$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft File: M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json) Hash identifier: FTKXTTiTEixDKT8a+auFhYqRKL4nOm7gaGLM0HM0PrE= Subject key identifier: 61:AE:9E:B7:65:F7:60:69:C3:85:74:EB:71:8B:CC:53:53:92:74:56 Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0 Certificate issuer: /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft Manifest number: 9A Signing time: Thu 03 Jul 2025 06:31:15 +0000 Manifest this update: Thu 03 Jul 2025 06:31:15 +0000 Manifest next update: Thu 10 Jul 2025 06:31:15 +0000 Files and hashes: 1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: MA1Y+bwg6SMEmWF567D+gyQHy8zHrTOX9+2kSZIY61w=) 2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: Ur23uerjkF05UN2d4OV8Z6LvPx8JS26HE6YTaEzhleU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0 Validity Not Before: Jul 3 06:31:15 2025 GMT Not After : Jul 10 06:31:15 2025 GMT Subject: CN=686623b3-f9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:4b:e5:5a:58:d5:15:56:76:6b:4b:7a:e0: a4:41:e6:a1:15:22:48:43:04:ee:f6:53:22:d5:8d: da:37:c7:cd:69:21:3b:57:e2:38:fd:dd:47:5e:73: 53:b3:d6:39:ff:2c:36:60:d0:9b:e1:1d:ac:c7:5c: 77:86:dc:33:09:08:6b:f1:0b:6a:21:21:1a:4e:e0: cc:5e:87:7e:d7:d3:81:93:c8:7d:f3:3a:09:cb:3c: ba:d0:fe:8d:d6:0f:4a:65:a2:2d:68:6c:4d:2b:3b: 66:ae:cb:fe:0a:37:be:f4:4b:58:b5:48:39:63:e3: 9f:c5:f3:cb:de:2f:cc:bc:e9:e1:64:d3:cf:56:b4: a7:5a:2e:52:ff:68:39:bf:8f:96:a3:c1:d8:e0:fd: 0d:24:44:cb:0f:47:d3:52:1f:f8:b2:22:1b:a1:d3: be:fb:f2:03:1e:bc:6c:e4:e5:f0:a1:6c:ad:fe:8c: 9c:ba:b1:e5:34:0d:45:43:8c:5e:fd:2f:83:03:31: bb:a4:b4:8d:36:38:56:02:fb:00:5a:90:2e:b2:c6: 82:2f:3a:fc:20:24:ab:b7:bb:8a:34:80:5f:a3:ca: 10:6e:0d:e5:95:7c:2c:64:98:b0:f9:81:01:7d:4d: 37:52:04:39:86:51:0a:5b:61:14:31:6a:1e:03:e0: d8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AE:9E:B7:65:F7:60:69:C3:85:74:EB:71:8B:CC:53:53:92:74:56 X509v3 Authority Key Identifier: keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:2d:86:e8:3a:56:1a:46:1f:5b:40:2d:c4:da:ff:0c:dc:1f: 42:b8:ee:83:f5:79:3c:0f:53:09:8f:88:f0:81:b4:eb:e9:64: 22:6b:ef:38:02:a3:97:da:ac:18:04:0a:14:ee:c4:74:a7:1f: 80:09:11:68:cb:03:6d:af:bd:f5:ae:91:d3:db:84:e1:a2:b2: 5a:67:1c:0b:86:b5:68:6c:25:9a:c0:4f:94:c4:3a:ac:fc:e3: 70:e6:64:57:4c:bf:b3:f6:8d:e1:fe:2b:15:ac:ed:6d:8d:1e: 81:da:20:5c:d2:1c:fc:ea:d6:f3:d4:ee:ed:3f:4d:b0:80:c0: a8:32:f5:49:43:20:00:c3:44:e6:be:ea:90:69:0e:2c:e3:d8: 3b:ec:72:66:15:c5:34:70:ea:0c:c8:28:4c:74:23:ee:11:db: 6d:2b:bd:46:2f:24:35:49:06:ed:79:82:6b:19:c7:6f:70:d6: 4c:b4:9e:de:e3:0c:65:2a:cd:1d:e6:85:a0:a2:f8:86:6e:fc: ca:3c:ab:c0:92:16:b9:b4:68:70:75:37:e6:62:88:c7:72:4f: 29:5e:2b:a1:4d:af:fb:05:c2:7d:7f:9d:4d:9e:f2:63:91:03: f3:b8:78:af:ac:43:e4:22:a1:ff:6d:6a:bb:c4:ab:cb:97:dc: 39:bf:cc:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU2MjAxMTAvBgNVBAUTKDMzNzVBOTYxMzRDNTczMzFBRjU0REQ3MTRFRDM2M0RB QjMxQjZCRDAwHhcNMjUwNzAzMDYzMTE1WhcNMjUwNzEwMDYzMTE1WjAYMRYwFAYD VQQDEw02ODY2MjNiMy1mOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2FL5VpY1RVWdmtLeuCkQeahFSJIQwTu9lMi1Y3aN8fNaSE7V+I4/d1HXnNT s9Y5/yw2YNCb4R2sx1x3htwzCQhr8QtqISEaTuDMXod+19OBk8h98zoJyzy60P6N 1g9KZaItaGxNKztmrsv+Cje+9EtYtUg5Y+OfxfPL3i/MvOnhZNPPVrSnWi5S/2g5 v4+Wo8HY4P0NJETLD0fTUh/4siIbodO++/IDHrxs5OXwoWyt/oycurHlNA1FQ4xe /S+DAzG7pLSNNjhWAvsAWpAussaCLzr8ICSrt7uKNIBfo8oQbg3llXwsZJiw+YEB fU03UgQ5hlEKW2EUMWoeA+DYjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGunrdl 92Bpw4V063GLzFNTknRWMB8GA1UdIwQYMBaAFDN1qWE0xXMxr1TdcU7TY9qzG2vQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTYyMC8xNEEzNzY0NDZC QTkxMUVGQTNCMzQ2ODRDNEY5QUUwMi9NM1dwWVRURmN6R3ZWTjF4VHROajJyTWJh OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zV3BZVFRGY3pHdlZOMXhUdE5qMnJNYmE5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTYyMC8xNEEzNzY0NDZCQTkxMUVGQTNCMzQ2ODRDNEY5QUUwMi9NM1dwWVRURmN6 R3ZWTjF4VHROajJyTWJhOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnLYboOlYaRh9bQC3E2v8M3B9CuO6D9Xk8D1MJj4jwgbTr6WQia+84 AqOX2qwYBAoU7sR0px+ACRFoywNtr731rpHT24ThorJaZxwLhrVobCWawE+UxDqs /ONw5mRXTL+z9o3h/isVrO1tjR6B2iBc0hz86tbz1O7tP02wgMCoMvVJQyAAw0Tm vuqQaQ4s49g77HJmFcU0cOoMyChMdCPuEdttK71GLyQ1SQbteYJrGcdvcNZMtJ7e 4wxlKs0d5oWgoviGbvzKPKvAkha5tGhwdTfmYojHck8pXiuhTa/7BcJ9f51NnvJj kQPzuHivrEPkIqH/bWq7xKvLl9w5v8wk -----END CERTIFICATE-----Generated at Thu Jul 3 20:51:53 2025 by rpki-client