$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft File: MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json) Hash identifier: B83ct5sFVqyH60hyehpVkajQI1BGw1j/eHLQfjyDQsg= Subject key identifier: 1C:34:FB:95:7B:2C:29:B6:88:1F:71:A9:31:22:15:90:8D:70:48:BA Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC Certificate issuer: /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC Certificate serial: 0E6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft Manifest number: 0E5D Signing time: Sun 24 Aug 2025 17:42:52 +0000 Manifest this update: Sun 24 Aug 2025 17:42:52 +0000 Manifest next update: Sun 31 Aug 2025 17:42:52 +0000 Files and hashes: 1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: GO2XDhhHb5ugvuSz+TtS6ctLE7E5fXEoaCPwuYy+9TY=) 2: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: hSdBAGkC3NdMrHlNO891FMpZkgcopmoPEPx2e0kU7og=) 3: 5822028E51F811EAB221F834C4F9AE02.roa (hash: jJLLdhgsMFr0SXlBPDR7D/j4Grn7XSvqbioW2zzeEek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3692 (0xe6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC Validity Not Before: Aug 24 17:42:52 2025 GMT Not After : Aug 31 17:42:52 2025 GMT Subject: CN=68ab4f1c-2bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:0f:d2:63:6e:5f:0e:7c:af:91:12:c7:09: 64:2e:5c:f4:df:b7:cf:5c:ee:86:2c:c4:40:f6:dd: da:f0:96:29:c8:1e:14:a4:8b:fa:cb:ab:17:2c:d2: 20:25:7e:51:96:99:4f:09:f5:e2:92:f1:9d:17:4b: f5:bd:91:20:b5:58:dc:1b:d3:5f:9c:1b:b9:b5:82: a0:6d:f3:35:d3:cf:3a:e6:9a:2c:13:e2:c6:05:d3: 2f:d5:85:be:1b:63:1f:ff:d9:49:34:71:ca:45:cc: 01:4b:6f:c3:11:f0:89:b5:c8:5b:69:94:50:ba:79: cc:a4:1e:ac:b5:45:d1:1a:78:dd:8b:3d:e6:0f:96: 5d:d2:7a:b5:d4:45:c5:91:c3:eb:7c:b9:e9:b2:b3: e5:00:38:a0:d5:fd:57:ec:44:c0:2d:36:08:0d:de: 5b:e2:7b:86:f2:52:77:c7:cc:e0:22:8f:f2:d1:3b: c5:bf:89:64:0e:ac:61:16:9d:e4:b4:55:f2:a1:11: b1:02:b0:31:47:4c:b5:94:84:84:49:bd:18:a1:4c: 92:fe:4c:b8:53:ac:11:91:b2:d4:99:a1:cb:d9:06: 3e:4a:82:6e:15:76:21:c3:54:2f:e2:ad:40:b1:fb: 34:c9:08:3a:96:32:30:ff:23:5a:56:d6:86:c7:5c: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:34:FB:95:7B:2C:29:B6:88:1F:71:A9:31:22:15:90:8D:70:48:BA X509v3 Authority Key Identifier: keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:bc:f7:19:60:8e:67:1a:41:bf:34:87:47:74:35:51:e6:e0: bf:cb:cb:7b:84:fb:40:0e:0c:7e:91:36:54:1d:d2:88:17:bc: c4:bb:db:dc:75:0f:46:01:ce:7f:9a:4f:37:25:20:5c:b7:d0: 64:c8:a3:0e:ac:0c:52:6a:97:48:ea:d9:47:ec:96:75:01:ce: 00:fa:72:b9:c1:f0:4c:b1:92:98:34:76:ae:e9:62:e1:ac:2f: 0a:7c:ef:35:17:82:45:57:7a:39:6e:6e:60:09:00:1f:a4:11: bb:a4:a3:d3:df:db:15:a0:66:31:97:92:80:ea:81:74:1a:96: e1:58:93:29:87:06:d8:86:51:78:f8:75:4c:a9:a6:de:12:1a: ae:48:bd:6c:6d:36:cf:ed:72:e7:37:c0:4f:81:2d:d1:82:e9: a4:d8:5d:e4:e9:32:b4:4c:df:ac:b1:f7:ec:61:78:62:ba:0b: a7:01:63:e7:c3:2d:e2:d7:95:2e:fd:d0:8e:f0:d9:7c:50:50: 70:e6:74:c3:4b:3d:a8:31:4f:9a:c0:f6:d4:a9:b4:ad:f1:86: 53:38:ff:b4:32:3e:bd:50:5d:3e:40:48:37:33:b6:95:8b:3a: 58:72:5d:cb:05:e6:42:8b:a5:81:c9:55:80:ab:7c:ea:4a:8c: 21:70:13:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQUQxMTAvBgNVBAUTKDMyNjJGNzgxMkQ3QzdEQUFFODc1QkMxRUU4RDcxRjkw NzJDRUVEQkMwHhcNMjUwODI0MTc0MjUyWhcNMjUwODMxMTc0MjUyWjAYMRYwFAYD VQQDEw02OGFiNGYxYy0yYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTIP0mNuXw58r5ESxwlkLlz037fPXO6GLMRA9t3a8JYpyB4UpIv6y6sXLNIg JX5RlplPCfXikvGdF0v1vZEgtVjcG9NfnBu5tYKgbfM108865posE+LGBdMv1YW+ G2Mf/9lJNHHKRcwBS2/DEfCJtchbaZRQunnMpB6stUXRGnjdiz3mD5Zd0nq11EXF kcPrfLnpsrPlADig1f1X7ETALTYIDd5b4nuG8lJ3x8zgIo/y0TvFv4lkDqxhFp3k tFXyoRGxArAxR0y1lISESb0YoUyS/ky4U6wRkbLUmaHL2QY+SoJuFXYhw1Qv4q1A sfs0yQg6ljIw/yNaVtaGx1zLlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBw0+5V7 LCm2iB9xqTEiFZCNcEi6MB8GA1UdIwQYMBaAFDJi94EtfH2q6HW8HujXH5Byzu28 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJBRC84OUMwQkZDMEE0 MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZhcm9kYndlNk5jZmtITE83 YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTDNnUzE4ZmFyb2Rid2U2TmNma0hMTzdidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJBRC84OUMwQkZDMEE0MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZh cm9kYndlNk5jZmtITE83YncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAvPcZYI5nGkG/NIdHdDVR5uC/y8t7hPtADgx+kTZUHdKIF7zEu9vc dQ9GAc5/mk83JSBct9BkyKMOrAxSapdI6tlH7JZ1Ac4A+nK5wfBMsZKYNHau6WLh rC8KfO81F4JFV3o5bm5gCQAfpBG7pKPT39sVoGYxl5KA6oF0GpbhWJMphwbYhlF4 +HVMqabeEhquSL1sbTbP7XLnN8BPgS3Rgumk2F3k6TK0TN+ssffsYXhiugunAWPn wy3i15Uu/dCO8Nl8UFBw5nTDSz2oMU+awPbUqbSt8YZTOP+0Mj69UF0+QEg3M7aV izpYcl3LBeZCi6WByVWAq3zqSowhcBMB -----END CERTIFICATE-----Generated at Sun Aug 24 21:44:34 2025 by rpki-client