$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft File: M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json) Hash identifier: TqEpN2vQr39Hsg/QpTOdw1dOyro7HfI+gZ92yT1CxdQ= Subject key identifier: 8B:28:9C:98:8F:7D:97:06:B4:68:EA:9B:2C:69:7D:C7:2B:3A:B4:FC Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0 Certificate issuer: /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft Manifest number: AD Signing time: Sat 09 Aug 2025 06:32:10 +0000 Manifest this update: Sat 09 Aug 2025 06:32:09 +0000 Manifest next update: Sat 16 Aug 2025 06:32:09 +0000 Files and hashes: 1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: Gkj603HWhC6+C/gtwpmrMRYnNIiuuX4nhk1evi3D/3o=) 2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: Ur23uerjkF05UN2d4OV8Z6LvPx8JS26HE6YTaEzhleU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0 Validity Not Before: Aug 9 06:32:09 2025 GMT Not After : Aug 16 06:32:09 2025 GMT Subject: CN=6896eb69-473c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7d:76:78:82:6b:e0:0e:b1:74:3c:83:a7:30: 2c:ae:ee:fe:36:31:eb:a4:71:12:e3:70:98:75:4a: 74:5f:cb:03:c6:f4:1d:5d:1b:cd:20:eb:1a:7d:ec: cf:c1:0f:ce:88:6e:7d:2a:0a:bf:fc:1f:54:c2:53: 6d:e2:97:6e:d1:0b:e1:d4:9d:8f:39:fb:39:b9:a6: 8a:fd:16:0f:f8:3c:48:e5:a1:d7:22:f7:cb:1d:9b: 03:00:0b:7c:5a:03:aa:14:5a:11:ba:70:cb:57:b9: 6c:31:4b:ee:9f:dc:37:31:98:88:3c:d3:e4:9c:4e: 0a:64:3f:2e:b5:a1:b2:bd:f2:fc:3d:d1:df:39:5c: d4:89:b5:09:aa:8e:1e:2c:1c:14:dc:68:c2:d3:93: f8:3a:28:c0:12:0b:ee:b5:fb:40:02:3f:0d:d1:f9: 3b:fe:09:20:b0:df:94:8c:47:7a:c1:4c:6c:33:ff: 6c:85:e8:7e:ba:dd:27:1e:03:cb:b8:af:33:48:64: b0:21:0c:99:19:48:20:02:cf:8e:56:0d:84:3b:4f: a7:d1:c5:43:43:b5:8b:d0:b9:57:c7:3b:c5:77:85: d2:5b:db:5e:be:c4:6b:21:4c:a0:37:75:9d:a1:20: 90:8c:1b:97:96:e3:9c:69:ef:55:8f:70:6e:0e:ed: 7d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:28:9C:98:8F:7D:97:06:B4:68:EA:9B:2C:69:7D:C7:2B:3A:B4:FC X509v3 Authority Key Identifier: keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:23:72:1f:e2:81:ec:b2:f0:0d:7c:53:dc:70:2f:22:bf:8f: e3:ab:aa:cd:35:7d:70:27:46:70:b1:c6:2a:95:c8:e6:71:2b: 10:a3:2f:b3:95:65:6d:00:8c:07:d2:e3:a1:a5:c9:aa:2a:3c: cf:76:e5:2b:2c:13:86:3e:8f:e5:d5:2c:56:61:96:bb:56:26: 9b:0b:35:07:7e:54:a6:dd:4f:f4:b5:b3:0e:cb:0d:9f:34:3a: 73:53:00:a6:b2:04:db:18:7b:5f:61:c8:de:92:87:89:b2:c2: 04:ad:7f:f4:e2:24:79:9b:31:ed:78:df:ec:53:d7:8b:1e:ee: 8d:5b:52:e0:93:41:7f:4a:8f:d1:5c:e8:f7:bd:2b:b8:d0:8a: 7a:47:04:ae:b7:76:1c:55:1f:4c:95:9b:fd:ef:a0:e1:6b:e5: ab:78:c8:69:c9:08:ca:cb:23:90:3e:cd:7a:cc:94:a1:2d:a9: 5f:75:f8:9e:ca:0c:a1:66:c8:33:bf:16:ab:1b:4b:11:da:29: f3:92:9c:90:5d:17:cb:eb:ee:e3:d3:25:03:2a:d7:8d:c0:ba: 0d:7f:fe:35:04:be:ed:06:0e:6d:c0:f0:d8:33:ce:e3:39:f3: 20:ee:a0:66:f9:41:9d:36:e8:b0:3d:7f:49:8b:47:c2:41:05: d6:a2:42:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU2MjAxMTAvBgNVBAUTKDMzNzVBOTYxMzRDNTczMzFBRjU0REQ3MTRFRDM2M0RB QjMxQjZCRDAwHhcNMjUwODA5MDYzMjA5WhcNMjUwODE2MDYzMjA5WjAYMRYwFAYD VQQDEw02ODk2ZWI2OS00NzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n12eIJr4A6xdDyDpzAsru7+NjHrpHES43CYdUp0X8sDxvQdXRvNIOsafezP wQ/OiG59Kgq//B9UwlNt4pdu0Qvh1J2POfs5uaaK/RYP+DxI5aHXIvfLHZsDAAt8 WgOqFFoRunDLV7lsMUvun9w3MZiIPNPknE4KZD8utaGyvfL8PdHfOVzUibUJqo4e LBwU3GjC05P4OijAEgvutftAAj8N0fk7/gkgsN+UjEd6wUxsM/9sheh+ut0nHgPL uK8zSGSwIQyZGUggAs+OVg2EO0+n0cVDQ7WL0LlXxzvFd4XSW9tevsRrIUygN3Wd oSCQjBuXluOcae9Vj3BuDu19ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsonJiP fZcGtGjqmyxpfccrOrT8MB8GA1UdIwQYMBaAFDN1qWE0xXMxr1TdcU7TY9qzG2vQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTYyMC8xNEEzNzY0NDZC QTkxMUVGQTNCMzQ2ODRDNEY5QUUwMi9NM1dwWVRURmN6R3ZWTjF4VHROajJyTWJh OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zV3BZVFRGY3pHdlZOMXhUdE5qMnJNYmE5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTYyMC8xNEEzNzY0NDZCQTkxMUVGQTNCMzQ2ODRDNEY5QUUwMi9NM1dwWVRURmN6 R3ZWTjF4VHROajJyTWJhOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAI3If4oHssvANfFPccC8iv4/jq6rNNX1wJ0ZwscYqlcjmcSsQoy+z lWVtAIwH0uOhpcmqKjzPduUrLBOGPo/l1SxWYZa7ViabCzUHflSm3U/0tbMOyw2f NDpzUwCmsgTbGHtfYcjekoeJssIErX/04iR5mzHteN/sU9eLHu6NW1Lgk0F/So/R XOj3vSu40Ip6RwSut3YcVR9MlZv976Dha+WreMhpyQjKyyOQPs16zJShLalfdfie ygyhZsgzvxarG0sR2inzkpyQXRfL6+7j0yUDKteNwLoNf/41BL7tBg5twPDYM87j OfMg7qBm+UGdNuiwPX9Ji0fCQQXWokJy -----END CERTIFICATE-----Generated at Sun Aug 10 21:07:05 2025 by rpki-client