$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json) Hash identifier: a/JLlAdCeqD6rCkEGlfWRGk/zkTlHIywBOkTCPpeGCQ= Subject key identifier: 27:BD:5D:18:DF:56:63:2C:A6:76:DA:12:A9:21:CF:CD:98:63:30:78 Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0E33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft Manifest number: 0E29 Signing time: Sun 24 Aug 2025 17:46:07 +0000 Manifest this update: Sun 24 Aug 2025 17:46:06 +0000 Manifest next update: Sun 31 Aug 2025 17:46:06 +0000 Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: CsJgS6hPVpsYzhCzXY/sHHXetwio8Sipv4jc8iVIbGU=) 2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: 1jbkg9LW6RgDfHIeGNZI/aPYd/3lSxoGjvv7ph3A8oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3635 (0xe33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Aug 24 17:46:06 2025 GMT Not After : Aug 31 17:46:06 2025 GMT Subject: CN=68ab4fde-6a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a6:ff:96:da:a2:5c:b1:20:aa:f6:a2:b9:dd: 92:a6:95:c5:46:2d:55:db:b1:17:e0:96:46:a5:3e: b2:42:19:66:bf:fb:a5:74:a4:c7:e0:82:d4:c7:01: 4d:cd:6d:f3:84:44:ae:29:92:c4:ad:c2:bc:a5:0c: de:9a:2f:e3:65:cf:bf:17:95:a2:ee:6d:80:1f:75: 5c:89:02:d5:12:f0:9b:62:38:c4:9b:b7:99:bc:95: 72:eb:d7:07:a5:96:9b:75:8c:3b:65:de:6f:17:3d: 91:57:81:40:f4:d6:4f:fb:8f:b2:cb:be:ab:ec:19: a5:b4:3b:74:b1:a1:ce:33:52:c2:28:af:76:42:0c: 51:f2:6c:91:c1:c3:21:02:7d:c9:fc:77:05:dc:5f: c2:19:df:1c:5f:0c:01:53:63:36:8f:cf:f1:42:34: 8f:ae:55:89:9b:d4:e9:b6:ce:96:0b:6b:2e:45:b7: c3:bb:a5:5e:a7:45:e0:51:b2:98:b9:c2:49:92:90: 20:e7:9d:56:68:0b:6e:d2:30:58:ea:ba:7a:13:80: 4a:ce:78:c8:94:49:03:a7:d5:3d:ac:d7:1f:a1:60: 54:6f:9d:b7:0b:5f:10:ff:a7:05:91:76:0e:a4:17: ff:f9:59:96:b0:cb:5a:76:87:5b:20:70:0a:04:0a: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BD:5D:18:DF:56:63:2C:A6:76:DA:12:A9:21:CF:CD:98:63:30:78 X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6f:d6:05:cd:92:86:ed:c7:8c:8e:bf:d0:d6:a4:5f:26:e9: d9:d1:67:e4:8b:97:db:7b:4f:d1:de:c1:70:f8:f7:86:fd:c2: b7:70:ce:83:5c:40:94:e7:62:14:b0:24:d9:62:9c:ed:2c:fc: 51:aa:67:8d:06:2d:6d:0b:21:92:a2:db:da:93:e1:56:77:0d: c4:b9:57:73:0d:fb:c9:95:2f:7a:4d:e2:ab:53:39:64:51:68: d3:6e:f8:59:4d:c5:d3:16:20:81:38:f6:8e:67:3c:24:4f:95: 86:3c:13:d1:da:f9:82:77:40:ce:fb:e3:5d:0e:1e:eb:b1:40: 9f:44:72:3a:9e:0c:67:7f:bf:86:b7:6b:ba:b8:2e:5e:86:af: 76:53:b4:eb:89:9c:1a:f3:be:23:b5:6a:7e:5c:80:01:b0:94: 11:df:b1:79:78:b9:8b:9e:90:e6:44:94:4a:37:c7:ba:1b:5e: 97:2a:cb:21:2e:74:da:cb:18:1e:e6:cd:f7:d3:8f:96:2c:2f: 3c:0d:16:fb:b3:57:ef:00:2c:a2:70:5c:9e:27:17:c2:29:64: 7b:3f:75:1b:3f:4f:88:e7:9a:bb:24:e8:6d:f6:82:70:8d:01: f2:a9:4f:7a:30:6c:bb:eb:0b:d7:d8:17:88:b6:84:7c:be:de: cb:7e:38:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjUwODI0MTc0NjA2WhcNMjUwODMxMTc0NjA2WjAYMRYwFAYD VQQDEw02OGFiNGZkZS02YTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qb/ltqiXLEgqvaiud2SppXFRi1V27EX4JZGpT6yQhlmv/uldKTH4ILUxwFN zW3zhESuKZLErcK8pQzemi/jZc+/F5Wi7m2AH3VciQLVEvCbYjjEm7eZvJVy69cH pZabdYw7Zd5vFz2RV4FA9NZP+4+yy76r7BmltDt0saHOM1LCKK92QgxR8myRwcMh An3J/HcF3F/CGd8cXwwBU2M2j8/xQjSPrlWJm9Tpts6WC2suRbfDu6Vep0XgUbKY ucJJkpAg551WaAtu0jBY6rp6E4BKznjIlEkDp9U9rNcfoWBUb523C18Q/6cFkXYO pBf/+VmWsMtadodbIHAKBApWcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe9XRjf VmMspnbaEqkhz82YYzB4MB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF NFd6T01ocVdXcExHWVVSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlb9YFzZKG7ceMjr/Q1qRfJunZ0Wfki5fbe0/R3sFw+PeG/cK3cM6D XECU52IUsCTZYpztLPxRqmeNBi1tCyGSotvak+FWdw3EuVdzDfvJlS96TeKrUzlk UWjTbvhZTcXTFiCBOPaOZzwkT5WGPBPR2vmCd0DO++NdDh7rsUCfRHI6ngxnf7+G t2u6uC5ehq92U7TriZwa874jtWp+XIABsJQR37F5eLmLnpDmRJRKN8e6G16XKssh LnTayxge5s3304+WLC88DRb7s1fvACyicFyeJxfCKWR7P3UbP0+I55q7JOht9oJw jQHyqU96MGy76wvX2BeItoR8vt7Lfjjh -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:30 2025 by rpki-client