$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: b6fvEm1ZFE71rMaCYkk2Goy7+4MyPi8skg6YuRGJQwU= Subject key identifier: 29:DD:35:3C:E5:D4:99:B5:7C:92:8C:D6:57:0F:2D:AE:32:E8:79:CB Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 23F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 23E7 Signing time: Wed 02 Jul 2025 15:55:35 +0000 Manifest this update: Wed 02 Jul 2025 15:55:34 +0000 Manifest next update: Wed 09 Jul 2025 15:55:34 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: Bj2vsA+ODsnVesBlnIiTNZf0YPdXxkPP7cMjZuazBAY=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9208 (0x23f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Jul 2 15:55:34 2025 GMT Not After : Jul 9 15:55:34 2025 GMT Subject: CN=68655676-ea49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:80:b4:e2:5a:43:b5:20:47:91:1e:21:ad: e2:63:d9:a1:b1:b1:3a:fa:ac:5b:c5:0c:f0:bf:52: 76:15:ff:57:c2:3e:40:bc:e1:23:5e:5c:a9:e8:db: 1c:2c:bc:70:0d:f9:e6:e9:96:72:06:9b:ed:ef:cd: ce:76:19:f8:39:4f:bc:a8:b6:72:d9:05:c7:e7:73: 62:c1:7a:ee:18:67:58:87:a8:21:73:99:5d:97:cb: 7d:15:7d:e5:d8:28:e3:15:c5:b3:60:b1:71:0f:c9: 39:20:7e:ac:db:e2:c2:6e:47:04:ff:09:ee:c4:88: 05:01:5d:4b:ad:ac:f6:8f:c3:45:a8:5f:48:0c:34: 52:88:f8:26:08:af:be:31:c7:78:2b:86:ab:5d:f9: d1:3a:64:66:a5:cf:77:1d:52:df:0e:18:ba:20:5f: 56:72:05:da:ae:45:9b:88:25:8c:a0:ae:21:c3:e9: 6e:45:e2:8d:65:3f:33:14:da:0f:e0:6e:52:79:c2: 12:3c:a3:27:cf:58:43:76:7c:e0:51:bd:4f:44:aa: 64:c6:54:29:14:7a:21:38:45:8d:22:3d:c7:b3:93: 9f:7c:62:a4:a8:bb:96:e0:0d:b0:15:bf:cd:da:29: ae:d5:f1:f4:56:6c:02:a8:e0:ba:2f:fa:b9:61:6c: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DD:35:3C:E5:D4:99:B5:7C:92:8C:D6:57:0F:2D:AE:32:E8:79:CB X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9e:7c:9b:1d:9b:d1:07:3d:22:f4:46:7d:10:e0:c7:61:32: 4d:5d:de:5c:58:28:25:23:9f:f3:c7:06:e2:5e:0b:6b:3c:9e: 0c:e5:70:d4:48:eb:e0:38:81:2c:41:7b:f4:bc:a7:3c:9c:a4: 3c:ae:f1:3e:5e:6f:f8:9d:ac:46:5b:30:30:b9:9f:80:77:7f: d7:5e:a7:b8:f1:18:50:3e:9e:4f:6f:81:7c:e7:23:37:58:10: 79:1a:be:de:ac:57:35:55:e4:66:e2:bb:b4:c6:42:07:70:ca: ae:a1:36:6f:1b:37:c8:bb:dc:cf:02:82:22:0d:66:63:b7:5e: 10:70:8c:de:c1:de:88:f9:51:15:ab:85:af:0f:c5:d5:19:ef: bd:89:a0:71:1d:69:33:a4:8d:bc:71:9d:25:05:a1:81:f7:86: a5:9d:bc:ed:6a:16:b0:09:5b:c9:26:fe:e9:0d:5a:e7:f8:7d: cb:49:22:1e:6c:77:18:d2:ab:ca:8c:c5:b8:9c:06:78:84:9a: 53:d8:a4:15:23:a3:1e:c9:cf:51:43:d2:75:bc:d1:d3:40:8e: 53:5f:5f:70:32:49:75:c9:a6:6b:44:72:e3:0f:4a:08:49:2b: 60:01:74:e9:13:e9:10:45:41:62:85:0d:5d:28:c1:8e:e3:0e: ac:c3:4c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjUwNzAyMTU1NTM0WhcNMjUwNzA5MTU1NTM0WjAYMRYwFAYD VQQDEw02ODY1NTY3Ni1lYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxK6AtOJaQ7UgR5EeIa3iY9mhsbE6+qxbxQzwv1J2Ff9Xwj5AvOEjXlyp6Nsc LLxwDfnm6ZZyBpvt783Odhn4OU+8qLZy2QXH53NiwXruGGdYh6ghc5ldl8t9FX3l 2CjjFcWzYLFxD8k5IH6s2+LCbkcE/wnuxIgFAV1Lraz2j8NFqF9IDDRSiPgmCK++ Mcd4K4arXfnROmRmpc93HVLfDhi6IF9WcgXarkWbiCWMoK4hw+luReKNZT8zFNoP 4G5SecISPKMnz1hDdnzgUb1PRKpkxlQpFHohOEWNIj3Hs5OffGKkqLuW4A2wFb/N 2imu1fH0VmwCqOC6L/q5YWwaSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCndNTzl 1Jm1fJKM1lcPLa4y6HnLMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+nnybHZvRBz0i9EZ9EODHYTJNXd5cWCglI5/zxwbiXgtrPJ4M5XDU SOvgOIEsQXv0vKc8nKQ8rvE+Xm/4naxGWzAwuZ+Ad3/XXqe48RhQPp5Pb4F85yM3 WBB5Gr7erFc1VeRm4ru0xkIHcMquoTZvGzfIu9zPAoIiDWZjt14QcIzewd6I+VEV q4WvD8XVGe+9iaBxHWkzpI28cZ0lBaGB94alnbztahawCVvJJv7pDVrn+H3LSSIe bHcY0qvKjMW4nAZ4hJpT2KQVI6Meyc9RQ9J1vNHTQI5TX19wMkl1yaZrRHLjD0oI SStgAXTpE+kQRUFihQ1dKMGO4w6sw0yF -----END CERTIFICATE-----Generated at Thu Jul 3 17:39:22 2025 by rpki-client