$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: wSh3WePsSNsSGEzIMInUS6HdhLytfM/U3lj37mc3ZS8= Subject key identifier: 24:D0:83:9B:30:3D:A7:23:DD:49:BB:FB:C7:F1:31:53:07:19:FD:8E Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2D85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2D6A Signing time: Sat 14 Jun 2025 15:29:21 +0000 Manifest this update: Sat 14 Jun 2025 15:29:20 +0000 Manifest next update: Sat 21 Jun 2025 15:29:20 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: 1OjsMyecUd/1CH2ukDvNcfF/t7dxMruPPi7Dhkksg10=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: qYH+0NoYqUVH/kICTwmC5FSWgYMcanxVuKqTuwnMQdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11653 (0x2d85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Jun 14 15:29:20 2025 GMT Not After : Jun 21 15:29:20 2025 GMT Subject: CN=684d9550-cb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:4e:ad:5c:33:c2:90:31:99:4c:1f:ef:0e: dc:06:e4:71:b4:b9:9f:ff:5c:92:07:09:a2:ab:6d: ea:c5:c0:3d:31:22:73:21:0d:9a:cd:85:7c:2b:1d: 91:9e:db:25:26:11:e2:39:86:b9:5f:e7:42:44:1f: 99:42:5d:c4:10:20:16:f5:df:90:e3:28:18:50:06: f2:48:d3:a6:19:ba:82:fd:65:ba:84:44:de:a7:03: 9e:31:dc:3f:90:86:e0:69:87:da:20:02:94:bd:68: fd:65:f9:ae:1c:13:73:35:75:a2:fc:bf:12:a7:15: 9e:c2:5c:98:c1:05:b4:16:93:72:15:c8:93:56:4e: 57:39:1a:3f:5e:41:3b:87:dd:3a:04:23:02:06:90: 1b:23:88:02:29:6b:8e:51:ab:96:ef:7b:33:6b:e6: a6:72:2c:06:b5:ac:25:76:36:f3:25:35:fd:b4:47: 2e:0d:ef:5c:a4:2b:fc:03:77:c1:9f:24:ef:25:ee: cb:bd:e5:12:11:17:f3:b8:2f:7c:8a:7e:f4:4e:c3: 4d:1e:62:28:4f:e7:b4:65:aa:12:de:14:71:5d:e8: f7:4b:9e:35:e7:da:ce:cc:59:eb:0b:59:0f:cc:5e: 18:99:16:52:6f:84:22:3c:7d:ea:0c:d9:20:79:3f: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D0:83:9B:30:3D:A7:23:DD:49:BB:FB:C7:F1:31:53:07:19:FD:8E X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6d:62:fb:8d:f1:64:40:3a:9c:e3:3d:ae:c1:0f:36:bc:86: 7e:81:e0:2b:08:e3:fb:b0:3c:b5:25:b5:56:ea:6c:df:15:01: 3c:f9:2d:cc:55:8b:7a:82:be:05:ee:71:8d:71:36:c5:fc:d8: 4a:20:6a:f5:f4:26:d9:12:35:c1:cb:cf:b1:d7:99:f6:60:df: 71:c8:ca:c3:0f:f6:e4:8b:41:29:86:30:c9:99:cc:29:27:79: 05:40:9a:a0:20:15:8e:67:23:db:7c:8e:52:70:16:16:45:72: c6:a4:97:f1:c9:7a:7d:6e:8a:0a:a9:90:e5:bd:e9:13:70:20: a2:cb:99:b5:fe:0c:4b:3f:04:df:03:b3:76:e6:6a:2a:42:dd: 23:2f:9a:d2:ae:a5:4d:2e:d9:4d:c8:1d:9c:24:20:86:b3:6e: 7a:54:51:7e:8c:65:95:8c:35:58:6f:ff:cd:c9:e7:e4:b8:20: e8:36:ed:41:d0:ab:7a:03:75:00:12:9b:03:67:a3:04:f2:45: a9:64:c4:a1:75:7a:f7:35:5a:66:36:da:1a:bf:18:c8:e2:62: 3d:21:8a:28:7d:43:d5:c5:0a:c1:2c:b9:ed:09:67:d2:a1:84: cf:dd:a1:09:9a:12:32:b4:aa:f7:70:93:c1:95:e1:8a:b9:f5: 58:40:29:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUwNjE0MTUyOTIwWhcNMjUwNjIxMTUyOTIwWjAYMRYwFAYD VQQDEw02ODRkOTU1MC1jYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZZOrVwzwpAxmUwf7w7cBuRxtLmf/1ySBwmiq23qxcA9MSJzIQ2azYV8Kx2R ntslJhHiOYa5X+dCRB+ZQl3EECAW9d+Q4ygYUAbySNOmGbqC/WW6hETepwOeMdw/ kIbgaYfaIAKUvWj9ZfmuHBNzNXWi/L8SpxWewlyYwQW0FpNyFciTVk5XORo/XkE7 h906BCMCBpAbI4gCKWuOUauW73sza+amciwGtawldjbzJTX9tEcuDe9cpCv8A3fB nyTvJe7LveUSERfzuC98in70TsNNHmIoT+e0ZaoS3hRxXej3S54159rOzFnrC1kP zF4YmRZSb4QiPH3qDNkgeT//+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTQg5sw Pacj3Um7+8fxMVMHGf2OMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFbWL7jfFkQDqc4z2uwQ82vIZ+geArCOP7sDy1JbVW6mzfFQE8+S3M VYt6gr4F7nGNcTbF/NhKIGr19CbZEjXBy8+x15n2YN9xyMrDD/bki0EphjDJmcwp J3kFQJqgIBWOZyPbfI5ScBYWRXLGpJfxyXp9booKqZDlvekTcCCiy5m1/gxLPwTf A7N25moqQt0jL5rSrqVNLtlNyB2cJCCGs256VFF+jGWVjDVYb//NyefkuCDoNu1B 0Kt6A3UAEpsDZ6ME8kWpZMShdXr3NVpmNtoavxjI4mI9IYoofUPVxQrBLLntCWfS oYTP3aEJmhIytKr3cJPBleGKufVYQCnU -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:36 2025 by rpki-client