$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: Kcsfn+EJwnm0aQ4GxY8wPWISYb3NxQxSy322/WqqhPo= Subject key identifier: 55:0A:F9:80:D3:58:62:29:C7:A4:54:D9:95:E6:F6:4D:1B:4E:AA:B3 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 081D Signing time: Fri 08 Aug 2025 21:11:42 +0000 Manifest this update: Fri 08 Aug 2025 21:11:42 +0000 Manifest next update: Fri 15 Aug 2025 21:11:42 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: xIyWGezPYC3P0gqrKReSnOw8dDzqoPhZEZ8wi94Fe8A=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Aug 8 21:11:42 2025 GMT Not After : Aug 15 21:11:42 2025 GMT Subject: CN=6896680e-f3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:a7:e5:b0:97:60:86:99:90:fc:91:22:5d: 39:02:76:a3:e2:c2:35:4b:63:aa:dc:ac:0c:e8:16: 74:ef:a1:1b:e0:25:a6:c7:78:e4:fe:18:13:6b:95: b7:f9:f6:be:da:22:e8:72:c3:aa:37:5b:0d:f9:14: 87:dd:70:d5:b0:6a:4d:4e:56:c3:49:27:7d:8c:7a: d0:a4:dd:14:83:5f:d9:ed:0b:fd:d6:d8:f8:fb:d0: d4:8a:17:46:f6:bd:05:12:60:e5:d4:da:89:17:c5: 5c:7a:09:47:f6:bb:09:5d:5c:82:60:a5:c8:bd:4c: 91:50:c0:2f:0b:74:e4:95:72:e0:81:8d:a5:53:f0: 05:bc:03:26:a9:b5:67:31:53:90:9b:9e:8d:68:6f: 6c:ed:dd:d0:a7:b0:50:1d:58:7d:56:dc:e4:50:1a: 9b:30:4f:18:14:d5:b7:d1:8a:b3:bb:29:11:56:41: 38:9a:26:91:35:f3:13:1d:41:18:a0:15:80:1b:5d: 1f:50:5c:2d:81:9d:bb:8d:db:9f:fd:4a:34:4a:d4: 6b:b8:db:7b:c0:d8:3e:47:96:fc:97:3f:b1:27:da: 21:c1:fc:7d:9d:9a:16:c1:29:73:63:08:d7:e7:ad: ce:2f:73:1b:38:7a:c4:a9:8f:68:d8:c0:44:56:c5: ed:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0A:F9:80:D3:58:62:29:C7:A4:54:D9:95:E6:F6:4D:1B:4E:AA:B3 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:be:11:41:5f:7a:30:59:b3:76:d3:90:cf:ab:fd:c0:75:98: 88:e3:d4:ce:74:00:38:c5:36:20:c2:83:d6:ac:3e:97:52:da: 8b:fa:4e:43:a1:77:cb:03:60:cb:28:7a:c1:4a:5c:4a:46:43: 87:f3:e4:6f:73:f6:4a:df:f2:34:75:de:f9:77:a2:e4:1a:83: cb:a3:e9:c3:54:63:96:23:db:0e:1e:b8:f5:e8:2b:d3:fd:7c: 85:f2:2b:76:a6:29:68:d4:c0:84:88:9b:47:90:b8:80:4b:87: b3:82:53:a2:2f:a2:23:9c:ae:f7:31:0b:52:d3:4f:ca:12:62: 1d:b1:3a:07:1f:a1:8e:11:d5:e4:2b:09:33:0d:c9:12:49:9b: d0:b8:ba:c1:13:37:8f:04:af:9e:db:b7:4d:e9:54:42:6d:79: f8:e7:72:4a:fc:61:37:f7:4f:cf:8b:d4:aa:0b:0a:e1:64:eb: c4:f2:96:70:c1:3b:f7:f0:64:e1:85:45:13:da:2f:d3:06:97: ac:d2:1a:78:ab:d9:fa:c2:79:c1:0a:3c:24:f1:7c:c1:e4:d4: bb:39:eb:bd:ff:33:54:6a:08:36:08:c9:a4:96:13:2a:4f:a5: f4:5b:86:2e:bb:e0:76:1f:26:4d:be:44:6c:a6:7c:62:db:c3: 26:00:b0:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUwODA4MjExMTQyWhcNMjUwODE1MjExMTQyWjAYMRYwFAYD VQQDEw02ODk2NjgwZS1mM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCSn5bCXYIaZkPyRIl05Anaj4sI1S2Oq3KwM6BZ076Eb4CWmx3jk/hgTa5W3 +fa+2iLocsOqN1sN+RSH3XDVsGpNTlbDSSd9jHrQpN0Ug1/Z7Qv91tj4+9DUihdG 9r0FEmDl1NqJF8VceglH9rsJXVyCYKXIvUyRUMAvC3TklXLggY2lU/AFvAMmqbVn MVOQm56NaG9s7d3Qp7BQHVh9VtzkUBqbME8YFNW30YqzuykRVkE4miaRNfMTHUEY oBWAG10fUFwtgZ27jduf/Uo0StRruNt7wNg+R5b8lz+xJ9ohwfx9nZoWwSlzYwjX 563OL3MbOHrEqY9o2MBEVsXtxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUK+YDT WGIpx6RU2ZXm9k0bTqqzMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1vhFBX3owWbN205DPq/3AdZiI49TOdAA4xTYgwoPWrD6XUtqL+k5D oXfLA2DLKHrBSlxKRkOH8+Rvc/ZK3/I0dd75d6LkGoPLo+nDVGOWI9sOHrj16CvT /XyF8it2pilo1MCEiJtHkLiAS4ezglOiL6IjnK73MQtS00/KEmIdsToHH6GOEdXk KwkzDckSSZvQuLrBEzePBK+e27dN6VRCbXn453JK/GE390/Pi9SqCwrhZOvE8pZw wTv38GThhUUT2i/TBpes0hp4q9n6wnnBCjwk8XzB5NS7Oeu9/zNUagg2CMmklhMq T6X0W4Yuu+B2HyZNvkRspnxi28MmALAO -----END CERTIFICATE-----Generated at Sun Aug 10 16:08:59 2025 by rpki-client