$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: mBRRxFBSY4weJQsGOefWVT/zUYi0DDTKc2BXPe2r8ao= Subject key identifier: E2:0D:6C:DE:D4:2F:F3:7A:10:DB:E2:41:B9:B2:53:09:D2:BB:C3:44 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 2586 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2550 Signing time: Wed 18 Jun 2025 14:20:25 +0000 Manifest this update: Wed 18 Jun 2025 14:20:24 +0000 Manifest next update: Wed 25 Jun 2025 14:20:24 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: dXd4q5op4b7mzPQX24CVzJIzs/DJHLnqSEu8pBoR9Us=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9606 (0x2586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Jun 18 14:20:24 2025 GMT Not After : Jun 25 14:20:24 2025 GMT Subject: CN=6852cb29-8bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:12:06:f6:d9:3f:54:72:ed:0b:2a:8b:4d: db:40:0f:1d:7a:90:d0:03:ce:47:dc:3c:27:3b:70: 8e:ac:cd:8b:8e:08:4a:4d:12:3c:60:ed:94:5b:33: 2f:e1:e2:11:c9:22:bd:f4:a6:e2:3c:2c:04:73:c4: e3:09:25:fc:bf:6a:7e:3f:a2:20:b0:1d:38:ee:4d: 49:5a:47:93:03:4f:b1:05:c0:f2:39:4a:91:85:f3: dd:f8:6f:ad:39:b2:47:dd:10:9c:fa:e0:01:70:b6: c2:03:eb:8c:32:8a:c7:14:c7:82:b2:80:76:0f:da: ef:c0:c4:cf:44:44:9e:85:5c:40:04:12:2c:ca:d8: 83:e5:41:f6:cb:1c:aa:bd:75:b2:6e:7c:b3:e4:92: bc:2a:8f:33:3c:1d:7c:e2:8c:27:5b:22:6c:85:ce: 04:58:6d:3b:7b:dc:4f:19:4a:dd:d1:c3:a3:9c:62: f1:ce:83:1b:c7:c1:04:7c:bd:8a:1b:41:a2:27:77: 47:45:91:af:37:d7:20:e5:dc:ce:5a:e5:d8:76:cd: d9:7f:4d:74:22:ab:f4:92:81:9a:9c:77:7e:cf:4d: 34:d2:d6:4a:39:31:f8:32:46:af:bd:d4:04:6e:af: d9:2e:e8:e4:89:82:c7:e2:ac:a1:2b:7c:f4:be:87: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0D:6C:DE:D4:2F:F3:7A:10:DB:E2:41:B9:B2:53:09:D2:BB:C3:44 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:00:e0:5f:54:3e:fa:c8:ec:a2:c4:a9:83:d0:2d:8e:13:df: c0:95:25:d9:be:48:ec:3d:d9:7c:99:f6:57:21:a5:5c:28:1d: 16:9c:1b:c1:7f:77:c2:62:b1:e4:f7:76:08:32:30:a1:2e:4f: df:b9:98:02:49:4b:09:bf:7e:16:3a:24:d3:c9:df:7a:81:d1: eb:04:1d:a5:ee:8f:7a:96:b8:cf:8c:f2:1f:58:b5:35:11:e9: 66:5e:be:42:aa:ba:33:da:07:d6:68:52:ca:66:f3:54:09:2c: 29:96:d8:fc:fb:de:db:a4:e1:34:73:e0:13:46:a6:75:bc:55: 05:38:36:f9:13:41:9d:7e:a2:3c:05:4d:ce:8b:04:84:9a:10: 1f:58:48:f1:86:ab:58:88:c9:78:af:96:bb:fc:f1:c8:3b:ec: 17:7f:c0:a0:d1:2e:f3:d3:ad:9e:60:34:a1:53:3c:b2:5d:64: a9:3e:4b:22:89:4c:2c:c7:fc:5c:a5:1e:b0:ce:87:0e:b8:3a: d3:74:36:a2:b1:ae:68:10:3d:7c:51:35:05:7c:19:e0:97:3f: 9b:0d:b5:5c:8f:22:8d:b4:7d:9c:9e:f1:15:da:bd:ae:66:9f: 09:d3:85:8c:5e:11:99:ff:a7:fa:28:9f:af:0a:ec:6c:07:e9: 6a:eb:af:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwNjE4MTQyMDI0WhcNMjUwNjI1MTQyMDI0WjAYMRYwFAYD VQQDEw02ODUyY2IyOS04YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXASBvbZP1Ry7Qsqi03bQA8depDQA85H3DwnO3COrM2LjghKTRI8YO2UWzMv 4eIRySK99KbiPCwEc8TjCSX8v2p+P6IgsB047k1JWkeTA0+xBcDyOUqRhfPd+G+t ObJH3RCc+uABcLbCA+uMMorHFMeCsoB2D9rvwMTPRESehVxABBIsytiD5UH2yxyq vXWybnyz5JK8Ko8zPB184ownWyJshc4EWG07e9xPGUrd0cOjnGLxzoMbx8EEfL2K G0GiJ3dHRZGvN9cg5dzOWuXYds3Zf010Iqv0koGanHd+z0000tZKOTH4MkavvdQE bq/ZLujkiYLH4qyhK3z0vocu6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOINbN7U L/N6ENviQbmyUwnSu8NEMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1AOBfVD76yOyixKmD0C2OE9/AlSXZvkjsPdl8mfZXIaVcKB0WnBvB f3fCYrHk93YIMjChLk/fuZgCSUsJv34WOiTTyd96gdHrBB2l7o96lrjPjPIfWLU1 EelmXr5Cqroz2gfWaFLKZvNUCSwpltj8+97bpOE0c+ATRqZ1vFUFODb5E0GdfqI8 BU3OiwSEmhAfWEjxhqtYiMl4r5a7/PHIO+wXf8Cg0S7z062eYDShUzyyXWSpPksi iUwsx/xcpR6wzocOuDrTdDaisa5oED18UTUFfBnglz+bDbVcjyKNtH2cnvEV2r2u Zp8J04WMXhGZ/6f6KJ+vCuxsB+lq669+ -----END CERTIFICATE-----Generated at Fri Jun 20 07:51:01 2025 by rpki-client