$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: jT8/AB81LzfeD7G4RRkt5W6W8dbVtrPCqKiWQg9IXGg= Subject key identifier: 4F:90:0C:CB:7D:2F:1A:AA:6F:17:41:3F:80:19:87:14:4F:69:00:54 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2DA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2D8D Signing time: Fri 22 Aug 2025 15:33:06 +0000 Manifest this update: Fri 22 Aug 2025 15:33:05 +0000 Manifest next update: Fri 29 Aug 2025 15:33:05 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: 0g//5uIr93pJNtL+61HhmVWZ8bbtIcerW5hq2J4xlfU=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: qYH+0NoYqUVH/kICTwmC5FSWgYMcanxVuKqTuwnMQdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11688 (0x2da8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Aug 22 15:33:05 2025 GMT Not After : Aug 29 15:33:05 2025 GMT Subject: CN=68a88db1-a868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:f1:24:b0:41:eb:2a:6f:44:59:b4:ab:24: 33:83:ee:a9:46:fc:ac:49:2a:cb:f2:43:3e:60:31: e9:78:73:99:74:0a:91:76:c1:f7:3d:72:fb:41:5e: e7:b3:66:64:bd:b3:5b:05:c5:49:75:46:6d:6c:73: ef:a3:4c:98:bf:d1:de:00:bc:46:ab:39:eb:ea:98: fd:3c:eb:1a:69:89:1d:da:9b:05:86:60:31:6f:d7: e3:f5:df:b1:88:1f:c2:b3:88:ec:c2:c2:4c:e6:e8: 7f:54:02:fd:85:7d:dd:6c:ee:d2:d5:01:9e:8e:43: 23:3a:e6:f4:ab:e3:1d:60:3f:c4:2b:f5:8b:bc:8b: cb:af:5d:60:5b:82:27:f1:29:7e:98:ab:c4:ba:9c: a3:3f:a8:87:ff:08:93:28:34:84:f6:28:bb:e6:4e: 16:7a:26:bd:9b:3b:ad:c4:0b:02:18:22:81:e5:81: b1:c1:e5:8b:ca:bf:b7:5d:17:19:71:e9:34:5e:15: 5f:1d:aa:fa:7a:ec:38:f0:e7:77:04:7d:70:8d:24: 12:9d:a7:e2:42:ab:3b:fe:3b:b8:3d:1d:dc:3c:00: af:74:c2:66:8b:79:c8:e9:d7:42:34:8d:fa:f1:e7: 44:c8:b6:8d:08:b4:15:da:f0:f2:ed:d7:e7:3f:3b: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:0C:CB:7D:2F:1A:AA:6F:17:41:3F:80:19:87:14:4F:69:00:54 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:af:50:29:f7:e1:48:02:70:6d:94:71:48:88:3d:69:0e:a5: f0:41:b5:a1:6a:8e:67:d9:70:a5:a9:b3:3b:f6:a0:13:3e:14: 11:57:85:ad:90:5a:79:44:73:c6:ab:14:7e:7f:eb:d0:ab:02: b6:a5:6e:4f:6d:d3:97:de:ef:04:d5:1b:2c:ab:df:eb:6d:93: 57:f0:73:60:cd:78:83:59:51:af:41:90:b9:26:88:5d:2d:69: df:e1:85:f7:b6:12:a2:aa:a6:77:47:19:56:20:ee:e1:e0:cd: 86:53:0d:3f:f4:d0:8a:13:c7:1b:54:1c:d9:fb:16:86:9c:74: ee:2f:fc:6a:8b:be:9e:84:fe:31:b2:b1:05:50:4d:0e:17:df: a5:97:1e:e9:fe:45:39:c0:0d:0d:eb:6b:34:ac:6d:49:c0:5d: 86:59:4e:de:7a:b4:98:ec:14:a3:c2:f1:18:7d:9c:9d:3d:73: e9:9d:1f:9e:af:36:a0:a1:2f:ce:ae:dd:3b:34:fa:64:de:f0: f4:81:6d:83:15:fb:f5:b5:d6:ea:56:be:d1:48:e9:9e:55:ca: 0d:29:cb:32:86:3e:8b:2d:29:24:ad:3f:e5:e0:ae:2f:3d:46: 5e:07:f6:a9:75:37:ec:ac:23:1c:21:b8:69:70:f3:3f:20:ee: 4d:b7:d7:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUwODIyMTUzMzA1WhcNMjUwODI5MTUzMzA1WjAYMRYwFAYD VQQDEw02OGE4OGRiMS1hODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEPxJLBB6ypvRFm0qyQzg+6pRvysSSrL8kM+YDHpeHOZdAqRdsH3PXL7QV7n s2ZkvbNbBcVJdUZtbHPvo0yYv9HeALxGqznr6pj9POsaaYkd2psFhmAxb9fj9d+x iB/Cs4jswsJM5uh/VAL9hX3dbO7S1QGejkMjOub0q+MdYD/EK/WLvIvLr11gW4In 8Sl+mKvEupyjP6iH/wiTKDSE9ii75k4Weia9mzutxAsCGCKB5YGxweWLyr+3XRcZ cek0XhVfHar6euw48Od3BH1wjSQSnafiQqs7/ju4PR3cPACvdMJmi3nI6ddCNI36 8edEyLaNCLQV2vDy7dfnPzvVTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+QDMt9 LxqqbxdBP4AZhxRPaQBUMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3r1Ap9+FIAnBtlHFIiD1pDqXwQbWhao5n2XClqbM79qATPhQRV4Wt kFp5RHPGqxR+f+vQqwK2pW5PbdOX3u8E1Rssq9/rbZNX8HNgzXiDWVGvQZC5Johd LWnf4YX3thKiqqZ3RxlWIO7h4M2GUw0/9NCKE8cbVBzZ+xaGnHTuL/xqi76ehP4x srEFUE0OF9+llx7p/kU5wA0N62s0rG1JwF2GWU7eerSY7BSjwvEYfZydPXPpnR+e rzagoS/Ort07NPpk3vD0gW2DFfv1tdbqVr7RSOmeVcoNKcsyhj6LLSkkrT/l4K4v PUZeB/apdTfsrCMcIbhpcPM/IO5Nt9e0 -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:51 2025 by rpki-client