$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: lHLeLvfWL0SPsoADE2Uc6ARTHnw4LwiWl8aRrjm4IFs= Subject key identifier: F0:A1:B5:7B:C9:FF:19:94:2D:80:C1:0B:FF:C1:5A:E1:A7:86:FF:D6 Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: 012B Signing time: Thu 07 Aug 2025 05:09:00 +0000 Manifest this update: Thu 07 Aug 2025 05:08:59 +0000 Manifest next update: Thu 14 Aug 2025 05:08:59 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: lS6V6j78kjjblkpiAwWp+AiHfQ21H+CWgDQpOBx/nLo=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Aug 7 05:08:59 2025 GMT Not After : Aug 14 05:08:59 2025 GMT Subject: CN=689434eb-1e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:3f:b1:d6:a9:c9:58:70:bd:e4:64:4e:48: f0:31:c9:a4:b2:a4:ff:8f:85:16:8b:64:22:d2:6d: 72:d8:3e:a9:47:24:e1:ae:c7:cb:27:4e:c6:cf:c3: 2e:54:c6:f7:42:e0:21:98:28:05:aa:c8:51:b8:ad: 7a:59:93:14:e7:8b:e8:db:04:8c:00:bf:2b:02:b4: 3f:a8:6f:7d:ab:af:9f:dd:ab:36:13:34:4c:3c:d1: 43:82:24:c7:34:7f:3d:02:aa:6b:2e:47:2f:fe:89: 5e:e3:29:2a:ef:79:b9:19:61:d3:d0:26:d0:39:ac: 45:33:04:ab:06:5a:32:7e:c0:29:02:cb:d6:ca:be: 06:c1:d0:e6:b0:2b:84:c9:7b:b7:78:70:d5:e0:c3: 17:4e:ff:4f:70:3b:f3:70:67:cc:e2:d3:0f:e8:f5: 9d:7e:96:19:66:d9:cc:9e:4a:03:a8:a7:df:0c:8d: 3f:94:6a:5a:fb:19:04:07:c1:15:8d:af:74:b5:f7: 1d:02:af:30:01:1d:23:6b:dd:dc:9c:29:a1:13:94: 66:1b:6f:2e:4a:ca:a9:f0:57:6d:71:9f:e3:16:56: eb:a5:c6:20:96:fd:b9:0c:dc:1a:be:e0:06:f3:56: 7a:fd:02:30:13:91:3c:b0:da:79:f0:a5:0f:9c:fb: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A1:B5:7B:C9:FF:19:94:2D:80:C1:0B:FF:C1:5A:E1:A7:86:FF:D6 X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:06:8d:08:32:cd:71:ed:39:1c:c6:da:59:1c:0e:f8:e7:64: 6b:54:a8:e1:c0:02:60:5b:b0:ad:47:2f:ab:9e:5d:ba:ae:b0: e4:7e:ae:f7:8a:f6:be:65:16:57:33:9e:9b:ab:86:0d:26:1a: a7:90:21:89:96:ec:87:17:29:b3:bd:0e:9e:b1:e3:5e:a4:ae: 98:9d:b6:80:90:22:45:78:c0:b0:08:76:bf:45:ac:88:42:a9: a3:26:eb:3c:0d:7e:da:70:97:b0:b2:08:a8:8d:f7:f2:fa:13: 57:0f:8b:fe:b4:42:3a:40:89:44:c1:3d:a4:b9:7d:df:40:6f: d0:42:c2:63:3b:31:00:4b:e4:6f:41:0b:09:3f:a9:41:03:72: 22:91:23:76:d5:f9:b7:6f:07:9d:da:24:8f:90:37:2a:f3:08: 7c:e5:0a:b5:df:1b:f5:55:f8:da:a1:e4:ab:da:cd:a1:cf:0f: ff:0d:51:0b:91:d3:18:72:ac:33:77:8e:d2:f2:fa:2e:fa:bd: 43:31:d1:fa:d9:ac:45:88:77:27:f8:2d:c9:48:65:f0:d7:f6: ca:f6:76:f8:8a:85:1b:2f:5f:3c:d7:64:29:10:6d:b7:b0:26: e6:cb:9d:47:ec:81:30:6c:12:e6:ec:1e:3a:a2:73:4e:f5:30: 85:c5:ce:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjUwODA3MDUwODU5WhcNMjUwODE0MDUwODU5WjAYMRYwFAYD VQQDEw02ODk0MzRlYi0xZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgc/sdapyVhwveRkTkjwMcmksqT/j4UWi2Qi0m1y2D6pRyThrsfLJ07Gz8Mu VMb3QuAhmCgFqshRuK16WZMU54vo2wSMAL8rArQ/qG99q6+f3as2EzRMPNFDgiTH NH89AqprLkcv/ole4ykq73m5GWHT0CbQOaxFMwSrBloyfsApAsvWyr4GwdDmsCuE yXu3eHDV4MMXTv9PcDvzcGfM4tMP6PWdfpYZZtnMnkoDqKffDI0/lGpa+xkEB8EV ja90tfcdAq8wAR0ja93cnCmhE5RmG28uSsqp8FdtcZ/jFlbrpcYglv25DNwavuAG 81Z6/QIwE5E8sNp58KUPnPvTFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPChtXvJ /xmULYDBC//BWuGnhv/WMB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Bo0IMs1x7TkcxtpZHA7452RrVKjhwAJgW7CtRy+rnl26rrDkfq73 iva+ZRZXM56bq4YNJhqnkCGJluyHFymzvQ6eseNepK6YnbaAkCJFeMCwCHa/RayI QqmjJus8DX7acJewsgiojffy+hNXD4v+tEI6QIlEwT2kuX3fQG/QQsJjOzEAS+Rv QQsJP6lBA3IikSN21fm3bwed2iSPkDcq8wh85Qq13xv1VfjaoeSr2s2hzw//DVEL kdMYcqwzd47S8vou+r1DMdH62axFiHcn+C3JSGXw1/bK9nb4ioUbL18812QpEG23 sCbmy51H7IEwbBLm7B46onNO9TCFxc7J -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:23 2025 by rpki-client