$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json) Hash identifier: wNPDxiPjHUAiH4+fiT4DvqZly4Y8Xh89CT4r/z1TQsI= Subject key identifier: C7:0C:33:54:47:22:6B:FC:1B:A6:3C:9F:B2:5C:70:F3:05:B2:6B:8D Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0E51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft Manifest number: 0E36 Signing time: Sun 24 Aug 2025 17:45:57 +0000 Manifest this update: Sun 24 Aug 2025 17:45:56 +0000 Manifest next update: Sun 31 Aug 2025 17:45:56 +0000 Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: cOC9mt84ykviPwe+dywFnmE3XhgFJkQtRLDHW9Az0oQ=) 2: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: RzHUUv/miUNX3icVSP0eFdue2uGb59/3arKmFqnz2Fc=) 3: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: fXxSo682fkgrV8puX+aCaQZxmTNLL+rJcYQD485NwzM=) 4: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: s3xebHa/jipF1DOC4szye5Ddv89P0OTkiIBe/5lBHnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3665 (0xe51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: Aug 24 17:45:56 2025 GMT Not After : Aug 31 17:45:56 2025 GMT Subject: CN=68ab4fd5-4184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:65:f4:8c:da:ae:2d:e4:fa:04:93:f7:62: 4b:45:16:3c:be:e0:2f:51:c3:11:35:9f:49:19:b3: ee:c8:ee:4d:d1:d5:a9:f7:de:94:00:bf:65:78:8d: 2f:e7:18:28:41:6b:f3:36:35:f4:bc:e2:fc:82:d5: 8d:be:6d:03:5f:cb:8e:0a:4d:fd:f8:18:73:35:86: 1b:49:e5:9f:2c:10:39:d6:78:4b:a2:7d:3c:b5:49: ca:6b:47:87:cf:f2:a8:3e:b8:13:7b:b5:d7:68:48: 47:37:7b:ec:42:a7:e4:ed:f3:bc:20:77:25:2f:96: 32:e7:0f:a6:bc:36:97:6a:29:e3:dc:d7:bc:54:44: f9:18:fc:45:8b:df:70:9e:39:77:0c:63:a3:15:b4: 58:6e:55:b3:53:2f:80:53:83:e8:20:6d:fc:8d:f4: ff:7a:44:6f:fb:aa:42:69:b8:e3:db:46:e1:fa:95: 23:9a:02:b0:ae:39:89:d8:2d:19:50:2c:48:7d:e1: 45:0d:27:7b:8a:50:15:79:4f:21:fe:90:95:b1:ad: a0:6c:bd:c9:cb:f3:a9:58:4a:53:86:95:85:a0:03: 70:5b:9a:bc:44:51:96:cc:72:4b:cb:dc:bc:69:77: 25:5f:f3:70:2c:c1:54:cc:e1:6f:85:41:c3:0d:84: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0C:33:54:47:22:6B:FC:1B:A6:3C:9F:B2:5C:70:F3:05:B2:6B:8D X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e7:39:52:6f:a2:53:53:5a:ac:0e:87:79:d5:c5:18:ca:8c: 0e:e6:6b:7e:76:19:74:56:a7:3c:5b:45:1d:7b:b2:df:b9:4d: 20:e8:4f:4c:09:d2:93:0c:58:8a:ee:f7:aa:f9:e4:86:0e:7f: c7:fc:b1:63:4f:d2:85:62:f2:b3:fd:c5:f0:7a:06:8b:c6:27: af:9a:4c:4d:a0:fb:b6:fb:6b:56:e1:ed:7a:7d:2b:c5:0a:d3: 2b:a6:e3:65:36:29:0a:63:8a:20:0f:2a:cf:4a:52:d9:8a:18: c9:09:32:bd:74:9d:dc:60:f0:3d:38:f8:31:78:51:c2:9e:5d: 0f:37:a2:4a:a5:02:24:79:c4:c4:6a:9d:d2:b4:04:8a:83:d8: 62:30:8f:f7:62:a1:88:a4:27:9c:76:e1:a1:c5:db:d6:a6:fb: db:be:81:ea:15:d6:cd:e1:3d:2e:76:4d:dc:15:50:50:59:bc: 37:6b:63:f9:72:3a:bd:76:1d:22:d8:d9:47:d2:91:da:88:ba: 0c:e9:9b:f9:91:a0:42:fa:1b:ba:2b:cb:11:e3:c9:b8:a8:d9: 95:d6:2c:75:1c:b8:97:d2:35:7b:c1:af:1f:0d:0d:4f:34:96: bb:5f:d4:a1:48:39:0d:9f:b2:d7:59:3b:3e:eb:33:7d:e1:5c: f8:02:02:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjUwODI0MTc0NTU2WhcNMjUwODMxMTc0NTU2WjAYMRYwFAYD VQQDEw02OGFiNGZkNS00MTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTdl9Izari3k+gST92JLRRY8vuAvUcMRNZ9JGbPuyO5N0dWp996UAL9leI0v 5xgoQWvzNjX0vOL8gtWNvm0DX8uOCk39+BhzNYYbSeWfLBA51nhLon08tUnKa0eH z/KoPrgTe7XXaEhHN3vsQqfk7fO8IHclL5Yy5w+mvDaXainj3Ne8VET5GPxFi99w njl3DGOjFbRYblWzUy+AU4PoIG38jfT/ekRv+6pCabjj20bh+pUjmgKwrjmJ2C0Z UCxIfeFFDSd7ilAVeU8h/pCVsa2gbL3Jy/OpWEpThpWFoANwW5q8RFGWzHJLy9y8 aXclX/NwLMFUzOFvhUHDDYRxuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcMM1RH Imv8G6Y8n7JccPMFsmuNMB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERv Tm9FaGxaYlFnaW1tbFByeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY5zlSb6JTU1qsDod51cUYyowO5mt+dhl0Vqc8W0Ude7LfuU0g6E9M CdKTDFiK7veq+eSGDn/H/LFjT9KFYvKz/cXwegaLxievmkxNoPu2+2tW4e16fSvF CtMrpuNlNikKY4ogDyrPSlLZihjJCTK9dJ3cYPA9OPgxeFHCnl0PN6JKpQIkecTE ap3StASKg9hiMI/3YqGIpCecduGhxdvWpvvbvoHqFdbN4T0udk3cFVBQWbw3a2P5 cjq9dh0i2NlH0pHaiLoM6Zv5kaBC+hu6K8sR48m4qNmV1ix1HLiX0jV7wa8fDQ1P NJa7X9ShSDkNn7LXWTs+6zN94Vz4AgIC -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:54 2025 by rpki-client