$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: 4uBIfFBX076sl3rQAlt4tsdmm+SV1aKBDSo+978p++Q= Subject key identifier: AA:35:87:FE:D2:2E:46:57:0F:D4:A7:6E:8B:C2:B3:0D:2F:D9:96:E2 Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: 0133 Signing time: Sat 23 Aug 2025 04:42:57 +0000 Manifest this update: Sat 23 Aug 2025 04:42:57 +0000 Manifest next update: Sat 30 Aug 2025 04:42:57 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: hQcRNFvOCqytK7d6arxjib3rx6I0iJEMZXhViWpjos0=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Aug 23 04:42:57 2025 GMT Not After : Aug 30 04:42:57 2025 GMT Subject: CN=68a946d1-f567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:58:28:94:d9:d4:c1:f4:37:0e:53:15:fc:6f: 9f:e1:48:a1:47:b2:55:67:ec:02:67:73:a3:c4:6a: 63:d6:7c:ba:fa:6e:bf:72:53:a5:83:2f:fc:9f:d1: f9:06:d5:f3:a0:3f:32:c9:a0:17:32:f2:de:29:aa: b2:4c:c9:93:0b:57:48:21:5c:d5:87:25:28:17:f1: 70:27:83:eb:a5:3a:95:5d:f0:34:8c:cf:bd:91:8e: 87:68:c2:c3:d6:4a:95:cc:8e:34:40:43:be:38:a5: 9d:1a:b8:74:5b:0a:52:4a:24:f4:33:21:d3:e0:2b: 75:a5:a3:1e:5e:d2:cd:21:62:47:1d:58:ab:ff:85: cf:33:7c:f3:f4:98:32:8f:77:cc:90:ae:1e:94:d0: ba:c5:ef:a1:32:91:b0:f7:60:17:8e:d3:15:f8:dc: 93:c1:ac:96:4a:4f:bb:62:26:ea:ad:74:55:c1:b9: a7:c9:b8:7d:8e:30:ef:94:8c:c7:2d:d1:0b:7c:dd: 13:a5:a3:f0:86:5c:70:a5:68:ca:5b:b1:be:08:b8: 7e:67:bd:b1:fb:a7:a9:e9:ff:6d:2f:33:2a:75:7d: 80:32:78:c7:24:c8:70:26:cb:51:46:24:1e:25:aa: 20:98:90:b5:6b:4e:fe:e0:ab:a8:8e:c5:10:63:9b: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:35:87:FE:D2:2E:46:57:0F:D4:A7:6E:8B:C2:B3:0D:2F:D9:96:E2 X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:36:02:92:a7:81:ca:ee:28:3e:e0:3d:23:8b:4d:5a:25:67: dc:0f:7b:4f:6b:dc:e5:6a:87:85:4d:c1:3e:8e:18:03:9b:a4: c2:16:64:70:8d:50:f8:bb:37:21:49:42:ed:ef:cb:42:1c:f8: 04:38:08:d5:c6:91:20:ea:e5:84:a4:52:ab:9d:d1:ab:a2:72: ec:f0:bd:02:bb:3d:cc:2b:68:2b:ba:af:77:c3:c9:66:f1:6d: bf:e2:6f:b0:4f:8b:06:8a:49:8f:08:e4:7e:0f:35:21:f5:f6: 6b:8c:12:11:53:89:22:b6:15:25:fe:e2:0a:d8:33:a9:19:fd: 20:88:a0:9c:db:f7:7e:23:12:35:58:fb:81:a3:e3:4f:de:89: c3:03:55:ff:93:9e:bb:97:04:ba:cc:eb:27:63:a9:11:d3:6f: cd:37:df:83:41:46:5c:91:24:27:a5:a0:c5:e5:3c:a7:b8:d6: 88:e1:ef:eb:0e:4c:e2:51:7e:e1:6a:d3:0d:2f:c3:a5:7e:e5: 1b:94:0c:18:f5:29:ff:e6:13:e3:2d:8a:17:84:35:aa:b7:c5: c4:98:ba:9a:59:79:d9:da:22:99:41:95:60:07:6b:5d:4a:b4: 25:66:14:c5:7a:1b:ea:f3:37:95:54:a9:75:c5:d5:f0:c8:ad: 84:c2:83:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjUwODIzMDQ0MjU3WhcNMjUwODMwMDQ0MjU3WjAYMRYwFAYD VQQDEw02OGE5NDZkMS1mNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FgolNnUwfQ3DlMV/G+f4UihR7JVZ+wCZ3OjxGpj1ny6+m6/clOlgy/8n9H5 BtXzoD8yyaAXMvLeKaqyTMmTC1dIIVzVhyUoF/FwJ4PrpTqVXfA0jM+9kY6HaMLD 1kqVzI40QEO+OKWdGrh0WwpSSiT0MyHT4Ct1paMeXtLNIWJHHVir/4XPM3zz9Jgy j3fMkK4elNC6xe+hMpGw92AXjtMV+NyTwayWSk+7YibqrXRVwbmnybh9jjDvlIzH LdELfN0TpaPwhlxwpWjKW7G+CLh+Z72x+6ep6f9tLzMqdX2AMnjHJMhwJstRRiQe JaogmJC1a07+4KuojsUQY5u5+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo1h/7S LkZXD9SnbovCsw0v2ZbiMB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxNgKSp4HK7ig+4D0ji01aJWfcD3tPa9zlaoeFTcE+jhgDm6TCFmRw jVD4uzchSULt78tCHPgEOAjVxpEg6uWEpFKrndGronLs8L0Cuz3MK2gruq93w8lm 8W2/4m+wT4sGikmPCOR+DzUh9fZrjBIRU4kithUl/uIK2DOpGf0giKCc2/d+IxI1 WPuBo+NP3onDA1X/k567lwS6zOsnY6kR02/NN9+DQUZckSQnpaDF5TynuNaI4e/r DkziUX7hatMNL8OlfuUblAwY9Sn/5hPjLYoXhDWqt8XEmLqaWXnZ2iKZQZVgB2td SrQlZhTFehvq8zeVVKl1xdXwyK2EwoPi -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:20 2025 by rpki-client