$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: 3tnckL73eWJZc276je31LiGFeHFdXPtDLuWBmqmUUq0= Subject key identifier: 15:9F:3D:5F:AE:18:43:5A:15:0B:50:34:52:A0:95:1C:FF:1C:F2:2B Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 0100 Signing time: Sat 23 Aug 2025 05:15:42 +0000 Manifest this update: Sat 23 Aug 2025 05:15:42 +0000 Manifest next update: Sat 30 Aug 2025 05:15:42 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: 2d9AdY479qYp3YDkr2b6i9dpbHMhy9gdtnanwgRimDc=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Aug 23 05:15:42 2025 GMT Not After : Aug 30 05:15:42 2025 GMT Subject: CN=68a94e7e-6753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:04:49:67:33:8b:42:7f:b9:33:30:c2:1c: 00:75:87:1b:d8:66:07:c7:91:73:61:7d:0f:3d:e0: 4b:4a:a0:d6:f5:8b:d8:9c:49:67:8f:cd:0b:3f:b5: c1:56:e0:9e:1a:03:f2:ae:1b:61:0a:03:6b:64:ca: 96:ea:61:04:d4:99:37:1c:c1:bd:2e:74:1c:ec:69: 1c:d0:be:07:11:5d:19:82:0c:1f:ea:31:06:1a:01: 35:c1:ed:54:63:55:89:f8:4b:cd:b4:9e:26:47:e9: 57:23:c3:ac:2a:be:7f:57:ab:5c:35:8f:c7:31:6d: 36:f9:15:7c:c6:0c:a4:09:c8:4e:6a:4d:26:e7:b3: 2b:fd:49:f0:9c:2c:35:8d:cb:b1:ee:bc:11:c4:eb: 64:16:ef:98:2e:2f:2f:a1:2b:6b:f4:05:cd:52:aa: 90:fb:50:04:e5:7f:d6:a1:2e:83:8e:07:52:64:b9: ae:fb:47:a6:90:c9:4d:e0:8c:a7:be:68:90:cd:22: ab:eb:6d:a2:12:36:9b:9c:48:f6:27:f3:9a:ee:b5: 7f:33:c3:55:e8:8f:5b:67:3e:3a:90:38:f3:54:c2: ed:e1:b7:95:b8:19:06:81:38:09:04:7c:30:30:85: 52:dc:60:fe:ce:05:8c:14:0c:33:17:3d:92:d2:02: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9F:3D:5F:AE:18:43:5A:15:0B:50:34:52:A0:95:1C:FF:1C:F2:2B X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d8:47:97:e1:ef:70:c0:3d:a9:20:03:51:d5:4d:97:c7:08: 91:73:29:e3:ab:06:c2:ef:e0:02:67:18:24:8a:d9:8a:71:77: f4:8b:c0:73:c8:1d:fe:90:e7:bb:67:8c:0f:db:63:48:52:23: 1e:24:2a:5f:e1:4f:c5:69:2c:24:72:4f:d3:02:d7:e3:61:6e: af:da:3e:f3:d0:2b:56:cb:c8:ed:96:e6:6c:bd:be:fc:11:5d: 92:f0:b9:57:3b:de:27:2e:29:0d:d5:b1:a1:c4:16:23:bb:1d: 62:3c:77:b9:cb:12:e2:58:0a:32:0a:e4:0f:67:0a:2f:6f:38: fd:79:72:4c:e9:26:83:11:c3:77:86:f9:d6:9d:fe:98:8d:25: 59:60:35:49:59:b8:e9:3e:d7:95:d4:a9:38:67:4e:51:e6:74: 4f:1d:80:b5:8d:ae:60:02:3a:d6:c4:11:22:e1:19:65:18:0c: 18:91:ba:c3:77:a7:f1:db:02:6d:44:04:d4:aa:42:b4:79:9e: 3e:66:00:0b:b2:20:95:dc:93:7d:3e:b5:72:4d:fb:2e:54:f1: 33:e3:b9:7f:4f:df:ce:a2:67:ec:cf:d0:f8:2c:63:4c:14:1e: 0e:be:1c:30:0f:35:75:09:48:67:cb:ba:62:05:e8:b4:26:6f: d9:6e:63:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUwODIzMDUxNTQyWhcNMjUwODMwMDUxNTQyWjAYMRYwFAYD VQQDEw02OGE5NGU3ZS02NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vQESWczi0J/uTMwwhwAdYcb2GYHx5FzYX0PPeBLSqDW9YvYnElnj80LP7XB VuCeGgPyrhthCgNrZMqW6mEE1Jk3HMG9LnQc7Gkc0L4HEV0Zggwf6jEGGgE1we1U Y1WJ+EvNtJ4mR+lXI8OsKr5/V6tcNY/HMW02+RV8xgykCchOak0m57Mr/UnwnCw1 jcux7rwRxOtkFu+YLi8voStr9AXNUqqQ+1AE5X/WoS6DjgdSZLmu+0emkMlN4Iyn vmiQzSKr622iEjabnEj2J/Oa7rV/M8NV6I9bZz46kDjzVMLt4beVuBkGgTgJBHww MIVS3GD+zgWMFAwzFz2S0gKKIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWfPV+u GENaFQtQNFKglRz/HPIrMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB32EeX4e9wwD2pIANR1U2XxwiRcynjqwbC7+ACZxgkitmKcXf0i8Bz yB3+kOe7Z4wP22NIUiMeJCpf4U/FaSwkck/TAtfjYW6v2j7z0CtWy8jtluZsvb78 EV2S8LlXO94nLikN1bGhxBYjux1iPHe5yxLiWAoyCuQPZwovbzj9eXJM6SaDEcN3 hvnWnf6YjSVZYDVJWbjpPteV1Kk4Z05R5nRPHYC1ja5gAjrWxBEi4RllGAwYkbrD d6fx2wJtRATUqkK0eZ4+ZgALsiCV3JN9PrVyTfsuVPEz47l/T9/Oomfsz9D4LGNM FB4OvhwwDzV1CUhny7piBei0Jm/ZbmPc -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:05 2025 by rpki-client