$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: gU57Dz1FGXUAK6L37ZRIKiOZ/jsQjSrfnA2gs56D72A= Subject key identifier: 4C:1D:7A:39:39:C6:55:28:CA:7D:8E:7B:D1:2D:C3:C7:E3:F2:37:DA Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: 3C Signing time: Fri 05 Sep 2025 08:02:24 +0000 Manifest this update: Fri 05 Sep 2025 08:02:23 +0000 Manifest next update: Fri 12 Sep 2025 08:02:23 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: 7hwq7TQ2CMghn0rxxHZ+YU2/N46XpdcxRcWTHfwIciw=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Sep 5 08:02:23 2025 GMT Not After : Sep 12 08:02:23 2025 GMT Subject: CN=68ba9910-cf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:ca:7d:2f:75:9a:79:fb:49:d8:16:f6:ee: 5c:d4:35:ae:c1:7e:b2:b3:49:ce:59:46:ea:f2:fa: 37:30:5e:37:0b:13:69:2d:75:8d:66:f3:75:ad:cd: bc:0a:00:e9:31:e6:a5:51:c0:f1:67:b4:c0:07:42: 12:88:f5:07:ab:e9:9c:1f:31:e3:8a:fa:13:d6:b1: 64:f8:de:b9:dc:81:79:8c:c9:39:4d:cc:d5:ad:be: f0:50:d6:71:ee:ae:85:9f:c5:6c:42:5d:a1:36:f3: 5e:18:05:d1:71:3c:cd:47:b2:ce:c0:4a:81:8f:c6: ed:2a:b5:25:fc:59:ae:1d:99:27:db:9e:5d:b5:14: 51:32:2c:27:e1:e2:df:df:dd:0c:60:37:71:5f:5f: 9c:6e:5c:94:56:b5:91:e4:67:5d:a4:7b:42:06:6e: c7:dc:cc:4f:49:b7:47:15:9d:7a:3d:0a:37:e2:18: a3:dd:c9:d1:e5:45:60:34:29:97:c8:78:f8:3f:2f: 1c:48:24:8b:ff:21:16:47:4c:38:a9:be:c0:3f:a6: 83:94:70:e7:d8:27:20:7e:00:3d:7a:e2:b7:8d:93: 47:56:f0:54:8f:24:f8:22:6c:c8:f7:1c:08:60:c6: b3:c8:9f:fd:d8:00:2e:b7:07:d0:29:98:b8:f2:26: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1D:7A:39:39:C6:55:28:CA:7D:8E:7B:D1:2D:C3:C7:E3:F2:37:DA X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d8:69:e1:6c:04:55:ea:a9:df:7e:6c:a6:26:95:89:59:ae: 96:66:c6:be:58:a8:57:bd:64:26:78:c1:26:5c:0c:8d:13:69: 42:24:8f:51:63:f0:35:6a:91:4a:a9:bd:44:d8:4a:8c:2e:bc: 5a:84:41:12:61:7b:16:d3:0f:98:c8:b5:22:5d:1b:16:8c:c1: 25:f0:85:bb:d6:74:cb:64:fb:bd:77:20:57:e3:c0:c4:76:31: 9d:f2:90:26:b5:16:0e:ef:e6:03:6c:88:02:5c:e2:59:24:cd: dd:fd:11:68:93:2d:8a:42:68:0e:d0:a8:3d:7b:74:78:5d:c4: 6a:f4:d1:ab:6b:dc:e9:b9:b7:e7:a0:eb:a8:98:76:32:8c:66: 81:60:ca:16:93:27:01:e4:36:a3:0d:ed:93:10:2e:86:aa:96: 43:b9:3b:ce:ca:f6:22:16:2b:d6:05:77:c2:83:6c:fc:34:33: 38:5d:dd:bc:f2:7a:f5:80:c1:09:0b:e1:c5:5c:22:40:0e:60: 02:b3:55:18:b1:99:85:bf:54:59:d9:bd:d6:36:98:37:b6:36: 48:23:be:de:6c:b6:ce:29:5e:ac:33:34:d3:ad:65:43:70:c7: 38:37:94:31:59:5d:5d:46:42:2f:af:9d:da:b5:2d:b3:14:b8: 92:31:7b:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTA5MDUwODAyMjNaFw0yNTA5MTIwODAyMjNaMBgxFjAUBgNV BAMTDTY4YmE5OTEwLWNmNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk/Mp9L3WaeftJ2Bb27lzUNa7BfrKzSc5ZRury+jcwXjcLE2ktdY1m83WtzbwK AOkx5qVRwPFntMAHQhKI9Qer6ZwfMeOK+hPWsWT43rncgXmMyTlNzNWtvvBQ1nHu roWfxWxCXaE2814YBdFxPM1Hss7ASoGPxu0qtSX8Wa4dmSfbnl21FFEyLCfh4t/f 3QxgN3FfX5xuXJRWtZHkZ12ke0IGbsfczE9Jt0cVnXo9CjfiGKPdydHlRWA0KZfI ePg/LxxIJIv/IRZHTDipvsA/poOUcOfYJyB+AD164reNk0dW8FSPJPgibMj3HAhg xrPIn/3YAC63B9ApmLjyJr+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTB16OTnG VSjKfY570S3Dx+PyN9owHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5LzE0QTdCMjYyMzNGRjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlpl NW4zZEFZM2dOc3BtMVNwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7YaeFsBFXqqd9+bKYmlYlZrpZmxr5YqFe9ZCZ4wSZcDI0TaUIkj1Fj 8DVqkUqpvUTYSowuvFqEQRJhexbTD5jItSJdGxaMwSXwhbvWdMtk+713IFfjwMR2 MZ3ykCa1Fg7v5gNsiAJc4lkkzd39EWiTLYpCaA7QqD17dHhdxGr00atr3Om5t+eg 66iYdjKMZoFgyhaTJwHkNqMN7ZMQLoaqlkO5O87K9iIWK9YFd8KDbPw0Mzhd3bzy evWAwQkL4cVcIkAOYAKzVRixmYW/VFnZvdY2mDe2Nkgjvt5sts4pXqwzNNOtZUNw xzg3lDFZXV1GQi+vndq1LbMUuJIxe7g= -----END CERTIFICATE-----Generated at Sat Sep 6 20:48:23 2025 by rpki-client