$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: YetFMaC7wOeO3LCzvAKSy7oZyl1nQtvn8xxxia/Ne+w= Subject key identifier: 8D:46:DA:76:E6:3A:6D:77:FC:3A:35:27:21:C6:A1:4B:41:18:D1:19 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 0824 Signing time: Fri 22 Aug 2025 20:56:54 +0000 Manifest this update: Fri 22 Aug 2025 20:56:54 +0000 Manifest next update: Fri 29 Aug 2025 20:56:54 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: jzrrXiC1frH9ZNs5Z8B51yoQhPXrD01IXCAHVn3Jvio=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Aug 22 20:56:54 2025 GMT Not After : Aug 29 20:56:54 2025 GMT Subject: CN=68a8d996-2162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:b5:78:e3:95:e0:66:a4:d6:97:11:5f:ff: de:3a:5a:d3:3b:a5:ae:7d:90:a4:26:8d:7d:ed:1b: a1:42:da:5b:ed:d0:84:01:16:93:11:02:a2:0f:a8: 17:05:1d:1d:f1:7b:0d:03:a4:88:7f:bb:50:2a:72: 2e:6e:6e:a9:60:6f:59:bd:3f:e3:1f:b0:76:0a:17: dc:77:bb:a6:d4:93:60:f3:4c:3e:c9:c5:c5:be:a7: 99:89:d5:60:f3:1a:24:b3:64:d3:b5:67:01:b2:07: 96:2c:84:3f:bb:fc:2b:bd:ad:7b:be:94:b4:7c:0d: 23:e3:3d:e1:14:20:ed:a9:4c:a1:14:19:7a:83:41: f1:d7:2b:bf:73:ca:a9:5c:76:04:7c:c8:d6:cd:36: 76:ab:1a:f8:55:a8:94:b1:1f:5f:e4:3d:ef:c8:e1: f1:58:9e:0a:92:e1:92:2e:6d:c5:dd:03:69:1c:b0: cd:24:b4:a3:6a:7a:db:1e:7e:54:58:1a:b4:22:a0: 1d:40:a1:12:25:d3:cc:23:fc:52:89:bd:be:bb:31: f4:ff:7f:82:c9:6b:2d:9c:a8:22:a3:36:8d:93:8a: c9:cf:cc:99:8e:e7:85:f2:1f:e4:1c:0c:e9:44:83: b9:f8:b6:35:cd:16:9a:86:ec:fe:f0:d5:53:5c:c8: 1c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:46:DA:76:E6:3A:6D:77:FC:3A:35:27:21:C6:A1:4B:41:18:D1:19 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:33:0c:6d:41:ca:e5:5e:d3:e9:ba:57:75:a8:1d:d2:75:1c: 20:2e:fe:4f:20:8f:bd:3d:34:4c:15:ce:6e:e0:25:5f:44:52: a2:3b:73:52:e5:57:17:3d:a0:da:e2:b8:cc:0a:a7:62:2a:5a: d0:1d:95:54:a1:7f:32:70:02:1e:28:f8:d9:54:09:c1:6c:3e: ac:42:3b:86:39:0c:84:ea:2f:a6:80:d6:fe:3d:07:d3:c7:bc: d0:85:2f:35:34:c6:ce:30:bf:bc:83:50:fb:d5:e6:df:ab:0e: 38:07:a6:ee:25:7c:26:a8:73:d0:7b:da:6b:e1:5e:8a:2d:62: bf:40:04:72:f1:65:a2:00:03:cd:6d:0a:8b:58:9d:de:9c:68: e5:01:c1:23:ea:d1:19:6d:a6:95:95:8c:6e:68:d4:a2:00:c9: f1:28:96:18:28:39:39:a6:0a:3a:82:29:90:5d:ab:0e:ba:f5: 43:ab:75:7e:e9:eb:3d:40:2b:c2:5b:ef:24:62:a8:30:9b:60: f8:5f:05:d0:5f:3e:b0:71:43:ff:99:48:92:66:1c:e8:9e:5f: dc:83:68:6a:4d:90:54:0b:e8:c1:95:c2:99:9a:a3:85:2a:f0: 92:3b:cd:cf:9e:89:c2:7b:e5:75:67:91:05:18:c8:ac:8e:1b: 34:9f:f0:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUwODIyMjA1NjU0WhcNMjUwODI5MjA1NjU0WjAYMRYwFAYD VQQDEw02OGE4ZDk5Ni0yMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsi1eOOV4Gak1pcRX//eOlrTO6WufZCkJo197RuhQtpb7dCEARaTEQKiD6gX BR0d8XsNA6SIf7tQKnIubm6pYG9ZvT/jH7B2Chfcd7um1JNg80w+ycXFvqeZidVg 8xoks2TTtWcBsgeWLIQ/u/wrva17vpS0fA0j4z3hFCDtqUyhFBl6g0Hx1yu/c8qp XHYEfMjWzTZ2qxr4VaiUsR9f5D3vyOHxWJ4KkuGSLm3F3QNpHLDNJLSjanrbHn5U WBq0IqAdQKESJdPMI/xSib2+uzH0/3+CyWstnKgiozaNk4rJz8yZjueF8h/kHAzp RIO5+LY1zRaahuz+8NVTXMgcEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1G2nbm Om13/Do1JyHGoUtBGNEZMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNMwxtQcrlXtPpuld1qB3SdRwgLv5PII+9PTRMFc5u4CVfRFKiO3NS 5VcXPaDa4rjMCqdiKlrQHZVUoX8ycAIeKPjZVAnBbD6sQjuGOQyE6i+mgNb+PQfT x7zQhS81NMbOML+8g1D71ebfqw44B6buJXwmqHPQe9pr4V6KLWK/QARy8WWiAAPN bQqLWJ3enGjlAcEj6tEZbaaVlYxuaNSiAMnxKJYYKDk5pgo6gimQXasOuvVDq3V+ 6es9QCvCW+8kYqgwm2D4XwXQXz6wcUP/mUiSZhzonl/cg2hqTZBUC+jBlcKZmqOF KvCSO83PnonCe+V1Z5EFGMisjhs0n/Cu -----END CERTIFICATE-----Generated at Sun Aug 24 03:35:08 2025 by rpki-client