$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: WKmY6d80zHxg4+fTJ6zyy9dy1G6gwCw+iXgrHnBYOx4= Subject key identifier: 69:69:45:BC:7F:46:DD:9B:7D:B5:91:B9:6B:01:5B:18:85:4B:63:CF Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 240D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 23FC Signing time: Tue 12 Aug 2025 15:52:44 +0000 Manifest this update: Tue 12 Aug 2025 15:52:44 +0000 Manifest next update: Tue 19 Aug 2025 15:52:44 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: PsLsrOJ3ZCdnvqarbFhmV3F5UAPfy70YSUTh34Gpz7Y=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9229 (0x240d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Aug 12 15:52:44 2025 GMT Not After : Aug 19 15:52:44 2025 GMT Subject: CN=689b634c-f845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:4c:02:d2:9b:9e:70:6e:7d:f9:e3:a3:e5: 76:3d:1d:64:6b:97:50:f1:3f:c9:1a:1f:ac:14:88: 14:4d:85:f5:ac:73:51:6c:2f:2b:fd:e8:01:50:1e: 1b:b7:03:0e:35:a0:59:72:f0:0f:d2:28:bb:9b:05: 63:8d:a8:b2:bf:bd:90:a5:21:bf:7a:f5:8a:dd:1f: fb:31:0f:20:95:bc:e0:10:94:a5:95:d4:57:18:a3: 2b:8e:8d:58:b6:f6:fd:a6:a7:5c:45:b4:79:be:19: 35:a2:ed:0a:7d:ca:59:bc:fb:6f:59:10:0e:a4:39: 12:2f:e7:b1:cd:81:02:18:67:68:93:6a:54:14:e4: c8:37:fe:24:1a:da:9c:47:b3:db:03:71:c9:e9:b3: 5e:be:93:cb:54:de:a3:18:ad:dd:d7:4e:61:ad:e6: 85:37:32:a6:bd:88:09:55:a5:55:8a:8e:21:40:c3: 1c:c6:fb:85:0d:ac:ff:c5:01:ce:15:54:75:17:8d: be:d5:a2:39:7e:a6:d3:e4:ca:b6:2a:fb:7c:97:2c: b8:f0:b3:0d:f2:18:c1:16:12:4d:14:74:ec:8c:4f: 2a:a7:4c:92:ac:2e:4b:a9:c8:2d:74:6b:31:36:03: 9a:df:5b:bf:f1:19:b8:b8:6a:1b:c0:2c:56:40:f5: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:45:BC:7F:46:DD:9B:7D:B5:91:B9:6B:01:5B:18:85:4B:63:CF X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:eb:91:60:00:9a:ce:10:0a:10:1f:fe:b8:7b:ff:c2:f3:5b: dc:ea:0b:89:11:b3:80:41:c4:b0:f8:c8:ec:42:79:b6:df:ca: 80:91:30:7a:67:95:cb:e8:43:89:90:00:f8:77:a5:f7:de:5a: 33:f2:25:8b:be:82:f9:ae:da:6a:ff:5b:54:6a:07:a3:74:d1: 67:5d:bb:e4:44:f4:0a:fe:52:bc:e5:64:b8:21:09:af:be:ab: df:4e:70:a8:89:a1:6c:42:fd:06:4f:e9:d9:63:92:d2:c9:30: d6:87:69:d5:84:1b:9c:86:56:a9:06:cf:44:a0:1a:0d:82:dd: 13:3b:5d:ad:86:15:dc:c4:c1:97:19:63:d6:7e:f9:9a:e3:bf: d1:6d:7a:11:24:9c:0c:3a:d8:9c:6c:60:7b:70:f0:6a:a0:54: 16:6b:7a:4d:ad:1f:9c:1d:a4:3a:a2:bf:cc:2b:a9:fe:1d:8b: a6:71:61:3f:07:c1:6e:c4:ac:72:05:79:cd:c2:86:b9:b8:ef: 5d:cc:b3:c2:b9:17:9e:bb:5e:13:97:f9:5c:59:ac:36:b5:00: dd:cf:0d:a2:05:84:81:c6:5d:5b:49:04:97:87:1e:52:37:1d: 12:f2:2c:e4:ca:ed:6c:9e:b4:68:76:11:b4:0b:ca:87:b6:8f: 9a:df:55:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjUwODEyMTU1MjQ0WhcNMjUwODE5MTU1MjQ0WjAYMRYwFAYD VQQDEw02ODliNjM0Yy1mODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLJMAtKbnnBuffnjo+V2PR1ka5dQ8T/JGh+sFIgUTYX1rHNRbC8r/egBUB4b twMONaBZcvAP0ii7mwVjjaiyv72QpSG/evWK3R/7MQ8glbzgEJSlldRXGKMrjo1Y tvb9pqdcRbR5vhk1ou0KfcpZvPtvWRAOpDkSL+exzYECGGdok2pUFOTIN/4kGtqc R7PbA3HJ6bNevpPLVN6jGK3d105hreaFNzKmvYgJVaVVio4hQMMcxvuFDaz/xQHO FVR1F42+1aI5fqbT5Mq2Kvt8lyy48LMN8hjBFhJNFHTsjE8qp0ySrC5LqcgtdGsx NgOa31u/8Rm4uGobwCxWQPWWsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlpRbx/ Rt2bfbWRuWsBWxiFS2PPMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDa65FgAJrOEAoQH/64e//C81vc6guJEbOAQcSw+MjsQnm238qAkTB6 Z5XL6EOJkAD4d6X33loz8iWLvoL5rtpq/1tUagejdNFnXbvkRPQK/lK85WS4IQmv vqvfTnCoiaFsQv0GT+nZY5LSyTDWh2nVhBuchlapBs9EoBoNgt0TO12thhXcxMGX GWPWfvma47/RbXoRJJwMOticbGB7cPBqoFQWa3pNrR+cHaQ6or/MK6n+HYumcWE/ B8FuxKxyBXnNwoa5uO9dzLPCuReeu14Tl/lcWaw2tQDdzw2iBYSBxl1bSQSXhx5S Nx0S8izkyu1snrRodhG0C8qHto+a31WR -----END CERTIFICATE-----Generated at Wed Aug 13 05:33:48 2025 by rpki-client