$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: 7yYQGFgMR1PQ1pZy27vJLQp0lZUUzS2o0qZ5dJqGtDg= Subject key identifier: 7D:71:D8:97:75:B4:83:B3:78:0F:C1:1E:93:B7:7F:F4:EB:1D:A6:6B Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: E6 Signing time: Thu 03 Jul 2025 05:35:37 +0000 Manifest this update: Thu 03 Jul 2025 05:35:37 +0000 Manifest next update: Thu 10 Jul 2025 05:35:37 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: JHZUdQLTrbm5AWmNQZT8gKaVJXCshpmh8YAzpbaTeOs=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Jul 3 05:35:37 2025 GMT Not After : Jul 10 05:35:37 2025 GMT Subject: CN=686616a9-efda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:83:ce:b7:45:cb:71:36:73:f0:f8:a9:6b: 45:ec:3d:ef:cf:12:cb:11:b9:fe:65:39:e7:7b:18: 35:04:b1:dd:ec:3a:bc:3d:91:ba:bd:fb:a8:80:bd: 5f:b3:14:8e:da:5a:1d:1d:11:0a:e7:c1:f6:e8:86: 4c:b0:7a:92:88:2c:5f:69:4b:2f:e4:a6:83:3a:9b: f0:b6:b6:5a:93:c5:ec:e2:41:46:bf:f2:c9:ab:77: b4:07:06:5d:89:ef:2d:ea:a3:cb:af:de:7d:0b:29: 4f:9b:8c:d6:07:16:8b:f9:5c:48:e1:bf:04:81:a6: b7:90:34:ac:6b:44:22:db:07:69:b2:32:71:18:05: 70:2a:1a:35:83:d9:f3:28:af:15:12:7f:80:96:a3: d4:bd:59:e5:fb:55:95:66:3b:be:f7:f9:53:ad:e8: f6:d7:e0:dc:26:49:da:33:1a:8c:d4:0f:e9:79:fa: 0e:15:35:f5:61:f6:f4:0a:7c:97:da:a8:63:13:bd: c7:ab:b6:31:a2:86:2a:a8:bf:cf:da:a8:9f:98:25: e2:69:d4:59:7f:88:d1:de:57:cc:bf:78:dd:ee:45: 41:8b:48:7e:83:3e:b2:ce:a9:30:67:9b:e9:cd:2e: aa:23:d7:bd:06:e8:bb:59:82:3b:64:a0:18:dc:db: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:71:D8:97:75:B4:83:B3:78:0F:C1:1E:93:B7:7F:F4:EB:1D:A6:6B X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:83:3d:ee:a6:f3:45:4d:74:de:ce:52:c6:d2:0f:68:8e:73: 9b:6f:b1:3d:26:99:34:26:35:c8:bc:04:92:8a:46:74:b3:b5: 8b:1e:f7:9c:bc:b9:a9:1a:f9:0d:44:e8:48:da:8d:e7:1b:74: 02:83:d3:08:5a:d7:d1:ad:13:16:fe:24:2c:4d:77:98:98:e5: f8:08:c9:2c:89:40:3f:32:36:e7:49:08:e7:48:2f:7a:df:68: 6a:c4:08:e9:0e:90:c9:ea:c8:9f:7c:68:17:f3:13:5d:03:dd: 5b:7c:fb:1f:b7:c8:39:f8:1a:12:8c:4e:08:61:be:e6:be:83: 72:3e:9e:62:c5:f3:81:14:40:bd:ad:c5:b4:79:00:4c:c6:b8: cf:85:19:24:c1:6a:aa:aa:a1:da:dd:cd:09:71:09:5c:3c:c8: 84:cc:66:1a:f8:7b:88:47:1c:f2:64:1f:65:74:8b:ad:69:20: 74:f2:c4:a0:e1:92:02:4b:8a:76:09:8e:d0:5e:1c:65:15:c2: ef:c0:a9:b6:e0:b1:26:b0:14:52:f2:f5:e8:52:5f:25:67:c8: 77:f9:1f:18:7b:7a:c3:52:13:2c:68:37:80:93:47:08:73:d0: 77:59:df:71:9f:d4:a5:0b:31:c5:73:72:bb:af:af:e9:ac:49: 25:c4:9f:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUwNzAzMDUzNTM3WhcNMjUwNzEwMDUzNTM3WjAYMRYwFAYD VQQDEw02ODY2MTZhOS1lZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y6DzrdFy3E2c/D4qWtF7D3vzxLLEbn+ZTnnexg1BLHd7Dq8PZG6vfuogL1f sxSO2lodHREK58H26IZMsHqSiCxfaUsv5KaDOpvwtrZak8Xs4kFGv/LJq3e0BwZd ie8t6qPLr959CylPm4zWBxaL+VxI4b8Egaa3kDSsa0Qi2wdpsjJxGAVwKho1g9nz KK8VEn+AlqPUvVnl+1WVZju+9/lTrej21+DcJknaMxqM1A/pefoOFTX1Yfb0CnyX 2qhjE73Hq7YxooYqqL/P2qifmCXiadRZf4jR3lfMv3jd7kVBi0h+gz6yzqkwZ5vp zS6qI9e9Bui7WYI7ZKAY3NtvaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1x2Jd1 tIOzeA/BHpO3f/TrHaZrMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5gz3upvNFTXTezlLG0g9ojnObb7E9Jpk0JjXIvASSikZ0s7WLHvec vLmpGvkNROhI2o3nG3QCg9MIWtfRrRMW/iQsTXeYmOX4CMksiUA/MjbnSQjnSC96 32hqxAjpDpDJ6siffGgX8xNdA91bfPsft8g5+BoSjE4IYb7mvoNyPp5ixfOBFEC9 rcW0eQBMxrjPhRkkwWqqqqHa3c0JcQlcPMiEzGYa+HuIRxzyZB9ldIutaSB08sSg 4ZICS4p2CY7QXhxlFcLvwKm24LEmsBRS8vXoUl8lZ8h3+R8Ye3rDUhMsaDeAk0cI c9B3Wd9xn9SlCzHFc3K7r6/prEklxJ+O -----END CERTIFICATE-----Generated at Sat Jul 5 05:31:11 2025 by rpki-client