$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: /a5vpElXYqp3HeH7NC6SklZVJQYjDcq9GQZkyOIql4k= Subject key identifier: 7A:D1:02:37:45:E1:EE:4A:DD:DE:D9:F0:09:13:0B:68:F0:5F:F5:87 Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: F9 Signing time: Sat 09 Aug 2025 05:36:20 +0000 Manifest this update: Sat 09 Aug 2025 05:36:19 +0000 Manifest next update: Sat 16 Aug 2025 05:36:19 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: sAx5rT2nH86e4qxl/EfXjN9XXDY4DSJMCeu6R2F7xng=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Aug 9 05:36:19 2025 GMT Not After : Aug 16 05:36:19 2025 GMT Subject: CN=6896de53-1aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:90:bd:4c:d4:fc:33:7b:fd:ca:bb:c1:df: d1:5f:e6:9c:c1:96:a6:30:f8:b6:18:44:a3:36:98: cf:19:70:fd:ea:21:fe:51:0e:74:1e:2e:37:a8:de: e7:b9:eb:e8:4e:eb:57:15:0f:d8:56:f2:56:27:0d: ee:e8:d6:b3:5a:e0:cb:cd:67:46:a1:9b:c1:21:a4: 40:47:ff:6c:92:eb:7c:c5:b2:51:c3:ce:62:b2:04: 52:fe:42:41:94:e2:19:ac:8f:eb:ee:6f:5f:1b:1a: 70:50:b2:75:73:65:6b:10:5a:ab:ad:b6:e5:7b:f4: 48:6b:19:d1:d8:4f:90:d3:6f:1e:dc:3d:c0:f8:08: 31:53:8d:e4:3b:8b:45:9b:f1:41:c1:26:7a:b0:87: 98:ce:aa:ae:82:ee:ca:c2:7c:32:84:54:35:2f:2f: 0a:48:c9:e9:3f:dd:67:7a:01:e5:16:f0:b3:7b:95: 42:a3:ef:0f:f4:d0:53:a8:5b:d6:62:26:17:33:55: 70:62:0f:d1:f2:04:a6:64:f8:dc:5f:bc:a0:81:ea: c0:83:69:b0:9f:eb:02:f4:78:67:da:96:eb:41:2b: 48:40:39:15:19:44:01:11:26:df:ff:2a:bf:27:41: a2:84:62:bd:15:29:fe:34:2c:91:ea:bb:09:03:c7: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D1:02:37:45:E1:EE:4A:DD:DE:D9:F0:09:13:0B:68:F0:5F:F5:87 X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1d:66:c2:5b:01:09:ed:c5:15:1e:ac:fe:aa:a4:7e:98:23: d7:c4:62:08:c5:8e:25:79:5a:a2:3a:78:ed:8d:8f:e7:ac:79: d1:8d:8c:c9:eb:e3:64:28:4c:ae:92:dc:80:10:79:10:0e:1b: c5:af:c3:08:d1:96:dc:41:72:98:58:10:ee:ca:0b:58:83:d4: be:ac:a5:60:80:78:e9:6b:7f:e4:9c:80:fa:87:2f:56:10:df: 65:26:e5:96:b0:a2:83:94:fa:02:4f:e2:ee:db:25:46:41:d3: 05:27:f9:f7:0b:ce:73:75:fe:dc:d5:44:9c:e6:6a:a6:fd:d0: d5:0c:59:d9:7e:91:85:b6:c3:b2:8f:6f:10:21:69:37:a8:61: ed:8d:a1:28:d9:85:fd:5e:3f:c5:b3:80:5d:23:61:14:52:78: ff:08:06:38:c8:c8:3f:65:9d:a6:29:bf:d3:53:31:ee:6f:56: dd:5b:b7:94:ca:ca:b1:78:c6:e5:1b:ae:63:99:e7:91:c8:2d: f2:dd:9b:f9:b7:70:9b:e7:2f:e7:4f:3d:9a:4c:3a:2a:05:eb: 24:2c:12:fe:4f:50:a2:d3:03:0a:7d:58:7d:45:12:a0:b1:23: bf:85:38:67:a3:07:ac:e8:ab:a9:8e:ff:73:0c:28:95:f3:9f: 2e:a5:99:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUwODA5MDUzNjE5WhcNMjUwODE2MDUzNjE5WjAYMRYwFAYD VQQDEw02ODk2ZGU1My0xYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPCQvUzU/DN7/cq7wd/RX+acwZamMPi2GESjNpjPGXD96iH+UQ50Hi43qN7n uevoTutXFQ/YVvJWJw3u6NazWuDLzWdGoZvBIaRAR/9skut8xbJRw85isgRS/kJB lOIZrI/r7m9fGxpwULJ1c2VrEFqrrbble/RIaxnR2E+Q028e3D3A+AgxU43kO4tF m/FBwSZ6sIeYzqqugu7KwnwyhFQ1Ly8KSMnpP91negHlFvCze5VCo+8P9NBTqFvW YiYXM1VwYg/R8gSmZPjcX7yggerAg2mwn+sC9Hhn2pbrQStIQDkVGUQBESbf/yq/ J0GihGK9FSn+NCyR6rsJA8cRqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrRAjdF 4e5K3d7Z8AkTC2jwX/WHMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjHWbCWwEJ7cUVHqz+qqR+mCPXxGIIxY4leVqiOnjtjY/nrHnRjYzJ 6+NkKEyuktyAEHkQDhvFr8MI0ZbcQXKYWBDuygtYg9S+rKVggHjpa3/knID6hy9W EN9lJuWWsKKDlPoCT+Lu2yVGQdMFJ/n3C85zdf7c1USc5mqm/dDVDFnZfpGFtsOy j28QIWk3qGHtjaEo2YX9Xj/Fs4BdI2EUUnj/CAY4yMg/ZZ2mKb/TUzHub1bdW7eU ysqxeMblG65jmeeRyC3y3Zv5t3Cb5y/nTz2aTDoqBeskLBL+T1Ci0wMKfVh9RRKg sSO/hThnowes6Kupjv9zDCiV858upZkf -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:50 2025 by rpki-client