$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json) Hash identifier: RNl6RyZMVcwmhJR7SLeeX2lrdPRyxfZqFJNxq4Nux9E= Subject key identifier: 3D:74:9E:49:4C:89:1F:39:40:C0:46:68:A5:41:BF:43:EA:71:E6:C1 Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Certificate serial: 0E58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft Manifest number: 0E50 Signing time: Sun 24 Aug 2025 17:43:32 +0000 Manifest this update: Sun 24 Aug 2025 17:43:32 +0000 Manifest next update: Sun 31 Aug 2025 17:43:32 +0000 Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: srU2jd09bwjK6o3Ed+/taehCWdKtBaDen2b0lOgelcE=) 2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: X7Dq3eZ/GJf+9yPNH4D4Wvo3ddILMQm0OljP2i+67DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3672 (0xe58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Validity Not Before: Aug 24 17:43:32 2025 GMT Not After : Aug 31 17:43:32 2025 GMT Subject: CN=68ab4f44-17f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:05:3a:6b:c1:41:77:55:14:6a:72:ea:12: c2:99:e1:93:38:30:2a:73:12:29:76:09:00:c1:97: 25:b2:f0:e0:62:73:d6:5e:cf:f4:85:5f:b2:2a:93: df:88:50:cf:8b:97:19:4c:78:0f:91:98:db:4c:64: 1f:b7:8b:bd:9c:6d:0f:52:fb:81:56:ac:74:76:e6: 82:44:3b:81:6b:15:c4:e5:8d:d3:42:a8:9a:dd:e6: c6:59:f2:2a:23:30:c5:e5:d6:78:f1:c1:0b:55:6e: 45:31:0e:91:e7:79:50:5b:41:0e:47:78:55:ee:ff: cb:48:25:1a:53:27:e6:d6:3b:ba:a8:03:63:e4:60: 31:86:d5:b5:83:7d:29:ba:d5:b3:b9:23:2b:98:38: 5a:a0:89:28:01:37:c9:63:ce:40:ad:0e:28:22:8b: 5f:af:a8:5b:6d:c1:2b:35:de:c0:29:67:19:dd:4e: 08:7e:6c:88:06:d7:e6:54:0d:b8:af:6c:8d:9f:dc: 38:97:90:e9:ae:45:7a:dc:1c:75:f0:51:a5:fb:c5: d8:bf:4a:0c:60:05:6a:2c:29:a5:5b:a2:1f:57:c0: 2f:b6:e5:ee:4f:e7:e7:5b:80:87:fa:8d:35:44:ab: 81:7a:61:f3:90:a8:65:b2:a1:28:85:b8:56:4b:22: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:74:9E:49:4C:89:1F:39:40:C0:46:68:A5:41:BF:43:EA:71:E6:C1 X509v3 Authority Key Identifier: keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:bd:7b:f9:d8:ed:84:13:da:13:9a:51:00:af:2a:23:7c:9f: f2:ff:1a:5f:4c:7b:ad:26:15:9e:a0:e7:6b:4a:a8:75:e3:3c: c7:76:05:e1:ad:83:d1:49:4a:6a:e3:e7:90:74:4a:58:4b:7e: c8:2d:a3:b3:e7:34:dd:55:0c:74:25:41:67:f6:58:64:b7:46: 49:8b:59:49:ad:52:a8:89:cd:86:ef:40:9f:6f:fc:f9:e9:9f: a0:67:8b:30:f4:eb:32:52:83:39:01:45:2a:f5:5a:1c:df:77: 0d:f4:fb:f3:47:c8:a4:88:ae:db:1a:c0:96:fb:9a:df:20:54: 76:64:70:e3:b9:ef:99:a1:9a:30:ce:7c:ae:e6:bb:7d:5d:1c: 5f:04:88:b7:30:f9:f8:7a:2e:fc:0f:47:7c:07:ca:70:4c:77: 15:f0:b8:e2:40:a1:1a:9d:27:79:f6:0d:ae:1e:49:84:6d:c4: 8d:ed:77:62:25:7f:52:7e:6e:69:9d:73:d7:7e:2d:05:a6:fb: a3:b7:03:04:60:4d:fe:e5:6a:fa:a7:62:8c:dc:8f:98:23:48: d3:62:0a:58:86:50:94:e5:8d:df:eb:41:30:1a:0d:e8:62:33: 8e:d3:f9:c7:0f:be:71:70:8d:ae:fe:ba:ab:8d:00:54:a2:3b: 51:c9:bc:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEE3NzdFNDgxOENBMERDQzYzODJFNTYyNTcwNkY5OEM4 MUU5MzA3MjAwHhcNMjUwODI0MTc0MzMyWhcNMjUwODMxMTc0MzMyWjAYMRYwFAYD VQQDEw02OGFiNGY0NC0xN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsgFOmvBQXdVFGpy6hLCmeGTODAqcxIpdgkAwZclsvDgYnPWXs/0hV+yKpPf iFDPi5cZTHgPkZjbTGQft4u9nG0PUvuBVqx0duaCRDuBaxXE5Y3TQqia3ebGWfIq IzDF5dZ48cELVW5FMQ6R53lQW0EOR3hV7v/LSCUaUyfm1ju6qANj5GAxhtW1g30p utWzuSMrmDhaoIkoATfJY85ArQ4oIotfr6hbbcErNd7AKWcZ3U4IfmyIBtfmVA24 r2yNn9w4l5DprkV63Bx18FGl+8XYv0oMYAVqLCmlW6IfV8AvtuXuT+fnW4CH+o01 RKuBemHzkKhlsqEohbhWSyKP7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD10nklM iR85QMBGaKVBv0PqcebBMB8GA1UdIwQYMBaAFKd35IGMoNzGOC5WJXBvmMgekwcg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81QjI0QTVDOEE2 QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNNWTRMbFlsY0ctWXlCNlRC eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZmtnWXlnM01ZNExsWWxjRy1ZeUI2VEJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81QjI0QTVDOEE2QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNN WTRMbFlsY0ctWXlCNlRCeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpvXv52O2EE9oTmlEAryojfJ/y/xpfTHutJhWeoOdrSqh14zzHdgXh rYPRSUpq4+eQdEpYS37ILaOz5zTdVQx0JUFn9lhkt0ZJi1lJrVKoic2G70Cfb/z5 6Z+gZ4sw9OsyUoM5AUUq9Voc33cN9PvzR8ikiK7bGsCW+5rfIFR2ZHDjue+ZoZow znyu5rt9XRxfBIi3MPn4ei78D0d8B8pwTHcV8LjiQKEanSd59g2uHkmEbcSN7Xdi JX9Sfm5pnXPXfi0FpvujtwMEYE3+5Wr6p2KM3I+YI0jTYgpYhlCU5Y3f60EwGg3o YjOO0/nHD75xcI2u/rqrjQBUojtRybyq -----END CERTIFICATE-----Generated at Sun Aug 24 21:56:18 2025 by rpki-client