:6e:79:ef:79:dd:74: 00:35:e1:c6:11:aa:c2:88:d8:81:c5:d0:c3:d9:fa:12:a3:16: 97:32:b6:97:5b:e6:0c:db:a4:52:3b:70:1b:9f:51:9a:91:57: a3:0d:b9:8e:3d:70:5f:2b:8d:12:23:03:3b:d6:01:c4:2a:e1: 34:38:cb:7d:66:a7:74:a4:6d:a0:85:26:42:ea:c9:32:47:7e: 11:b6:5f:be:30:60:1d:d1:67:21:af:41:0a:84:de:4a:53:60: 1d:95:99:9f:97:58:36:d0:ff:69:5e:42:6a:dc:1b:80:2c:d7: aa:08:00:8d:9c:72:25:ce:54:52:89:91:fb:f3:3b:68:ef:3f: a5:16:c4:1a:c1:34:8f:ef:68:e3:7a:41:bc:40:9b:59:c1:50: 92:94:a2:7c:60:39:a1:98:54:1c:f1:33:09:d0:2f:30:b8:83: d0:f5:eb:46:fe:f9:da:7d:0b:d7:a7:52:0a:bc:4e:03:4e:ad: a1:93:1a:26:a1:2c:b6:18:dc:ac:b9:b6:57:19:e9:a8:0e:25: 36:cc:47:b1:c7:40:74:d4:cf:3c:4c:c6:4f:55:6e:9c:35:f8: 92:3f:49:20:8e:d2:1f:b1:c6:5c:00:89:fc:ff:44:a8:5b:6b: b4:90:44:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjUwODI0MTYwODAxWhcNMjUwODMxMTYwODAxWjAYMRYwFAYD VQQDEw02OGFiMzhlMS04OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD2tnr2BUTyMbauYxxo5TukgGB3l2iOq4MC+rrQK8L8eFXe2tGuoSD7XZCka euAwgizOYmA/qGUFzmlPTHK7xkL/bVmE1Bq6MGfZ1cqxEz6OZm8LUcYrJ9tB9Y24 Rq7WZFn/VQ7KjM69OJkyJTQvAVUk/vm63Id4hJRIx+rNh9ucIz3Vd9viccwqXRcO B/fakGiIjgZVWcUQ9GUwCrczjfwYUhNdoZvaQ3yx+aKlFHgW5wJ8d7kiT5dPLNqU bGVa0Y6qPhv/W/BayDdwbRmbUwY7DGZRZ/uF325xntCVlY+f9yl/qVVBkhvHnQ+/ z0ZcAy6gxTOP+VUz1QDZaCrW0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq6F9YA OzzgltON1Iiw/ky6SusjMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB09OAnDs5yv5aqlltuee953XQANeHGEarCiNiBxdDD2foSoxaXMraX W+YM26RSO3Abn1GakVejDbmOPXBfK40SIwM71gHEKuE0OMt9Zqd0pG2ghSZC6sky R34Rtl++MGAd0Wchr0EKhN5KU2AdlZmfl1g20P9pXkJq3BuALNeqCACNnHIlzlRS iZH78zto7z+lFsQawTSP72jjekG8QJtZwVCSlKJ8YDmhmFQc8TMJ0C8wuIPQ9etG /vnafQvXp1IKvE4DTq2hkxomoSy2GNysubZXGemoDiU2zEexx0B01M88TMZPVW6c NfiSP0kgjtIfscZcAIn8/0SoW2u0kERQ -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:11 2025 by rpki-client