$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: 4t8keO+JIgU3KhUn7JJSWczwKL9O2QKifhGdSC2USzk= Subject key identifier: 7C:DC:93:DC:5F:EE:99:00:90:D8:B7:08:52:EA:7F:ED:97:4F:04:2A Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 25A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2571 Signing time: Fri 22 Aug 2025 14:20:51 +0000 Manifest this update: Fri 22 Aug 2025 14:20:50 +0000 Manifest next update: Fri 29 Aug 2025 14:20:50 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: Aq4JorOZiZV0ecIVGDjpBTzdZfhb+yqTkv5FNhtAp0c=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9639 (0x25a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Aug 22 14:20:50 2025 GMT Not After : Aug 29 14:20:50 2025 GMT Subject: CN=68a87cc2-7b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:3d:f4:cc:ba:d6:a7:da:38:0e:16:17:32: d9:82:72:76:d9:63:17:f4:15:e7:12:81:bb:80:30: 0d:ad:f7:68:2e:b9:9d:a5:f5:67:31:36:0b:1a:fe: 03:8b:e7:b2:68:5a:82:cb:29:35:1e:52:d8:ff:3d: a4:c4:06:fd:0b:8d:ba:3f:3d:4b:3e:b1:2c:c1:d1: 14:6c:9c:08:19:91:82:7d:84:07:4d:87:b0:a3:09: 7c:43:aa:31:ba:dd:be:eb:5c:3b:fc:ac:cf:8b:b3: b4:8b:ac:5d:4e:37:44:04:3c:a2:ad:fc:18:4b:9e: b5:9f:01:fc:99:25:a7:20:c2:0e:17:55:8e:ff:bc: 43:e0:42:c4:d0:60:2d:9e:25:69:90:80:e5:4d:c4: 97:b5:da:d4:b9:aa:0e:79:fc:49:8b:e9:f7:ac:29: d0:30:68:05:f5:17:5b:d3:27:4b:fd:74:5b:7d:e6: 75:95:f6:0c:bb:1e:48:8c:c5:60:e6:b3:53:0a:2a: 5e:42:4c:08:2f:e5:43:bf:9f:99:a1:f1:51:ab:6e: 85:b5:f7:ef:fb:9e:0e:b9:a5:bb:3a:50:9a:c2:b4: 08:2d:1d:21:50:d3:e6:03:08:66:6b:a5:9c:74:6f: c2:f6:3d:b9:f2:bc:0d:c0:29:b7:28:cb:a5:9a:e3: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:93:DC:5F:EE:99:00:90:D8:B7:08:52:EA:7F:ED:97:4F:04:2A X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f5:91:9b:5c:58:7d:3c:3b:1d:57:c3:53:e1:65:41:be:3c: e1:9c:14:f3:c0:00:27:3d:e8:ee:b3:02:95:e5:78:05:d6:a9: 02:66:40:d7:ab:55:e7:e4:bd:ff:bf:3c:79:70:17:79:c9:29: 58:35:26:01:88:2a:0d:04:fb:d6:e0:48:ab:37:3a:95:67:5b: 6e:e8:a2:ea:78:db:dc:3a:66:e0:6c:ad:cb:16:ef:6a:6f:2e: 52:d8:16:75:fa:4e:ec:cf:af:bc:f8:8c:10:81:3c:cb:8d:6f: 81:5a:e9:d8:06:69:0a:d9:53:b9:14:ed:2c:92:13:07:de:68: fe:cf:d3:65:4e:ad:2d:35:1e:11:45:48:9f:eb:fb:e9:03:e1: cb:f4:6e:89:2c:80:0d:23:0b:ca:b0:bf:a5:3a:ea:90:1c:89: 3b:79:3f:1c:e0:69:b3:46:df:29:dd:d4:47:a4:1f:84:e4:53: 84:ad:96:ff:e3:43:a9:bd:60:b0:5e:03:57:aa:aa:eb:3a:52: e4:78:b1:3c:32:26:ad:78:36:c0:18:1f:4e:a6:69:0b:e8:15: b9:1a:97:90:62:71:66:7c:4e:1a:8f:14:49:67:e7:5b:da:d4: 20:6a:29:dd:44:fd:48:45:ff:87:ec:c1:12:b4:49:31:85:22: 55:11:8c:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwODIyMTQyMDUwWhcNMjUwODI5MTQyMDUwWjAYMRYwFAYD VQQDEw02OGE4N2NjMi03YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur499My61qfaOA4WFzLZgnJ22WMX9BXnEoG7gDANrfdoLrmdpfVnMTYLGv4D i+eyaFqCyyk1HlLY/z2kxAb9C426Pz1LPrEswdEUbJwIGZGCfYQHTYewowl8Q6ox ut2+61w7/KzPi7O0i6xdTjdEBDyirfwYS561nwH8mSWnIMIOF1WO/7xD4ELE0GAt niVpkIDlTcSXtdrUuaoOefxJi+n3rCnQMGgF9Rdb0ydL/XRbfeZ1lfYMux5IjMVg 5rNTCipeQkwIL+VDv5+ZofFRq26Ftffv+54OuaW7OlCawrQILR0hUNPmAwhma6Wc dG/C9j258rwNwCm3KMulmuNScwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzck9xf 7pkAkNi3CFLqf+2XTwQqMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt9ZGbXFh9PDsdV8NT4WVBvjzhnBTzwAAnPejuswKV5XgF1qkCZkDX q1Xn5L3/vzx5cBd5ySlYNSYBiCoNBPvW4EirNzqVZ1tu6KLqeNvcOmbgbK3LFu9q by5S2BZ1+k7sz6+8+IwQgTzLjW+BWunYBmkK2VO5FO0skhMH3mj+z9NlTq0tNR4R RUif6/vpA+HL9G6JLIANIwvKsL+lOuqQHIk7eT8c4GmzRt8p3dRHpB+E5FOErZb/ 40OpvWCwXgNXqqrrOlLkeLE8MiateDbAGB9OpmkL6BW5GpeQYnFmfE4ajxRJZ+db 2tQgaindRP1IRf+H7MEStEkxhSJVEYwe -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:56 2025 by rpki-client