$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: pTcSVG4LmmQvKaSsvGIX7z2M2VVg1wbjAWaPwA9tEeU= Subject key identifier: A7:88:E1:ED:64:37:D5:19:02:E5:78:51:79:8A:43:85:34:19:78:EF Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2CD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2CC0 Signing time: Wed 06 Aug 2025 15:34:10 +0000 Manifest this update: Wed 06 Aug 2025 15:34:10 +0000 Manifest next update: Wed 13 Aug 2025 15:34:10 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: vrZ4shuDhMBno1LuYTN3GDRwK/EvqQ6RgWlTswI4ohI=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: R9f6Z3Uevp4d36wvfS3ESJSWBBwm4wuAIByOXNTGRgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11478 (0x2cd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Aug 6 15:34:10 2025 GMT Not After : Aug 13 15:34:10 2025 GMT Subject: CN=689375f2-1c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:aa:24:e3:69:d0:17:6b:b3:8c:bf:12:46: 54:6d:d9:44:4c:93:97:d3:d3:86:7a:74:99:7f:ad: 49:3c:17:a1:87:9b:5f:91:f9:19:17:91:21:98:32: 99:4b:8b:a1:38:72:91:fe:50:1b:da:0b:6d:47:61: 78:47:11:e9:7d:37:ec:d2:f6:34:46:e5:14:54:c7: 32:ad:2e:24:22:53:ce:5f:f4:ee:9e:e4:ed:30:e3: f1:c2:d7:5f:96:74:01:27:3d:0e:84:92:cb:30:02: 4d:76:11:dd:5a:e8:14:aa:1c:0d:be:d0:a9:b4:cb: d8:8d:63:03:f7:d8:d1:da:ce:8b:49:85:96:57:16: c7:14:7d:fc:4e:a6:b6:36:59:b1:ff:22:f0:88:c5: d9:af:37:ed:d2:6e:9b:e8:13:d2:a2:ab:46:52:e3: bf:46:6f:4a:e1:d5:78:4a:6f:74:94:43:39:1e:92: 7f:46:6c:0d:a4:d7:dd:72:20:f7:43:8e:ea:74:e7: 98:82:44:2c:af:af:e0:68:96:b1:17:65:bb:45:21: 1f:ba:33:99:b5:44:53:76:c8:a6:26:3c:68:90:7b: 7a:ac:b7:65:50:78:87:0e:b1:df:14:b3:78:3a:15: 21:f2:07:24:93:13:9c:ab:ff:10:73:b4:a3:5d:67: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:88:E1:ED:64:37:D5:19:02:E5:78:51:79:8A:43:85:34:19:78:EF X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b1:f6:30:3f:26:64:85:b9:86:45:41:c2:7a:ee:7d:c6:71: c3:6b:c1:b4:a7:79:0e:4a:6e:ee:95:2b:a3:e2:5a:71:1c:ea: 06:56:70:c4:ed:96:c1:8b:26:17:cf:94:0c:5d:a3:97:c6:de: 6c:96:d6:23:71:35:66:08:0d:d0:3d:64:dd:16:a3:d8:6e:20: 40:8e:2c:31:c6:00:c6:44:1d:e4:26:6d:cf:ab:74:97:0d:c0: d1:0e:33:a8:e2:45:19:c5:80:7f:cc:72:aa:5a:e3:5a:4b:24: 16:1e:26:cb:13:19:9c:aa:7e:af:16:be:56:aa:2a:d9:aa:ee: c6:95:aa:d1:e6:c8:88:2c:45:a8:c9:a8:26:67:a2:b6:83:30: e4:27:8f:df:e9:02:3e:1a:5a:d6:2a:a8:d7:de:c7:87:73:7d: 15:4b:3e:e8:13:06:6d:26:0b:64:7b:b9:57:a2:09:f7:3f:d1: 03:e7:19:21:31:e1:d0:b4:79:49:4e:f5:94:cc:e3:29:80:7a: f4:10:62:34:b5:9d:3d:b9:ca:62:81:e7:68:a1:09:ca:62:2b: dc:17:34:f4:5a:d8:11:7a:4e:d6:f1:72:72:5a:77:60:69:9f: b9:ef:2b:3c:19:72:8d:22:00:73:1b:d7:a3:1d:ca:e1:5c:33: c0:4e:0e:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUwODA2MTUzNDEwWhcNMjUwODEzMTUzNDEwWjAYMRYwFAYD VQQDEw02ODkzNzVmMi0xYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4aqJONp0Bdrs4y/EkZUbdlETJOX09OGenSZf61JPBehh5tfkfkZF5EhmDKZ S4uhOHKR/lAb2gttR2F4RxHpfTfs0vY0RuUUVMcyrS4kIlPOX/TunuTtMOPxwtdf lnQBJz0OhJLLMAJNdhHdWugUqhwNvtCptMvYjWMD99jR2s6LSYWWVxbHFH38Tqa2 Nlmx/yLwiMXZrzft0m6b6BPSoqtGUuO/Rm9K4dV4Sm90lEM5HpJ/RmwNpNfdciD3 Q47qdOeYgkQsr6/gaJaxF2W7RSEfujOZtURTdsimJjxokHt6rLdlUHiHDrHfFLN4 OhUh8gckkxOcq/8Qc7SjXWcEeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeI4e1k N9UZAuV4UXmKQ4U0GXjvMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTsfYwPyZkhbmGRUHCeu59xnHDa8G0p3kOSm7ulSuj4lpxHOoGVnDE 7ZbBiyYXz5QMXaOXxt5sltYjcTVmCA3QPWTdFqPYbiBAjiwxxgDGRB3kJm3Pq3SX DcDRDjOo4kUZxYB/zHKqWuNaSyQWHibLExmcqn6vFr5WqirZqu7GlarR5siILEWo yagmZ6K2gzDkJ4/f6QI+GlrWKqjX3seHc30VSz7oEwZtJgtke7lXogn3P9ED5xkh MeHQtHlJTvWUzOMpgHr0EGI0tZ09ucpigedooQnKYivcFzT0WtgRek7W8XJyWndg aZ+57ys8GXKNIgBzG9ejHcrhXDPATg7b -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:48 2025 by rpki-client