$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: J3Y1LlXvP7KOwWZoKF+F0lepk0njGd29EbaH0U7lDaU= Subject key identifier: 92:F8:34:51:23:D3:DF:57:19:AE:F9:50:51:8D:97:89:7A:3F:77:A2 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2DA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2D86 Signing time: Fri 08 Aug 2025 15:33:43 +0000 Manifest this update: Fri 08 Aug 2025 15:33:42 +0000 Manifest next update: Fri 15 Aug 2025 15:33:42 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: UxMtlLVrYQfuZlMS5uhIKLMzBFtc+eRyykKNYH0Er1E=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: qYH+0NoYqUVH/kICTwmC5FSWgYMcanxVuKqTuwnMQdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11681 (0x2da1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Aug 8 15:33:42 2025 GMT Not After : Aug 15 15:33:42 2025 GMT Subject: CN=689618d6-a083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:72:c8:3b:cf:0b:b3:d3:35:90:25:4b:20: 53:88:4a:7d:0b:42:c2:93:22:2d:95:b1:00:44:5d: 2b:8a:6a:d6:65:ab:65:57:29:cc:f3:71:39:8e:fe: c5:61:f2:ff:b8:27:02:12:36:9b:5a:d0:d4:28:dd: 23:76:08:4d:68:61:a5:a1:69:f0:47:4c:0a:0a:28: 0c:64:47:2d:86:15:b7:9c:a1:c5:ed:2a:5b:31:34: 1f:39:2a:8a:53:58:3a:96:bc:9d:1a:28:ed:33:66: 44:77:8a:e7:56:f9:c0:58:c5:79:ac:65:8e:a5:53: 4c:d7:11:ef:26:f1:fd:d0:57:a2:ef:91:09:27:41: ef:75:33:c7:1e:28:f6:6c:c8:b0:3b:5a:3d:18:e4: 15:87:bf:17:54:ea:a2:b1:0d:63:d8:09:50:2d:97: 51:1f:3f:08:2a:2a:2a:d5:c2:58:0f:8e:dc:5b:c5: fe:b9:75:76:9e:d1:9b:f5:ac:3a:7f:e0:87:bb:36: 3d:eb:0f:ec:5d:3e:04:fb:ef:b1:65:3d:52:9b:f1: ee:bb:ff:9c:e2:38:bd:c5:14:4b:38:91:92:32:89: 8d:fc:84:a9:a0:2a:b5:7a:c0:87:79:c8:55:33:a7: ae:ba:e5:7c:5f:29:b7:89:e4:bb:18:9f:f4:32:23: 7e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F8:34:51:23:D3:DF:57:19:AE:F9:50:51:8D:97:89:7A:3F:77:A2 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ef:8e:0a:1e:84:f2:21:66:54:84:02:ce:1a:23:9b:d2:40: 5d:2e:bb:36:00:85:8e:31:c5:a8:de:ab:9c:43:ac:fe:f3:6c: d0:d4:af:6b:45:70:70:e5:ec:0a:3e:a8:3a:64:55:b9:aa:59: 2b:23:bb:0f:f6:c0:ec:83:12:f4:81:e1:eb:9f:18:19:36:aa: ca:d9:9b:da:87:b9:bc:2a:ac:3f:94:c7:b2:f5:97:53:4e:81: 0d:b2:e6:a7:0c:37:68:a7:2a:e0:5d:2c:fb:8d:f2:bb:d9:4e: 45:2d:fd:04:8f:fb:c4:94:01:26:a6:51:99:00:fe:3d:14:6f: 90:0a:d6:9c:6b:04:4b:66:41:94:58:cb:6d:2a:d9:ec:49:2a: 62:aa:14:2b:a8:bb:e3:ff:c8:eb:18:16:e7:ee:49:c1:22:92: 82:a4:62:f5:1d:e3:d0:70:ec:4c:a7:72:ad:12:01:34:cb:b2: 2c:9b:c2:37:dc:cd:cc:ba:ce:4e:99:e2:9f:87:06:c9:f0:4e: 94:2d:0f:5d:b2:a5:e9:36:d1:02:e7:95:f8:83:a2:f5:dd:49: 7f:c5:10:7e:84:8b:35:0f:e3:b6:8c:dd:e1:aa:0c:2b:d0:45: ed:5d:a0:71:e3:3f:33:68:74:0f:3f:0b:63:8e:97:ca:5f:3d: 34:4e:0a:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUwODA4MTUzMzQyWhcNMjUwODE1MTUzMzQyWjAYMRYwFAYD VQQDEw02ODk2MThkNi1hMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszFyyDvPC7PTNZAlSyBTiEp9C0LCkyItlbEARF0rimrWZatlVynM83E5jv7F YfL/uCcCEjabWtDUKN0jdghNaGGloWnwR0wKCigMZEcthhW3nKHF7SpbMTQfOSqK U1g6lrydGijtM2ZEd4rnVvnAWMV5rGWOpVNM1xHvJvH90Fei75EJJ0HvdTPHHij2 bMiwO1o9GOQVh78XVOqisQ1j2AlQLZdRHz8IKioq1cJYD47cW8X+uXV2ntGb9aw6 f+CHuzY96w/sXT4E+++xZT1Sm/Huu/+c4ji9xRRLOJGSMomN/ISpoCq1esCHechV M6euuuV8Xym3ieS7GJ/0MiN+IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL4NFEj 099XGa75UFGNl4l6P3eiMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx744KHoTyIWZUhALOGiOb0kBdLrs2AIWOMcWo3qucQ6z+82zQ1K9r RXBw5ewKPqg6ZFW5qlkrI7sP9sDsgxL0geHrnxgZNqrK2Zvah7m8Kqw/lMey9ZdT ToENsuanDDdopyrgXSz7jfK72U5FLf0Ej/vElAEmplGZAP49FG+QCtacawRLZkGU WMttKtnsSSpiqhQrqLvj/8jrGBbn7knBIpKCpGL1HePQcOxMp3KtEgE0y7Ism8I3 3M3Mus5OmeKfhwbJ8E6ULQ9dsqXpNtEC55X4g6L13Ul/xRB+hIs1D+O2jN3hqgwr 0EXtXaBx4z8zaHQPPwtjjpfKXz00Tgoz -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:48 2025 by rpki-client