$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: bBPTvybzQR/99UULi7Sty4NrhvHFcsGyPZV/kT/jTFo= Subject key identifier: 6C:50:89:CD:D8:C7:1F:9E:C2:99:58:0C:72:4F:35:54:FB:67:D8:25 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 25A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 256B Signing time: Sun 10 Aug 2025 14:20:28 +0000 Manifest this update: Sun 10 Aug 2025 14:20:27 +0000 Manifest next update: Sun 17 Aug 2025 14:20:27 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: oOzSOEU6GieAZSz2Jqetfh6OIz453H/YNW8Y3UjkvgQ=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9633 (0x25a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Aug 10 14:20:27 2025 GMT Not After : Aug 17 14:20:27 2025 GMT Subject: CN=6898aaac-ee2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:30:80:ab:de:9c:1c:1c:42:26:6e:9c:9c: 90:de:c0:af:d3:0e:99:b4:de:3b:eb:4b:f1:5d:af: f1:11:b5:fa:5b:98:fa:ca:64:03:15:2e:af:a9:81: ea:b8:a6:1c:16:c1:1b:2c:54:0d:49:f8:42:66:d2: 65:bc:31:53:79:0a:32:53:fa:c6:ae:b8:8d:3f:df: 70:93:e9:75:02:ea:51:8e:c9:11:b5:f9:86:b7:e1: 85:99:af:e6:cf:3f:e3:8f:a0:b0:d9:7c:b8:65:57: bf:15:17:d3:b2:78:4a:3e:5a:7a:16:3e:a0:5c:25: 19:35:6e:95:43:10:71:c0:42:1d:9d:9e:07:77:c1: 0a:4c:fd:81:73:5a:f9:c0:b0:3a:3c:58:2e:7a:4c: 64:5e:6f:6b:9c:52:f2:e3:a1:5c:00:69:c1:b0:2f: c3:0b:ed:c2:62:c1:38:bf:30:16:0f:2f:3a:b4:55: 1c:3d:3d:8e:4e:f3:47:a3:85:84:da:f4:26:ca:43: fc:6f:fb:c2:67:3c:fd:62:e1:cf:99:f3:e8:ce:d1: ed:7a:40:b3:32:45:4f:c9:ca:2e:dd:79:60:cb:99: f3:64:e4:e1:7e:f6:f3:5e:f5:19:40:c4:ec:01:8d: 45:21:5d:24:91:96:4f:7f:d8:aa:44:93:70:93:47: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:50:89:CD:D8:C7:1F:9E:C2:99:58:0C:72:4F:35:54:FB:67:D8:25 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7a:dd:6a:10:48:ed:75:d1:16:46:82:e9:4f:39:32:6b:2d: 07:eb:8f:b7:88:51:67:b5:2d:66:30:6b:fd:df:4f:27:a4:b1: 33:06:60:63:2e:3a:99:87:21:dc:81:fa:63:ce:c2:1c:29:e0: f1:99:64:cb:ea:f7:af:d3:70:3f:08:03:1d:ad:e2:27:9e:34: 43:0a:f4:d5:f0:35:d8:74:b4:32:83:2d:aa:5e:b9:27:d2:73: a1:e5:aa:2f:cc:93:f1:d5:06:9d:c4:82:5b:31:14:10:7f:3d: 6d:3e:12:e2:d5:db:ac:9d:da:26:69:0c:66:41:45:05:8e:2f: 7d:d0:50:7c:07:9f:f0:68:95:a6:d5:e0:1d:2c:67:c7:a5:44: df:38:ff:60:63:60:45:6d:7d:c8:07:59:f0:d7:7d:9b:bd:aa: 7e:50:80:43:ff:fa:34:9c:ce:c1:67:88:7c:fa:b3:f0:c5:c3: ff:0b:aa:0f:42:3b:b7:96:58:b6:e8:dc:a3:d8:fc:da:fd:a4: 3e:fd:f1:58:1b:2a:9f:39:e5:bc:4a:c4:8f:e6:ef:a5:ff:58: ee:f0:4d:e5:c8:af:45:14:76:d6:dd:16:76:42:b7:fd:17:75: bf:f6:87:74:78:b1:37:db:a6:47:9f:17:fe:86:b9:4c:80:17: dc:32:80:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwODEwMTQyMDI3WhcNMjUwODE3MTQyMDI3WjAYMRYwFAYD VQQDEw02ODk4YWFhYy1lZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwokwgKvenBwcQiZunJyQ3sCv0w6ZtN4760vxXa/xEbX6W5j6ymQDFS6vqYHq uKYcFsEbLFQNSfhCZtJlvDFTeQoyU/rGrriNP99wk+l1AupRjskRtfmGt+GFma/m zz/jj6Cw2Xy4ZVe/FRfTsnhKPlp6Fj6gXCUZNW6VQxBxwEIdnZ4Hd8EKTP2Bc1r5 wLA6PFguekxkXm9rnFLy46FcAGnBsC/DC+3CYsE4vzAWDy86tFUcPT2OTvNHo4WE 2vQmykP8b/vCZzz9YuHPmfPoztHtekCzMkVPycou3Xlgy5nzZOThfvbzXvUZQMTs AY1FIV0kkZZPf9iqRJNwk0f9hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxQic3Y xx+ewplYDHJPNVT7Z9glMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaet1qEEjtddEWRoLpTzkyay0H64+3iFFntS1mMGv9308npLEzBmBj LjqZhyHcgfpjzsIcKeDxmWTL6vev03A/CAMdreInnjRDCvTV8DXYdLQygy2qXrkn 0nOh5aovzJPx1QadxIJbMRQQfz1tPhLi1dusndomaQxmQUUFji990FB8B5/waJWm 1eAdLGfHpUTfOP9gY2BFbX3IB1nw132bvap+UIBD//o0nM7BZ4h8+rPwxcP/C6oP Qju3lli26Nyj2Pza/aQ+/fFYGyqfOeW8SsSP5u+l/1ju8E3lyK9FFHbW3RZ2Qrf9 F3W/9od0eLE326ZHnxf+hrlMgBfcMoCY -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:59 2025 by rpki-client