$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: DmWMD24a3gsEauzweyFEYXZE6Sfn2YLkjxkzX5faCAo= Subject key identifier: 6E:63:F2:AF:A1:10:77:ED:EB:83:8A:27:3A:C0:A4:E0:1A:22:2C:D2 Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 0431 Signing time: Thu 11 Sep 2025 00:37:29 +0000 Manifest this update: Thu 11 Sep 2025 00:37:29 +0000 Manifest next update: Thu 18 Sep 2025 00:37:29 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: dqZTCJe0sfRptUWmwLRov4Eir5wCHu3+xthTyMNQj7w=) 2: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M67wvRNu5yJc0PmvdrXe9QBiktT/1OOEAW8u7AyC62Q=) 3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: zLlFP29fbev002DflF+TA3Qjdh6cZ72DZUDF3K/hrT8=) 4: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 00:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Sep 11 00:37:29 2025 GMT Not After : Sep 18 00:37:29 2025 GMT Subject: CN=68c219c9-a775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:55:0e:d5:57:8c:d2:1f:ad:8f:e9:9e:59: 09:85:5d:8b:30:4a:8b:97:05:f6:43:be:48:72:48: 33:88:ec:05:0d:6c:37:63:ab:55:29:14:f4:cc:a0: dc:04:44:b7:cc:e0:5b:ab:ef:f0:0d:ec:f8:3a:6b: 28:dc:04:a2:79:5f:82:ea:0b:5f:a8:05:07:18:8f: 00:32:ca:4a:51:1e:cf:2a:39:17:bc:ef:6d:be:b3: b6:31:e3:66:95:ed:4f:b8:4e:8b:e2:70:54:0d:45: 5b:a9:a3:5d:ca:22:d2:bd:7a:ae:cf:46:41:40:63: 3c:d9:6f:eb:36:4c:fe:9a:25:7b:b1:d6:53:5b:91: 7d:69:6c:48:3a:a6:c5:40:3e:92:76:b5:9e:b1:a2: fa:63:6c:60:0b:9c:a6:9f:60:97:51:0b:04:57:dd: 1a:8a:47:c4:63:9c:42:88:c7:76:d4:b9:8a:35:48: 95:4c:dd:49:c7:4a:6f:f3:c7:49:3f:b4:4f:f0:37: 85:0a:d3:40:93:fc:6a:f7:15:be:7f:b2:81:b5:bf: fd:57:26:f3:85:bf:5c:63:4c:98:c6:d4:48:c4:b9: 8a:a0:e3:e5:f5:c9:4f:c3:14:8c:22:93:a3:01:5a: cb:96:4a:9d:94:3a:f7:6b:ab:40:5c:85:08:18:e1: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:63:F2:AF:A1:10:77:ED:EB:83:8A:27:3A:C0:A4:E0:1A:22:2C:D2 X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:33:e2:52:12:5b:1e:63:b7:65:f0:cd:49:09:60:31:44:ec: d2:47:a7:9f:99:09:ea:40:e8:99:17:d6:05:92:27:7b:d1:90: 8c:3c:c1:52:f2:5e:19:8c:11:c5:99:f5:dd:7f:cb:81:4c:4c: 4d:85:2e:01:0b:c9:1b:36:07:1b:cb:1c:6a:fd:50:63:63:31: a7:bb:85:7f:42:e1:bc:4b:d3:0a:c1:d3:ab:69:f2:19:5d:f3: 61:00:8d:0c:8a:d8:cd:df:55:21:89:54:73:27:27:61:58:ae: f3:b1:c4:df:fc:95:f4:0c:fe:e2:47:63:49:3f:e6:c4:db:98: 44:93:65:fd:6f:d8:36:a6:47:60:0d:8b:07:03:34:a1:3c:91: 10:91:99:40:46:3c:bc:3d:a9:f4:08:45:58:41:a2:55:4d:19: fd:67:1f:ec:88:e2:64:99:2e:66:6d:14:34:83:fe:40:0c:69: 6c:c3:44:bf:17:c0:d6:c1:3d:0c:a9:a2:54:d3:f0:92:45:55: e9:9a:19:4b:c6:2e:1d:60:e5:8c:27:a2:bd:e9:23:9d:1c:9a: f0:e3:9b:3f:5d:cc:e4:e7:d6:d0:05:46:4a:e3:4f:cb:ee:a1: 59:ba:55:98:37:fe:e0:02:21:43:c4:9c:b7:33:c5:5d:8c:ee: 23:90:56:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjUwOTExMDAzNzI5WhcNMjUwOTE4MDAzNzI5WjAYMRYwFAYD VQQDEw02OGMyMTljOS1hNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JxVDtVXjNIfrY/pnlkJhV2LMEqLlwX2Q75IckgziOwFDWw3Y6tVKRT0zKDc BES3zOBbq+/wDez4Omso3ASieV+C6gtfqAUHGI8AMspKUR7PKjkXvO9tvrO2MeNm le1PuE6L4nBUDUVbqaNdyiLSvXquz0ZBQGM82W/rNkz+miV7sdZTW5F9aWxIOqbF QD6SdrWesaL6Y2xgC5ymn2CXUQsEV90aikfEY5xCiMd21LmKNUiVTN1Jx0pv88dJ P7RP8DeFCtNAk/xq9xW+f7KBtb/9Vybzhb9cY0yYxtRIxLmKoOPl9clPwxSMIpOj AVrLlkqdlDr3a6tAXIUIGOHwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5j8q+h EHft64OKJzrApOAaIizSMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpM+JSElseY7dl8M1JCWAxROzSR6efmQnqQOiZF9YFkid70ZCMPMFS 8l4ZjBHFmfXdf8uBTExNhS4BC8kbNgcbyxxq/VBjYzGnu4V/QuG8S9MKwdOrafIZ XfNhAI0MitjN31UhiVRzJydhWK7zscTf/JX0DP7iR2NJP+bE25hEk2X9b9g2pkdg DYsHAzShPJEQkZlARjy8Pan0CEVYQaJVTRn9Zx/siOJkmS5mbRQ0g/5ADGlsw0S/ F8DWwT0MqaJU0/CSRVXpmhlLxi4dYOWMJ6K96SOdHJrw45s/Xczk59bQBUZK40/L 7qFZulWYN/7gAiFDxJy3M8VdjO4jkFY+ -----END CERTIFICATE-----Generated at Thu Sep 11 12:18:40 2025 by rpki-client