$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: e5oNoxT3MuJ/uLsMTTQnkDQv14fSoVFG5rkaSauVrZ8= Subject key identifier: C6:5F:C6:CA:D9:51:AD:E2:8B:D4:15:D8:58:F9:D8:E0:46:9D:B3:01 Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: A1 Signing time: Sat 09 Aug 2025 06:40:45 +0000 Manifest this update: Sat 09 Aug 2025 06:40:44 +0000 Manifest next update: Sat 16 Aug 2025 06:40:44 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: o3zk9S/+TAA6/aOokNZX5P6NQase00dFLoKRtr8gOL0=) 2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: Aug 9 06:40:44 2025 GMT Not After : Aug 16 06:40:44 2025 GMT Subject: CN=6896ed6d-7cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:59:a9:3a:75:49:e1:8f:a1:20:f6:6f:36:32: 5a:ae:ef:ab:11:61:0d:63:76:73:33:d8:65:d9:01: 5d:69:f8:2b:01:ce:98:a6:94:2c:ee:6b:48:c0:5c: e0:ab:37:87:62:81:17:92:24:ba:bc:d8:d0:4b:1e: f3:f1:0c:10:35:ff:46:19:d9:64:21:7b:ef:5d:93: 63:0d:e8:81:f8:7c:6e:d9:f5:59:cc:af:71:bf:41: d7:86:9d:ea:43:b8:d2:c5:bb:d2:33:67:58:da:08: d0:b3:0d:14:2b:08:eb:d9:15:fd:40:60:2e:45:29: 5e:57:8e:9b:49:04:0c:9c:d6:6b:af:ba:d8:67:0f: 83:43:0b:6c:ea:4a:0e:c2:f8:df:59:e2:bf:18:1c: 93:8c:69:db:00:84:9c:6c:b0:46:15:6b:83:dc:e0: 61:06:eb:aa:68:27:af:4b:5d:09:44:52:ae:95:bf: bc:9a:cd:5a:5a:cd:7a:5b:b7:ea:7f:d0:be:66:25: 5a:aa:8d:f3:f7:bb:d5:d7:a1:14:76:3c:8e:d5:cf: b3:8a:13:ab:5f:cb:1e:53:4e:0d:07:31:d1:db:7a: 54:9f:a2:9c:21:3d:60:f9:bd:ad:24:08:8c:76:ec: 46:4c:5e:46:8e:01:22:bc:8a:7f:69:da:f2:cd:59: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5F:C6:CA:D9:51:AD:E2:8B:D4:15:D8:58:F9:D8:E0:46:9D:B3:01 X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:59:44:d7:f2:90:a4:6d:f0:7a:0d:22:68:1c:38:3a:9f: c6:a8:92:ae:4a:f7:54:40:b4:a4:74:a9:b2:b9:d8:0e:7c:c9: 5f:80:fd:f1:cb:85:2b:ef:60:5b:c4:5e:7d:a6:6c:bd:a9:b3: ea:18:bd:ac:5d:0d:be:29:0b:be:cb:c3:37:15:d0:d7:64:92: 1e:e2:c9:13:34:3b:2f:7d:df:73:4c:70:97:87:8f:86:0b:cd: 06:49:f9:99:8c:5e:a7:a5:86:10:f5:da:63:df:b2:80:e0:72: f8:42:e5:08:52:b4:25:19:50:30:d9:97:35:56:35:9f:d9:f2: 6c:bb:62:42:6a:9e:d4:1c:9d:84:a5:6d:b9:66:08:4b:fc:9a: 64:8f:dd:1e:cf:b6:ca:1f:e2:33:84:ff:98:eb:9f:31:c6:9d: ff:ec:c2:14:88:e2:8a:bd:a5:13:40:95:71:09:41:6b:ef:0f: 46:63:30:88:f2:3b:b3:65:f9:43:4a:24:11:ee:05:d5:15:c9: fa:f9:cd:09:a1:dd:ff:ac:54:de:a9:93:e3:b0:dc:4d:32:68: ee:a4:81:09:bc:2c:79:87:bb:99:69:a5:1c:5c:be:b9:f7:5c: b3:3b:2a:38:38:db:b1:6f:c7:7c:df:ab:09:b1:4a:02:7a:41: 76:39:92:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKERDNkEyMzc0QzUxNEU4Q0Y0QUM3NjRBMEYzQzg0NkYw OUIzM0QyODIwHhcNMjUwODA5MDY0MDQ0WhcNMjUwODE2MDY0MDQ0WjAYMRYwFAYD VQQDEw02ODk2ZWQ2ZC03Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FmpOnVJ4Y+hIPZvNjJaru+rEWENY3ZzM9hl2QFdafgrAc6YppQs7mtIwFzg qzeHYoEXkiS6vNjQSx7z8QwQNf9GGdlkIXvvXZNjDeiB+Hxu2fVZzK9xv0HXhp3q Q7jSxbvSM2dY2gjQsw0UKwjr2RX9QGAuRSleV46bSQQMnNZrr7rYZw+DQwts6koO wvjfWeK/GByTjGnbAIScbLBGFWuD3OBhBuuqaCevS10JRFKulb+8ms1aWs16W7fq f9C+ZiVaqo3z97vV16EUdjyO1c+zihOrX8seU04NBzHR23pUn6KcIT1g+b2tJAiM duxGTF5GjgEivIp/adryzVk8owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZfxsrZ Ua3ii9QV2Fj52OBGnbMBMB8GA1UdIwQYMBaAFNxqI3TFFOjPSsdkoPPIRvCbM9KC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS82NDIzQkUwNjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi8zR29qZE1VVTZNOUt4MlNnODhoRzhKc3ow b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS82NDIzQkUwNjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi8zR29qZE1VVTZN OUt4MlNnODhoRzhKc3owb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2llE1/KQpG3weg0iaBw4Op/GqJKuSvdUQLSkdKmyudgOfMlfgP3x y4Ur72BbxF59pmy9qbPqGL2sXQ2+KQu+y8M3FdDXZJIe4skTNDsvfd9zTHCXh4+G C80GSfmZjF6npYYQ9dpj37KA4HL4QuUIUrQlGVAw2Zc1VjWf2fJsu2JCap7UHJ2E pW25ZghL/Jpkj90ez7bKH+IzhP+Y658xxp3/7MIUiOKKvaUTQJVxCUFr7w9GYzCI 8juzZflDSiQR7gXVFcn6+c0Jod3/rFTeqZPjsNxNMmjupIEJvCx5h7uZaaUcXL65 91yzOyo4ONuxb8d836sJsUoCekF2OZIr -----END CERTIFICATE-----Generated at Sat Aug 9 14:22:18 2025 by rpki-client