$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: S4TS6sr55qBniGWyAdV3XbxNXNrKNXRe91KoriWzxJo= Subject key identifier: B3:F7:83:F7:98:BB:59:85:12:58:D8:3A:43:91:DA:41:B8:82:4E:2C Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 081B Signing time: Fri 08 Aug 2025 21:13:51 +0000 Manifest this update: Fri 08 Aug 2025 21:13:50 +0000 Manifest next update: Fri 15 Aug 2025 21:13:50 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: LwPU9e1UWiipgNb0iI9o+X9nPjLvWAI9q4h9BWAy+lY=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Aug 8 21:13:50 2025 GMT Not After : Aug 15 21:13:50 2025 GMT Subject: CN=6896688e-c5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:83:dc:2f:10:e8:fb:ec:f3:0f:c3:cc:17: ec:bb:63:4f:9e:92:6e:61:ab:c5:06:0a:92:1c:d8: c1:94:1d:00:28:11:ea:b5:c5:04:df:46:1d:13:19: ed:3f:ce:46:45:5a:91:51:d1:d7:3d:b6:36:fe:32: 09:2a:e5:a1:cc:06:14:20:28:9c:f9:a6:6d:5d:3e: cb:52:1b:2a:53:6b:47:7b:3e:2d:ed:3b:52:8a:bd: 00:cf:6f:90:0e:36:ea:f7:a4:18:de:1f:1d:56:dc: 6b:90:5c:fa:17:66:1e:fa:69:79:d8:2a:14:d4:e4: 48:21:84:a0:14:29:bf:39:2c:95:39:42:15:af:06: 0f:05:b6:43:f4:57:0b:59:62:f0:25:eb:42:15:5b: 49:4f:fa:74:df:22:1f:20:20:fd:31:55:43:16:66: 92:0e:dd:c5:ab:46:29:35:25:36:9f:a5:f3:1b:d8: 9f:ec:0b:d7:9d:55:a0:4b:04:2e:76:25:2d:aa:eb: 5d:64:3b:65:d9:96:6b:9b:29:67:e4:c6:68:74:0e: 96:c5:02:d9:d1:0d:31:4a:48:0f:d0:ae:77:f7:b9: a3:1e:80:4d:28:97:24:ef:c4:21:75:5c:6f:19:08: 61:4b:ef:5c:6c:68:91:13:95:a1:29:88:cb:ec:95: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F7:83:F7:98:BB:59:85:12:58:D8:3A:43:91:DA:41:B8:82:4E:2C X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:71:c0:db:e8:b4:79:aa:20:c4:c1:a0:f1:1a:7f:b6:83:e3: 24:3f:c7:e1:d5:65:76:21:00:91:54:fe:cb:b7:b0:62:22:da: 09:8a:2d:64:9b:21:4d:03:4a:49:dd:3d:91:2c:20:36:2f:a4: 13:79:5f:60:b6:d4:46:ed:3d:0c:4a:fd:7a:2f:d6:b5:f7:03: e4:dd:89:ab:86:7a:a0:8d:e4:c1:a8:49:5a:c2:be:8c:76:63: 70:d8:b8:02:4a:ad:4a:d6:46:56:0f:25:b5:b5:15:ed:56:49: 0f:79:c4:3d:74:70:a0:5a:fc:bf:48:ff:7d:7f:b3:90:dd:fe: 5e:38:f0:41:67:51:83:51:fb:56:16:1f:d4:13:fb:99:56:b0: 1b:2a:63:ed:f0:4c:66:e7:9f:51:22:51:25:b7:94:19:13:0f: f2:16:47:d1:4a:fa:07:8b:f0:7a:e5:bb:a6:63:d2:06:91:6e: 9e:bc:4a:f0:a3:25:6d:18:a9:4c:95:b8:9f:f2:0a:bc:e4:ee: 33:d6:6c:8d:80:a8:55:0a:ac:cb:7d:d0:06:fc:f3:f4:2b:0b: b6:6d:de:05:0b:06:34:d1:c8:57:8b:64:7e:fd:02:93:92:68: a4:99:85:ea:81:c3:9c:8c:74:66:8d:f4:1c:47:2b:a8:16:50: 48:c9:f5:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjUwODA4MjExMzUwWhcNMjUwODE1MjExMzUwWjAYMRYwFAYD VQQDEw02ODk2Njg4ZS1jNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvayD3C8Q6Pvs8w/DzBfsu2NPnpJuYavFBgqSHNjBlB0AKBHqtcUE30YdExnt P85GRVqRUdHXPbY2/jIJKuWhzAYUICic+aZtXT7LUhsqU2tHez4t7TtSir0Az2+Q Djbq96QY3h8dVtxrkFz6F2Ye+ml52CoU1ORIIYSgFCm/OSyVOUIVrwYPBbZD9FcL WWLwJetCFVtJT/p03yIfICD9MVVDFmaSDt3Fq0YpNSU2n6XzG9if7AvXnVWgSwQu diUtqutdZDtl2ZZrmyln5MZodA6WxQLZ0Q0xSkgP0K5397mjHoBNKJck78QhdVxv GQhhS+9cbGiRE5WhKYjL7JVK7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP3g/eY u1mFEljYOkOR2kG4gk4sMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkccDb6LR5qiDEwaDxGn+2g+MkP8fh1WV2IQCRVP7Lt7BiItoJii1k myFNA0pJ3T2RLCA2L6QTeV9gttRG7T0MSv16L9a19wPk3YmrhnqgjeTBqElawr6M dmNw2LgCSq1K1kZWDyW1tRXtVkkPecQ9dHCgWvy/SP99f7OQ3f5eOPBBZ1GDUftW Fh/UE/uZVrAbKmPt8Exm559RIlElt5QZEw/yFkfRSvoHi/B65bumY9IGkW6evErw oyVtGKlMlbif8gq85O4z1myNgKhVCqzLfdAG/PP0Kwu2bd4FCwY00chXi2R+/QKT kmikmYXqgcOcjHRmjfQcRyuoFlBIyfVz -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:24 2025 by rpki-client