$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: S8ud5rDbOFpZ8HhcwwV7QTzOfrzU/QeaK59bQnBVQIA= Subject key identifier: 9A:D3:85:EC:E4:0A:44:EF:D5:5E:A4:30:EB:BB:72:A6:B3:E7:A5:D7 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 258E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2558 Signing time: Fri 04 Jul 2025 14:20:49 +0000 Manifest this update: Fri 04 Jul 2025 14:20:49 +0000 Manifest next update: Fri 11 Jul 2025 14:20:49 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: aNjlYMhFrJzQW4Epw+kfFK3Od5rScTGTleP2u57D53w=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9614 (0x258e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Jul 4 14:20:49 2025 GMT Not After : Jul 11 14:20:49 2025 GMT Subject: CN=6867e341-8272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:da:da:df:61:a7:33:ac:75:c8:fa:a3:70: 2a:25:95:5c:89:f2:36:26:b9:2d:9b:01:c5:f3:29: 2b:70:a3:14:af:8c:e5:18:f2:27:a0:b1:cf:7e:81: ab:f2:a6:45:0a:6f:ca:0b:f5:64:41:06:53:10:0f: 38:79:2b:30:28:60:d6:c1:4c:eb:56:30:51:80:ca: d5:3a:95:0c:5f:14:87:44:63:f1:9b:8c:5a:39:d2: 9f:a8:52:7f:41:3c:b0:c2:3d:2a:db:be:76:f6:25: 31:29:3c:ad:16:34:2b:bc:75:1c:44:00:8c:ab:80: 22:2a:34:8d:bc:1f:e5:78:b8:21:98:7c:a0:ae:6a: 99:b3:c0:ea:7f:5e:c9:fe:9f:ca:44:08:20:49:77: ee:46:dd:6f:9a:8b:58:55:fa:69:7d:f1:95:f5:8d: d0:bb:30:cb:49:1b:0a:83:ef:3a:13:b4:9a:25:72: 07:c8:68:bc:6f:93:56:4e:84:91:a6:f2:dc:03:a8: 4a:3a:d3:64:dd:11:25:d6:8a:3e:cd:9d:76:22:6b: 6a:2b:cb:57:be:62:20:fb:56:71:80:a6:65:43:a2: 06:e2:dc:91:06:c0:b4:ce:32:44:e0:f0:ac:5c:40: a3:f6:b9:c7:2c:c0:5a:dd:43:6d:99:1a:98:a6:24: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D3:85:EC:E4:0A:44:EF:D5:5E:A4:30:EB:BB:72:A6:B3:E7:A5:D7 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:18:9c:b5:9e:bd:9d:29:59:ad:a9:68:b2:d2:d9:61:f3:e5: 7b:e6:a0:47:38:17:ae:6d:27:b8:2c:2f:73:c0:e8:ad:d0:e4: 44:36:cf:db:22:c7:5f:59:48:38:55:85:a2:12:a9:8d:9c:ff: d9:97:8f:bb:af:02:94:77:54:1a:11:a5:66:a3:45:c1:11:10: 52:88:10:dc:46:0c:14:da:33:a6:3a:e0:94:91:ba:84:a1:1d: 45:a2:ac:1e:7d:9e:72:0c:18:8f:cc:48:21:1b:bb:e2:6c:38: 06:b3:ea:f5:e9:6e:98:44:1e:9b:67:e6:7d:7c:04:44:d1:f5: c7:03:df:07:bf:52:ef:33:1c:b5:e3:07:17:05:55:71:e1:18: c3:38:d0:77:b7:23:6f:30:ce:53:88:0d:70:85:d3:a1:5d:ac: b2:48:ba:9d:30:35:75:94:47:64:6e:28:ca:68:96:37:69:c0: 61:c4:ed:b5:fa:af:fd:65:26:75:b6:50:9a:95:75:1e:c3:c7: ef:7e:72:fa:cb:0d:d3:09:a4:bb:dd:49:89:13:91:03:39:a4: 4b:b0:4e:9b:39:6b:73:b3:73:6b:7c:49:a2:00:d3:91:9e:71: ff:06:e8:1a:40:97:84:a1:35:e2:e4:27:e8:cf:79:e0:09:80: 83:eb:1f:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwNzA0MTQyMDQ5WhcNMjUwNzExMTQyMDQ5WjAYMRYwFAYD VQQDEw02ODY3ZTM0MS04MjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuza2t9hpzOsdcj6o3AqJZVcifI2JrktmwHF8ykrcKMUr4zlGPInoLHPfoGr 8qZFCm/KC/VkQQZTEA84eSswKGDWwUzrVjBRgMrVOpUMXxSHRGPxm4xaOdKfqFJ/ QTywwj0q27529iUxKTytFjQrvHUcRACMq4AiKjSNvB/leLghmHygrmqZs8Dqf17J /p/KRAggSXfuRt1vmotYVfppffGV9Y3QuzDLSRsKg+86E7SaJXIHyGi8b5NWToSR pvLcA6hKOtNk3REl1oo+zZ12ImtqK8tXvmIg+1ZxgKZlQ6IG4tyRBsC0zjJE4PCs XECj9rnHLMBa3UNtmRqYpiRdMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrThezk CkTv1V6kMOu7cqaz56XXMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfGJy1nr2dKVmtqWiy0tlh8+V75qBHOBeubSe4LC9zwOit0ORENs/b IsdfWUg4VYWiEqmNnP/Zl4+7rwKUd1QaEaVmo0XBERBSiBDcRgwU2jOmOuCUkbqE oR1FoqwefZ5yDBiPzEghG7vibDgGs+r16W6YRB6bZ+Z9fARE0fXHA98Hv1LvMxy1 4wcXBVVx4RjDONB3tyNvMM5TiA1whdOhXayySLqdMDV1lEdkbijKaJY3acBhxO21 +q/9ZSZ1tlCalXUew8fvfnL6yw3TCaS73UmJE5EDOaRLsE6bOWtzs3NrfEmiANOR nnH/BugaQJeEoTXi5Cfoz3ngCYCD6x9C -----END CERTIFICATE-----Generated at Sat Jul 5 08:21:02 2025 by rpki-client