$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: TDJapNY9uXBEA1u/LIjVogTNq/BNmisrMHZHoGQNPis= Subject key identifier: 51:98:0F:DE:81:A9:03:F1:AE:92:FB:F1:F9:E3:F3:D4:C4:65:44:E9 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 0397 Signing time: Tue 09 Sep 2025 00:55:48 +0000 Manifest this update: Tue 09 Sep 2025 00:55:47 +0000 Manifest next update: Tue 16 Sep 2025 00:55:47 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: bmYZVF03QUhvAey9pFSXrd+CABN58W2A0eoz6v9DDoE=) 2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=) 3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Sep 9 00:55:47 2025 GMT Not After : Sep 16 00:55:47 2025 GMT Subject: CN=68bf7b13-b326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:5e:a0:54:a0:fe:ac:1c:15:0b:43:31:54: 88:6f:11:c1:23:c2:7d:a8:17:36:52:ac:bb:10:80: fd:1a:8b:dc:f7:2a:0f:e9:77:a3:d7:c6:9b:72:19: 60:a9:97:4f:0b:41:60:83:c0:9d:b0:f7:cc:15:0c: af:d2:a3:51:05:24:54:97:1b:3d:20:25:bb:46:b1: 14:dd:67:4c:f9:48:78:5e:57:4a:aa:87:49:ca:ac: 13:a1:e8:61:60:d5:50:31:9d:0e:07:26:ca:16:3b: 89:ea:23:e5:4d:a7:82:e4:53:d9:cc:20:3e:7d:35: f4:74:08:77:f8:15:15:bd:fc:da:fd:1c:53:31:c0: 49:c4:61:8c:70:df:92:4c:71:a6:b7:0c:a9:d7:b6: ed:ca:a3:e5:60:dd:7f:46:0b:ad:20:d1:45:f1:92: 85:41:bc:b7:8b:5f:85:42:46:73:26:74:9e:5b:bd: 83:49:33:63:3b:20:ee:29:80:cb:82:0c:53:6e:e2: b6:44:46:ef:38:7d:09:d2:cd:fb:4c:87:3b:06:31: dd:82:90:42:30:18:8b:13:d5:9b:df:a1:52:6c:75: 84:fc:fa:5c:2d:6b:3f:63:e6:a8:03:1c:41:6a:f1: 45:d6:54:6f:fd:4e:41:3c:ce:61:98:66:21:4b:1b: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:98:0F:DE:81:A9:03:F1:AE:92:FB:F1:F9:E3:F3:D4:C4:65:44:E9 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f3:0d:5b:49:7d:99:64:89:8f:df:d9:37:9a:1d:8f:ea:1c: f7:8c:e1:bd:9c:cd:77:b0:a3:7f:7d:a5:09:0e:bb:a3:52:cf: 2f:81:99:2e:ff:92:84:91:9d:fa:f6:31:8e:1b:2e:27:09:23: 7b:d8:41:9f:e3:75:72:5e:85:f9:6f:87:64:b0:26:0f:36:b6: 07:b8:0c:7c:5c:03:f8:57:1e:d9:88:5b:f7:55:f4:a2:96:af: 55:6d:56:55:0f:fa:87:2f:65:75:2d:e2:d7:63:7c:d0:64:23: 36:29:01:13:d6:78:e7:70:2f:c9:9c:48:99:b3:d4:8e:d3:66: 6c:b2:49:2c:85:33:51:0d:b8:02:40:f3:08:6b:a6:52:ed:87: ed:0b:26:2b:1a:9e:23:9a:31:24:65:89:82:aa:6b:38:48:ba: 6a:2d:60:59:6b:d9:30:82:3f:70:ae:27:9d:70:d5:40:cf:82: 62:7e:98:2b:7f:f5:64:0c:2b:b1:2f:84:02:c7:87:5b:14:56: 27:31:56:71:4e:84:88:17:5d:28:5a:f5:bf:c9:88:37:be:0d: 06:a0:fb:e4:8d:4f:07:63:c7:95:cf:dc:3a:99:7d:bf:76:fc: 11:59:57:2e:b1:47:d3:f1:36:d3:f0:7a:8a:2f:f4:12:2e:1f: 93:f4:33:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUwOTA5MDA1NTQ3WhcNMjUwOTE2MDA1NTQ3WjAYMRYwFAYD VQQDEw02OGJmN2IxMy1iMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8FeoFSg/qwcFQtDMVSIbxHBI8J9qBc2Uqy7EID9Govc9yoP6Xej18abchlg qZdPC0Fgg8CdsPfMFQyv0qNRBSRUlxs9ICW7RrEU3WdM+Uh4XldKqodJyqwToehh YNVQMZ0OBybKFjuJ6iPlTaeC5FPZzCA+fTX0dAh3+BUVvfza/RxTMcBJxGGMcN+S THGmtwyp17btyqPlYN1/RgutINFF8ZKFQby3i1+FQkZzJnSeW72DSTNjOyDuKYDL ggxTbuK2REbvOH0J0s37TIc7BjHdgpBCMBiLE9Wb36FSbHWE/PpcLWs/Y+aoAxxB avFF1lRv/U5BPM5hmGYhSxs8lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGYD96B qQPxrpL78fnj89TEZUTpMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk8w1bSX2ZZImP39k3mh2P6hz3jOG9nM13sKN/faUJDrujUs8vgZku /5KEkZ369jGOGy4nCSN72EGf43VyXoX5b4dksCYPNrYHuAx8XAP4Vx7ZiFv3VfSi lq9VbVZVD/qHL2V1LeLXY3zQZCM2KQET1njncC/JnEiZs9SO02ZsskkshTNRDbgC QPMIa6ZS7YftCyYrGp4jmjEkZYmCqms4SLpqLWBZa9kwgj9wriedcNVAz4Jifpgr f/VkDCuxL4QCx4dbFFYnMVZxToSIF10oWvW/yYg3vg0GoPvkjU8HY8eVz9w6mX2/ dvwRWVcusUfT8TbT8HqKL/QSLh+T9DPE -----END CERTIFICATE-----Generated at Tue Sep 9 17:50:39 2025 by rpki-client