$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: eJp7sr74adJkURgZXmUlGHZhPLpz1frxgtChUQuMweQ= Subject key identifier: 10:5F:31:71:AD:0E:5F:7D:F5:B5:7A:D9:C8:12:04:4A:41:20:E9:BE Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 34B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 34B4 Signing time: Sun 24 Aug 2025 14:50:36 +0000 Manifest this update: Sun 24 Aug 2025 14:50:35 +0000 Manifest next update: Sun 31 Aug 2025 14:50:35 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: +JGcECQGPF6is8aCf41KeEkRLgXF9ntsfrA3EKZQCIg=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: 6tys2kBORt2e9LfTgwSygjIdDqVtnmqGXLJS1SjEsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13495 (0x34b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Aug 24 14:50:35 2025 GMT Not After : Aug 31 14:50:35 2025 GMT Subject: CN=68ab26bb-debb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:d6:64:02:50:fa:bc:bd:81:55:6d:47:6b: 09:5f:19:0c:a7:3d:4f:44:dd:e0:06:27:09:67:6e: 48:f0:26:59:84:1f:03:19:89:e8:f7:36:ca:c2:98: 3c:01:37:d8:9e:5a:f3:54:f0:c0:6c:10:5e:05:1d: f9:39:21:3e:ac:87:1c:18:aa:c8:a0:e5:46:56:9b: 0a:1b:99:ce:6b:8b:3a:bd:77:d5:22:d5:34:21:ae: d3:cb:fd:6d:2c:63:d1:0a:0d:8c:74:61:c8:e3:db: 44:cf:31:53:b2:fc:61:ee:54:fb:ad:5f:00:11:f4: 14:f2:87:eb:bb:7a:fa:29:d6:03:74:84:30:67:03: 1a:91:7c:aa:b9:bd:32:ea:03:1f:b9:26:3d:a2:78: 80:d8:21:80:5c:ce:44:56:ad:70:ee:47:d5:70:d1: 79:bb:71:b8:93:2a:eb:f0:9a:3e:da:f7:c0:69:27: 94:9c:e8:10:63:a4:bf:ba:5f:43:a9:46:7b:22:03: 01:21:4b:b5:b4:64:0d:85:92:f7:3b:96:53:36:5b: 62:c1:d4:d8:cd:88:24:09:24:6c:39:2c:45:37:4d: a8:8b:7a:5b:da:bd:eb:3c:46:31:bc:05:42:65:0d: 1f:19:81:68:8a:ef:f8:5e:1c:c8:eb:2f:f4:46:e3: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5F:31:71:AD:0E:5F:7D:F5:B5:7A:D9:C8:12:04:4A:41:20:E9:BE X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ca:b4:34:ad:3a:07:30:0a:4e:6e:83:23:eb:b0:6c:a4:ce: 7d:39:ab:19:fd:17:60:dc:40:3c:01:fe:2b:cb:dd:01:59:6a: d2:88:38:9d:2f:18:75:a9:e5:f6:c3:8f:fd:da:76:02:88:9f: 2e:96:17:de:84:95:42:00:77:3a:a1:85:88:10:30:28:89:d9: 75:c1:24:42:18:25:6c:0d:55:05:8c:90:95:c9:7b:77:aa:be: 42:f3:5a:c2:d0:db:0a:28:53:6a:fb:36:ef:ff:7d:ef:5b:f4: b0:64:fb:46:2b:a9:b9:72:3f:8c:4d:c4:26:b9:5b:b8:eb:02: bc:a1:97:23:c5:bf:0b:ab:ed:58:af:63:f3:3b:dd:51:fb:a1: e3:18:b2:99:00:56:20:46:24:9a:57:a6:91:f9:d9:ef:a1:6a: a1:da:cb:08:3d:d6:bc:91:49:ff:3f:36:fd:c4:3a:de:c2:62: ff:34:4a:06:90:df:bd:17:d3:65:6c:7d:b1:0d:81:02:a6:44: a2:ff:35:64:80:1d:52:51:9a:28:99:85:1f:a6:a5:01:12:a5: 53:63:31:ad:1f:63:22:9a:27:ca:5a:e9:b7:87:5f:ef:bf:d3: 11:1f:16:30:45:62:b3:32:3e:37:8e:ed:90:df:32:9d:34:d6: aa:7d:46:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjUwODI0MTQ1MDM1WhcNMjUwODMxMTQ1MDM1WjAYMRYwFAYD VQQDEw02OGFiMjZiYi1kZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8/WZAJQ+ry9gVVtR2sJXxkMpz1PRN3gBicJZ25I8CZZhB8DGYno9zbKwpg8 ATfYnlrzVPDAbBBeBR35OSE+rIccGKrIoOVGVpsKG5nOa4s6vXfVItU0Ia7Ty/1t LGPRCg2MdGHI49tEzzFTsvxh7lT7rV8AEfQU8ofru3r6KdYDdIQwZwMakXyqub0y 6gMfuSY9oniA2CGAXM5EVq1w7kfVcNF5u3G4kyrr8Jo+2vfAaSeUnOgQY6S/ul9D qUZ7IgMBIUu1tGQNhZL3O5ZTNltiwdTYzYgkCSRsOSxFN02oi3pb2r3rPEYxvAVC ZQ0fGYFoiu/4XhzI6y/0RuNN+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBfMXGt Dl999bV62cgSBEpBIOm+MB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUyrQ0rToHMApOboMj67BspM59OasZ/Rdg3EA8Af4ry90BWWrSiDid Lxh1qeX2w4/92nYCiJ8ulhfehJVCAHc6oYWIEDAoidl1wSRCGCVsDVUFjJCVyXt3 qr5C81rC0NsKKFNq+zbv/33vW/SwZPtGK6m5cj+MTcQmuVu46wK8oZcjxb8Lq+1Y r2PzO91R+6HjGLKZAFYgRiSaV6aR+dnvoWqh2ssIPda8kUn/Pzb9xDrewmL/NEoG kN+9F9NlbH2xDYECpkSi/zVkgB1SUZoomYUfpqUBEqVTYzGtH2MimifKWum3h1/v v9MRHxYwRWKzMj43ju2Q3zKdNNaqfUaE -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:58 2025 by rpki-client