$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: YeWDEjlcf6WlA1YzZDeTZpIsy4AAIhzLz92TkhMiww4= Subject key identifier: 25:48:85:FC:5B:92:0D:35:F5:EA:50:06:35:C1:C4:4E:0D:BC:F0:1D Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 04EC Signing time: Wed 20 Aug 2025 23:49:36 +0000 Manifest this update: Wed 20 Aug 2025 23:49:36 +0000 Manifest next update: Wed 27 Aug 2025 23:49:36 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: N7e3F1AbUnZO+hHfR2qgRaGC6sAuFbXAiNgcnDXGtJ0=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: K+U5H/gEB39S0MtkniCqyAbmgU8k6WO9RKiUyR91DCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: Aug 20 23:49:36 2025 GMT Not After : Aug 27 23:49:36 2025 GMT Subject: CN=68a65f10-ca83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:75:49:02:d7:5f:71:78:31:2a:8a:10:a4: 52:d6:eb:ec:1a:1a:41:cc:6b:35:a0:ca:57:e8:e3: 09:e8:e6:f2:7d:b6:14:f5:8a:20:1f:cd:77:49:bb: ec:df:24:f4:cd:b6:21:11:1b:60:ae:3d:ff:ad:5d: 04:c2:8a:7e:a2:23:30:1d:39:7c:c1:73:bf:ac:f4: 2d:cd:e5:5d:04:76:b7:7d:5c:ea:4d:c0:d4:ed:46: f4:92:9d:64:54:48:f3:37:0f:23:4d:02:32:ce:af: d8:3e:d7:49:41:79:bb:af:6f:68:e9:1f:ab:5a:01: 39:be:97:9a:33:35:78:bf:3f:08:8a:32:82:95:65: d8:be:c5:58:f8:cc:a3:42:72:f1:58:57:5e:76:17: 62:6b:d0:9c:36:e0:31:a2:8c:7a:31:fe:67:6e:b2: 98:e6:a9:3c:51:b9:5e:65:27:f8:20:ad:d8:63:43: a0:7e:9d:e9:cd:79:e3:e7:be:2a:b1:39:73:ce:45: 88:8b:15:50:1b:fa:aa:d5:87:ae:e2:fe:21:83:4a: 30:b9:34:a2:30:74:45:f8:d1:6a:61:4e:b1:d4:4d: be:0e:98:ce:a1:99:a8:d3:09:6d:35:0f:19:db:5b: 33:73:c8:35:18:0d:7b:72:b4:de:44:9b:40:46:8c: da:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:85:FC:5B:92:0D:35:F5:EA:50:06:35:C1:C4:4E:0D:BC:F0:1D X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:93:3f:2b:5d:d8:b6:ad:20:14:75:37:28:1e:ce:6a:21:df: b1:07:75:1e:87:58:0f:8e:58:2f:44:65:dc:97:62:fe:9c:55: ef:e2:d3:a5:81:a1:6a:66:01:56:92:f7:d6:9e:86:07:3a:c5: 97:e9:94:0f:bd:83:75:3c:e6:eb:bf:4a:63:2b:8e:06:f7:1d: 6c:d8:05:77:51:a8:2d:7a:7c:58:ab:2b:7c:8b:f0:62:46:e1: 0b:a7:70:cb:6b:70:5a:ab:3e:a1:dc:67:06:ff:d7:df:14:88: 1b:55:4e:a9:3a:c5:5a:2e:c1:b6:78:5c:15:17:68:3f:32:26: ca:52:5a:f2:ef:a0:2d:84:28:3c:78:da:99:05:de:43:a5:8f: ff:95:38:00:3a:9c:78:e5:e1:01:eb:02:41:6b:59:b0:80:cb: 73:af:e4:bc:19:4b:8a:9b:f1:d9:1f:11:f9:b6:1f:a6:61:f8: 29:c9:42:2c:6a:02:54:6d:fc:96:0f:f2:bb:7b:0a:9d:9e:16: 40:c1:c9:a2:77:37:b9:ed:bd:e7:fa:e8:32:23:9b:7c:74:9a: 83:8f:98:4d:02:0f:40:c8:8e:b5:2d:9d:fc:7f:c1:a7:e5:c4: a3:d7:3d:7f:29:39:fb:0e:aa:fe:0e:e5:de:ba:3f:61:5c:15: 5a:be:e6:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjUwODIwMjM0OTM2WhcNMjUwODI3MjM0OTM2WjAYMRYwFAYD VQQDEw02OGE2NWYxMC1jYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06d1SQLXX3F4MSqKEKRS1uvsGhpBzGs1oMpX6OMJ6ObyfbYU9YogH813Sbvs 3yT0zbYhERtgrj3/rV0Ewop+oiMwHTl8wXO/rPQtzeVdBHa3fVzqTcDU7Ub0kp1k VEjzNw8jTQIyzq/YPtdJQXm7r29o6R+rWgE5vpeaMzV4vz8IijKClWXYvsVY+Myj QnLxWFdedhdia9CcNuAxoox6Mf5nbrKY5qk8UbleZSf4IK3YY0Ogfp3pzXnj574q sTlzzkWIixVQG/qq1Yeu4v4hg0owuTSiMHRF+NFqYU6x1E2+DpjOoZmo0wltNQ8Z 21szc8g1GA17crTeRJtARozaTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVIhfxb kg019epQBjXBxE4NvPAdMB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPkz8rXdi2rSAUdTcoHs5qId+xB3Ueh1gPjlgvRGXcl2L+nFXv4tOl gaFqZgFWkvfWnoYHOsWX6ZQPvYN1PObrv0pjK44G9x1s2AV3UagtenxYqyt8i/Bi RuELp3DLa3Baqz6h3GcG/9ffFIgbVU6pOsVaLsG2eFwVF2g/MibKUlry76AthCg8 eNqZBd5DpY//lTgAOpx45eEB6wJBa1mwgMtzr+S8GUuKm/HZHxH5th+mYfgpyUIs agJUbfyWD/K7ewqdnhZAwcmidze57b3n+ugyI5t8dJqDj5hNAg9AyI61LZ38f8Gn 5cSj1z1/KTn7Dqr+DuXeuj9hXBVavuYB -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:13 2025 by rpki-client