$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: uk07G4gEv/rNm308U9qmNlD+koQint/cXWqkDGAjlbk= Subject key identifier: 3F:12:C0:37:AC:73:F4:C3:61:84:5B:E6:49:21:CC:7A:1F:63:41:49 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2D8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2D73 Signing time: Wed 02 Jul 2025 15:37:10 +0000 Manifest this update: Wed 02 Jul 2025 15:37:09 +0000 Manifest next update: Wed 09 Jul 2025 15:37:09 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: CtIJeGUqUVj9Zl7nOosHmrTBPasFUciIz3qEMupk04A=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: qYH+0NoYqUVH/kICTwmC5FSWgYMcanxVuKqTuwnMQdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11662 (0x2d8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Jul 2 15:37:09 2025 GMT Not After : Jul 9 15:37:09 2025 GMT Subject: CN=68655226-caa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:e2:7f:9c:75:ae:8c:b7:4b:3b:0f:ff:ef: 6d:50:f7:73:da:87:30:78:eb:96:2a:95:c8:c9:ec: e4:67:6a:3a:b8:9a:bb:3a:48:13:7c:ef:73:5b:cf: 69:78:1d:6d:67:b5:ff:c8:f2:98:51:95:45:fb:86: 1d:85:96:87:26:f9:c0:48:b2:ca:c9:4b:b1:38:70: 17:e1:5c:ef:2e:81:e9:57:e2:3f:54:89:d4:df:85: 17:73:82:4b:29:64:6b:f5:df:b1:e4:e9:c5:4d:91: ce:e4:9b:a7:1b:01:51:38:9d:43:4e:37:c3:cb:35: 28:12:ac:51:08:06:83:7b:1a:a4:29:66:1c:a6:ac: 75:bf:9b:61:f0:b2:c7:f8:44:64:d8:87:48:52:8b: 6f:a5:92:c4:95:6b:43:7b:d6:ab:00:03:96:0a:7f: 24:2b:86:b2:bc:c4:f5:46:42:79:38:c3:fa:e9:86: fc:19:2c:b3:1e:c2:ee:aa:58:96:f6:b8:9c:57:fc: 20:55:ec:3f:12:ca:09:ba:e7:33:40:5f:57:b0:04: 96:37:f9:94:c8:a5:53:4b:ed:95:ce:31:a5:67:aa: d1:18:7f:21:a7:a2:4a:64:2f:e0:08:7f:1d:ab:69: cc:78:b1:61:55:e2:84:8c:5b:2f:f1:11:ca:b9:a4: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:12:C0:37:AC:73:F4:C3:61:84:5B:E6:49:21:CC:7A:1F:63:41:49 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:9e:95:f3:f5:75:22:ac:6c:64:4d:e1:93:3b:6f:20:cf:6f: 91:0c:f0:b2:45:1d:67:9c:8e:e3:4d:90:dd:f4:0b:03:b0:64: 92:11:b8:dd:e1:fe:e4:95:42:d3:51:1c:1a:bf:77:ee:ed:6c: 88:79:5a:2d:29:75:db:57:1a:77:9a:16:5a:a9:67:f4:87:64: c7:55:00:fa:86:d5:d3:73:22:14:1a:a0:55:7f:f5:a3:99:10: 23:ee:51:0d:95:48:c7:53:c1:fa:d7:d6:9b:42:18:6c:db:53: a2:a9:ad:0b:56:2e:f1:4c:de:fe:29:c5:ad:8b:4f:e1:c6:74: bc:8b:53:b7:03:b8:3e:84:76:4a:c3:43:cb:1d:0b:a8:54:0b: b9:f6:92:2b:8d:92:d4:48:b5:67:4f:80:20:f7:89:35:ef:90: 38:e1:3e:ce:b1:fc:ea:5d:f6:44:72:ab:45:c9:be:d5:2e:df: f6:50:4d:ac:16:da:d6:4b:fa:26:d5:4b:db:cc:1d:63:08:0c: 17:13:dd:17:8d:17:f0:e1:1a:18:24:44:0a:bc:7e:7c:21:fc: 2a:f9:62:5e:a9:9a:95:55:d3:59:28:59:a2:50:3f:73:ff:e1: f8:4c:2d:cc:42:ef:25:cf:c0:70:fe:c2:67:81:13:af:76:f0: ec:7d:9f:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUwNzAyMTUzNzA5WhcNMjUwNzA5MTUzNzA5WjAYMRYwFAYD VQQDEw02ODY1NTIyNi1jYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyLif5x1roy3SzsP/+9tUPdz2ocweOuWKpXIyezkZ2o6uJq7OkgTfO9zW89p eB1tZ7X/yPKYUZVF+4YdhZaHJvnASLLKyUuxOHAX4VzvLoHpV+I/VInU34UXc4JL KWRr9d+x5OnFTZHO5JunGwFROJ1DTjfDyzUoEqxRCAaDexqkKWYcpqx1v5th8LLH +ERk2IdIUotvpZLElWtDe9arAAOWCn8kK4ayvMT1RkJ5OMP66Yb8GSyzHsLuqliW 9ricV/wgVew/EsoJuuczQF9XsASWN/mUyKVTS+2VzjGlZ6rRGH8hp6JKZC/gCH8d q2nMeLFhVeKEjFsv8RHKuaSNHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8SwDes c/TDYYRb5kkhzHofY0FJMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCinpXz9XUirGxkTeGTO28gz2+RDPCyRR1nnI7jTZDd9AsDsGSSEbjd 4f7klULTURwav3fu7WyIeVotKXXbVxp3mhZaqWf0h2THVQD6htXTcyIUGqBVf/Wj mRAj7lENlUjHU8H619abQhhs21Oiqa0LVi7xTN7+KcWti0/hxnS8i1O3A7g+hHZK w0PLHQuoVAu59pIrjZLUSLVnT4Ag94k175A44T7OsfzqXfZEcqtFyb7VLt/2UE2s FtrWS/om1UvbzB1jCAwXE90XjRfw4RoYJEQKvH58Ifwq+WJeqZqVVdNZKFmiUD9z /+H4TC3MQu8lz8Bw/sJngROvdvDsfZ+h -----END CERTIFICATE-----Generated at Wed Jul 2 23:22:20 2025 by rpki-client