$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: uEncWbyAf4Q4RVI6GPpfI7sgHLO8lXMYbJX8f2IbV48= Subject key identifier: 3C:EF:8A:6D:8A:EC:C7:EF:2E:66:39:28:D6:F7:E0:B4:A2:4B:3F:03 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 134F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1345 Signing time: Wed 20 Aug 2025 17:05:47 +0000 Manifest this update: Wed 20 Aug 2025 17:05:46 +0000 Manifest next update: Wed 27 Aug 2025 17:05:46 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: T9gkMfhMksJyG+ksy63MEFom+/Y573/ax2AfNGD7v3M=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4943 (0x134f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Aug 20 17:05:46 2025 GMT Not After : Aug 27 17:05:46 2025 GMT Subject: CN=68a6006a-f1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:46:9a:71:2d:8a:9d:0e:8b:83:95:be:c6: 0a:cd:68:f2:0f:0f:31:b9:04:b9:28:87:92:48:45: 58:0c:f9:6d:65:1e:19:5f:c1:cc:93:e2:61:bc:1f: 8e:0a:31:78:cb:73:70:b7:b2:3b:44:02:36:9a:d5: 75:d0:07:bc:5f:d8:a1:ee:41:03:b2:c4:a8:05:a7: 27:b3:47:25:1f:f3:16:32:a4:15:25:f5:ab:25:6b: df:d2:0c:7e:73:d7:38:82:bb:8b:11:ac:81:50:f0: 37:13:d6:dc:5a:f1:86:3b:5b:39:6e:1d:c7:ef:18: 63:25:31:88:19:4d:2c:e0:5c:37:4b:2c:24:32:ec: f9:98:0a:93:e0:1e:51:4c:67:e7:d6:b8:3a:45:48: c2:e2:a2:10:04:e9:72:91:c9:7f:26:1d:23:73:5e: 4b:46:b9:31:22:72:9b:7b:7b:de:4c:f6:66:bd:5a: 0c:31:7e:83:0e:58:d5:3e:bc:8f:3f:fa:83:1a:0e: b9:e0:1a:8c:e2:10:a5:47:bf:8c:13:bc:23:01:10: be:25:bc:77:1b:dd:16:4e:db:f1:7e:f4:d3:2a:6c: e9:c1:55:30:bb:2e:06:ee:1e:a5:43:0e:c1:84:95: 93:9e:20:84:b8:2e:df:46:c0:00:35:22:d9:92:b9: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:8A:6D:8A:EC:C7:EF:2E:66:39:28:D6:F7:E0:B4:A2:4B:3F:03 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:fd:13:bc:45:40:6c:93:56:e4:b3:9c:90:34:51:74:5e:20: e4:0b:f1:86:c4:95:3e:75:eb:80:e3:96:35:e4:c2:f4:63:10: a6:50:d9:55:48:3a:3c:29:ed:5c:2c:86:c3:08:c1:c0:a2:53: 43:96:ba:b2:ff:50:54:da:4f:c2:b9:5c:8d:67:44:45:e9:90: b1:07:88:07:f5:a2:b2:9b:2b:73:9b:e9:eb:08:c6:58:da:1a: 3b:cc:13:92:80:c5:ed:00:91:1d:92:29:64:4c:e4:0a:44:3f: f9:7c:36:ad:30:98:0e:cc:63:58:59:7c:3c:05:56:54:4a:5b: 57:ea:42:8b:40:90:36:df:58:ef:32:9b:13:4b:2b:e3:fa:58: 5e:f1:5e:10:64:78:4e:7d:88:f5:9c:5a:b5:b8:2a:3c:16:5e: 33:e1:58:58:36:42:73:8c:f8:8a:bd:10:67:37:b0:af:a1:16: ac:b0:ae:58:ef:9b:36:75:4e:14:d7:25:d5:f2:96:3c:7d:e2: bd:97:de:94:c9:1f:5d:f2:b8:b3:61:07:c2:af:3f:ff:21:aa: d8:f9:45:63:74:c1:11:a7:45:d9:18:85:67:bd:76:f1:f9:dc: 2f:9d:61:c5:1a:71:1f:ce:ad:7f:7c:6b:74:91:ef:e1:73:aa: 79:86:f3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUwODIwMTcwNTQ2WhcNMjUwODI3MTcwNTQ2WjAYMRYwFAYD VQQDEw02OGE2MDA2YS1mMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XhGmnEtip0Oi4OVvsYKzWjyDw8xuQS5KIeSSEVYDPltZR4ZX8HMk+JhvB+O CjF4y3Nwt7I7RAI2mtV10Ae8X9ih7kEDssSoBacns0clH/MWMqQVJfWrJWvf0gx+ c9c4gruLEayBUPA3E9bcWvGGO1s5bh3H7xhjJTGIGU0s4Fw3SywkMuz5mAqT4B5R TGfn1rg6RUjC4qIQBOlykcl/Jh0jc15LRrkxInKbe3veTPZmvVoMMX6DDljVPryP P/qDGg654BqM4hClR7+ME7wjARC+Jbx3G90WTtvxfvTTKmzpwVUwuy4G7h6lQw7B hJWTniCEuC7fRsAANSLZkrnlFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzvim2K 7MfvLmY5KNb34LSiSz8DMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT/RO8RUBsk1bks5yQNFF0XiDkC/GGxJU+deuA45Y15ML0YxCmUNlV SDo8Ke1cLIbDCMHAolNDlrqy/1BU2k/CuVyNZ0RF6ZCxB4gH9aKymytzm+nrCMZY 2ho7zBOSgMXtAJEdkilkTOQKRD/5fDatMJgOzGNYWXw8BVZUSltX6kKLQJA231jv MpsTSyvj+lhe8V4QZHhOfYj1nFq1uCo8Fl4z4VhYNkJzjPiKvRBnN7CvoRassK5Y 75s2dU4U1yXV8pY8feK9l96UyR9d8rizYQfCrz//IarY+UVjdMERp0XZGIVnvXbx +dwvnWHFGnEfzq1/fGt0ke/hc6p5hvMU -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:39 2025 by rpki-client