$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: iVDGu3aGnT5qsUyBpootUiwfQdRV9M3d2GOjRJBPfF0= Subject key identifier: 8F:F5:60:A1:5D:44:7E:D8:1F:E1:FF:3B:C0:3D:CE:FF:76:E4:44:9C Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0377 Signing time: Sat 23 Aug 2025 01:08:51 +0000 Manifest this update: Sat 23 Aug 2025 01:08:51 +0000 Manifest next update: Sat 30 Aug 2025 01:08:51 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: O1G4Qvinym3nv2PQZMYpeSwUTr9qAtW+Ffd3U9cMkzA=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Aug 23 01:08:51 2025 GMT Not After : Aug 30 01:08:51 2025 GMT Subject: CN=68a914a3-d29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:5a:1a:37:54:59:e4:31:8f:20:ff:73:ba: 46:62:f0:c3:57:90:35:d9:6e:74:09:6e:27:64:00: 8c:48:ee:0e:37:01:bd:42:5a:59:0d:bf:4b:86:68: 68:97:46:8a:88:d2:09:f4:02:11:5d:da:8b:d2:b3: 75:46:49:e8:e0:83:f3:17:01:e6:46:92:85:ac:ff: fd:ae:9f:eb:b7:90:ef:51:e9:c8:3c:71:82:95:5d: c4:a7:ac:51:5e:a3:bc:11:4a:3a:b9:dc:cb:61:c9: 14:0f:58:82:e3:77:9e:9f:16:3f:bc:5f:b1:d9:ac: 23:67:a6:3a:0f:b6:aa:2a:18:14:1c:9a:75:1b:ef: 74:08:06:37:32:f3:23:b7:aa:20:0f:3c:2e:62:a5: e2:0e:8b:ed:9b:03:cb:06:7f:20:ca:77:94:cc:30: 35:1a:0d:2f:35:03:10:80:f6:18:6b:e3:e8:86:b7: b5:f2:ef:35:eb:48:d1:6e:04:22:e3:26:4b:ea:d4: 51:ad:49:41:62:4c:39:05:5e:fd:fb:1f:0b:4a:36: 55:b6:63:79:2d:37:ce:ec:8d:22:4c:1a:b2:a2:36: 50:51:0c:54:ad:86:4c:b3:fe:26:77:e5:2d:55:52: 65:a5:84:9d:7d:12:47:a4:59:ec:65:c0:03:cd:8f: ea:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F5:60:A1:5D:44:7E:D8:1F:E1:FF:3B:C0:3D:CE:FF:76:E4:44:9C X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:25:dc:2f:96:16:0f:66:68:2d:f9:23:9f:cb:19:98:86:59: 0e:ad:af:94:d8:a1:46:80:98:f6:aa:5f:d4:a5:fd:88:e8:c0: 80:33:2a:72:d3:71:f8:7f:de:95:b4:53:24:8a:b8:02:34:39: b1:8c:fb:d1:db:d3:3a:c8:0c:2a:f0:82:f1:ab:1e:3a:d2:a8: c4:25:97:0a:06:25:7f:25:63:99:83:96:d3:f1:35:26:f7:1e: 3d:23:f9:55:ee:e4:c5:09:b4:78:85:e0:c5:ce:23:59:40:ac: 0c:ef:b7:c6:fb:d2:be:5b:19:2f:c7:ec:58:4e:e0:6f:6c:22: 31:eb:fc:62:25:39:a2:5a:64:92:f2:8d:15:39:ed:0a:6f:f3: 16:32:9d:dd:ea:3a:12:c2:40:d5:8e:1c:01:0b:cf:dc:03:9f: c2:57:75:c9:21:17:88:5b:dc:27:3e:ad:bb:4e:5e:87:41:f7: 19:fb:53:b4:0a:ae:05:b8:6a:30:ca:79:84:ed:07:3a:c8:01: 79:21:46:21:f9:a0:79:45:eb:37:c0:5b:21:f0:00:7e:cb:ce: e2:73:d1:19:71:61:35:f6:6d:29:5e:7a:5b:70:ab:ba:3f:2f: 34:cd:36:0b:8b:58:d3:83:7d:c6:7b:4b:84:fb:3c:6c:01:d8: 30:15:6e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjUwODIzMDEwODUxWhcNMjUwODMwMDEwODUxWjAYMRYwFAYD VQQDEw02OGE5MTRhMy1kMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5paGjdUWeQxjyD/c7pGYvDDV5A12W50CW4nZACMSO4ONwG9QlpZDb9Lhmho l0aKiNIJ9AIRXdqL0rN1Rkno4IPzFwHmRpKFrP/9rp/rt5DvUenIPHGClV3Ep6xR XqO8EUo6udzLYckUD1iC43eenxY/vF+x2awjZ6Y6D7aqKhgUHJp1G+90CAY3MvMj t6ogDzwuYqXiDovtmwPLBn8gyneUzDA1Gg0vNQMQgPYYa+Pohre18u8160jRbgQi 4yZL6tRRrUlBYkw5BV79+x8LSjZVtmN5LTfO7I0iTBqyojZQUQxUrYZMs/4md+Ut VVJlpYSdfRJHpFnsZcADzY/q0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/1YKFd RH7YH+H/O8A9zv925EScMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOJdwvlhYPZmgt+SOfyxmYhlkOra+U2KFGgJj2ql/Upf2I6MCAMypy 03H4f96VtFMkirgCNDmxjPvR29M6yAwq8ILxqx460qjEJZcKBiV/JWOZg5bT8TUm 9x49I/lV7uTFCbR4heDFziNZQKwM77fG+9K+Wxkvx+xYTuBvbCIx6/xiJTmiWmSS 8o0VOe0Kb/MWMp3d6joSwkDVjhwBC8/cA5/CV3XJIReIW9wnPq27Tl6HQfcZ+1O0 Cq4FuGowynmE7Qc6yAF5IUYh+aB5Res3wFsh8AB+y87ic9EZcWE19m0pXnpbcKu6 Py80zTYLi1jTg33Ge0uE+zxsAdgwFW5v -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:34 2025 by rpki-client