$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: aICPFKwlMzJX1XNlg/O2/xH8SZaRhj8n/aVIQeNvhU0= Subject key identifier: D3:A3:FC:B4:09:E9:78:FD:59:5D:E1:3F:74:AE:A9:85:F6:32:84:BA Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 2412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 2401 Signing time: Fri 22 Aug 2025 15:51:30 +0000 Manifest this update: Fri 22 Aug 2025 15:51:29 +0000 Manifest next update: Fri 29 Aug 2025 15:51:29 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: d3EcTfjxvVSQGg/05OE1tDP9Gibc135uU7gBAU6S3eI=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9234 (0x2412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Aug 22 15:51:29 2025 GMT Not After : Aug 29 15:51:29 2025 GMT Subject: CN=68a89202-bcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:7e:f5:29:f0:fc:a1:be:a0:3f:0b:5b:e9: b2:bc:97:7f:43:87:0a:4e:5a:66:1a:83:2e:57:92: 98:d2:d2:16:10:db:3b:73:33:00:8d:4a:98:8f:dd: 44:80:6e:91:26:75:ed:32:8d:ea:19:50:04:4a:2f: b2:d2:2e:6e:f4:f2:17:1e:bf:fe:6f:22:a8:7d:93: 25:14:43:fc:4a:80:73:f8:8a:f0:49:e1:1d:d8:d4: 74:d6:78:ce:33:3e:0d:e2:d2:e4:a0:25:48:f8:65: 22:ed:a2:b2:da:12:d2:01:8d:dc:da:49:51:c2:e4: 75:aa:5a:03:88:b3:ef:78:35:6b:76:cc:07:38:30: cd:66:df:aa:ab:85:42:83:dd:89:a7:3a:79:dd:2c: 38:b6:4f:ca:ec:85:d3:f5:8c:62:11:b4:22:f8:26: d2:6a:56:c1:5c:77:ec:fe:3c:cd:f2:da:30:38:cb: 19:6d:d7:35:73:d5:2b:e4:66:13:83:e6:76:41:5b: a3:a3:57:44:2e:f5:b9:b1:54:39:94:08:78:03:1d: e2:a8:89:87:55:5d:16:e3:b2:2d:5b:65:d6:8c:34: 63:0d:61:c4:96:40:af:c8:51:3c:c2:f9:d7:20:66: e7:9d:30:96:8c:f9:b5:08:05:08:5a:e8:a1:46:3b: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A3:FC:B4:09:E9:78:FD:59:5D:E1:3F:74:AE:A9:85:F6:32:84:BA X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2f:b9:c4:92:05:85:e4:94:42:1e:c7:23:d1:47:57:2e:87: 0c:69:9e:49:36:e8:98:cb:2b:78:9d:05:4b:43:71:cc:99:36: 2b:5e:81:01:23:bb:d6:e4:f1:4e:be:12:0c:9a:86:4d:f8:b4: d8:bd:ba:2b:c6:d6:9c:eb:ff:05:e8:3a:96:de:c3:9e:08:80: 0d:41:04:b8:89:43:38:10:e1:cd:63:6c:73:77:f6:31:11:5e: aa:e1:1c:f3:61:fe:e6:f1:fb:cf:d6:ec:d5:ec:60:90:b2:41: f7:07:fe:0d:3a:3a:8b:7d:71:1d:16:a4:ac:80:37:04:1a:c7: 02:93:96:cf:3d:0c:11:6f:7d:1e:35:39:7d:35:a9:af:16:87: 05:dc:b6:a5:01:35:9b:61:19:a8:80:3e:44:91:05:b6:8b:07: f6:d9:8a:d3:16:ea:6a:bb:f7:b6:e5:8f:92:20:5a:bb:69:35: 05:8c:d0:99:42:72:c4:3a:fd:8c:4a:74:3b:c4:9a:64:b4:e6: 41:06:d2:0a:45:81:a7:de:08:00:a2:ed:99:28:09:c2:80:26: be:52:81:0e:d0:c7:14:5a:89:0c:51:ae:51:f7:4e:52:f3:06: 40:13:65:9f:b9:ac:05:2b:69:b0:d8:c8:3b:c7:22:61:4d:ac: 38:e4:dd:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjUwODIyMTU1MTI5WhcNMjUwODI5MTU1MTI5WjAYMRYwFAYD VQQDEw02OGE4OTIwMi1iY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZ5+9Snw/KG+oD8LW+myvJd/Q4cKTlpmGoMuV5KY0tIWENs7czMAjUqYj91E gG6RJnXtMo3qGVAESi+y0i5u9PIXHr/+byKofZMlFEP8SoBz+IrwSeEd2NR01njO Mz4N4tLkoCVI+GUi7aKy2hLSAY3c2klRwuR1qloDiLPveDVrdswHODDNZt+qq4VC g92Jpzp53Sw4tk/K7IXT9YxiEbQi+CbSalbBXHfs/jzN8towOMsZbdc1c9Ur5GYT g+Z2QVujo1dELvW5sVQ5lAh4Ax3iqImHVV0W47ItW2XWjDRjDWHElkCvyFE8wvnX IGbnnTCWjPm1CAUIWuihRjuBEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOj/LQJ 6Xj9WV3hP3SuqYX2MoS6MB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaL7nEkgWF5JRCHscj0UdXLocMaZ5JNuiYyyt4nQVLQ3HMmTYrXoEB I7vW5PFOvhIMmoZN+LTYvborxtac6/8F6DqW3sOeCIANQQS4iUM4EOHNY2xzd/Yx EV6q4RzzYf7m8fvP1uzV7GCQskH3B/4NOjqLfXEdFqSsgDcEGscCk5bPPQwRb30e NTl9NamvFocF3LalATWbYRmogD5EkQW2iwf22YrTFupqu/e25Y+SIFq7aTUFjNCZ QnLEOv2MSnQ7xJpktOZBBtIKRYGn3ggAou2ZKAnCgCa+UoEO0McUWokMUa5R905S 8wZAE2WfuawFK2mw2Mg7xyJhTaw45N3q -----END CERTIFICATE-----Generated at Sun Aug 24 04:47:55 2025 by rpki-client