$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: Sokmf26f+QAONgbv3r27sIxMEhcLttqf3MZAxzIY/Hw= Subject key identifier: D4:C5:CB:3A:6A:58:3D:25:03:B5:AA:32:E5:30:C3:B9:CF:46:B5:DE Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2CDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2CC8 Signing time: Fri 22 Aug 2025 15:34:19 +0000 Manifest this update: Fri 22 Aug 2025 15:34:18 +0000 Manifest next update: Fri 29 Aug 2025 15:34:18 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: WgvMdFT4WKIKx4hduaJytNeMXdTo8yCd00XaXbTUwHE=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: R9f6Z3Uevp4d36wvfS3ESJSWBBwm4wuAIByOXNTGRgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11486 (0x2cde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Aug 22 15:34:18 2025 GMT Not After : Aug 29 15:34:18 2025 GMT Subject: CN=68a88dfa-b9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:c2:09:ae:73:00:dc:63:65:6c:36:d5:8e: 99:21:10:64:83:34:6a:02:ac:20:6d:0f:25:e8:15: f2:c7:b1:57:6b:d3:81:67:d7:38:e3:78:b1:7b:17: b7:a1:e5:0c:d9:0f:20:90:91:30:e7:73:0f:e9:80: bf:2b:e9:11:3d:b1:07:50:93:61:da:4c:46:66:20: 0c:a3:83:2e:f1:70:bc:5d:0b:a3:2b:ae:60:e9:6f: 96:50:b6:17:5e:88:a8:34:22:58:a0:d3:fb:e7:d7: 2f:79:fd:66:40:65:85:20:30:4c:28:da:21:df:18: 01:95:8e:ea:8e:6a:f9:31:81:c0:bb:c6:e1:63:2b: ff:2f:7b:6b:d8:cd:eb:ae:5b:d4:ab:92:8e:40:88: 44:cd:ca:79:eb:2b:ff:1a:0e:79:0c:11:e0:03:de: bb:90:88:2a:61:32:82:3f:13:4d:33:ab:16:12:5d: 7c:12:58:91:55:02:30:83:9d:64:fb:16:47:79:69: 4b:6a:c5:54:4c:b5:e0:06:b2:9a:a7:14:55:4d:86: d1:5f:9d:ce:98:72:0d:f5:d1:af:d2:e1:67:b4:f3: fb:17:85:02:aa:ca:f2:c5:f6:32:9b:fd:d3:8b:f9: a7:7a:f0:9a:46:8f:62:45:ef:47:f7:fa:4d:be:42: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C5:CB:3A:6A:58:3D:25:03:B5:AA:32:E5:30:C3:B9:CF:46:B5:DE X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:90:72:84:cc:17:53:93:45:68:6d:a6:0c:f9:fe:c1:bd:a1: a2:ef:06:fe:be:21:1f:f8:d5:c0:75:af:fe:3f:d2:86:59:ba: 2a:97:45:f0:6b:bb:4d:e3:a7:23:8b:0b:24:10:c9:d5:5a:5e: 45:58:58:0d:72:aa:3f:e2:86:67:ff:75:92:85:92:cb:62:04: cf:99:40:ef:3c:e0:f1:32:d8:0f:8e:79:03:6a:21:fd:f7:ad: 8a:7d:a3:2e:0b:6a:42:a4:2f:3b:c7:a4:ec:81:10:14:6b:37: fd:5a:57:d2:44:8b:7b:05:5c:f0:18:ab:7e:49:01:07:60:ca: 38:36:10:fa:38:e4:18:11:a7:8b:8f:19:a8:a4:7d:21:46:d8: a7:86:fd:d2:93:61:32:06:70:29:72:6c:09:1a:3e:2a:71:4b: 42:e4:e7:a4:3a:f1:b2:77:60:3a:c4:98:3c:21:ab:99:5f:5c: 8e:44:16:a8:fc:4d:0b:f7:4c:15:d0:0b:9a:65:35:77:66:e3: 6c:20:0b:0b:c6:fa:e5:73:93:ba:64:fa:83:b0:18:3b:74:ce: a3:36:c0:51:97:35:a7:42:22:52:a9:07:8b:11:0f:9a:d0:45: 94:06:68:b9:ae:30:63:9d:07:53:60:09:93:91:bc:42:12:32: 43:3f:63:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUwODIyMTUzNDE4WhcNMjUwODI5MTUzNDE4WjAYMRYwFAYD VQQDEw02OGE4OGRmYS1iOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRrCCa5zANxjZWw21Y6ZIRBkgzRqAqwgbQ8l6BXyx7FXa9OBZ9c443ixexe3 oeUM2Q8gkJEw53MP6YC/K+kRPbEHUJNh2kxGZiAMo4Mu8XC8XQujK65g6W+WULYX XoioNCJYoNP759cvef1mQGWFIDBMKNoh3xgBlY7qjmr5MYHAu8bhYyv/L3tr2M3r rlvUq5KOQIhEzcp56yv/Gg55DBHgA967kIgqYTKCPxNNM6sWEl18EliRVQIwg51k +xZHeWlLasVUTLXgBrKapxRVTYbRX53OmHIN9dGv0uFntPP7F4UCqsryxfYym/3T i/mnevCaRo9iRe9H9/pNvkIYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTFyzpq WD0lA7WqMuUww7nPRrXeMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUkHKEzBdTk0VobaYM+f7BvaGi7wb+viEf+NXAda/+P9KGWboql0Xw a7tN46cjiwskEMnVWl5FWFgNcqo/4oZn/3WShZLLYgTPmUDvPODxMtgPjnkDaiH9 962KfaMuC2pCpC87x6TsgRAUazf9WlfSRIt7BVzwGKt+SQEHYMo4NhD6OOQYEaeL jxmopH0hRtinhv3Sk2EyBnApcmwJGj4qcUtC5OekOvGyd2A6xJg8IauZX1yORBao /E0L90wV0AuaZTV3ZuNsIAsLxvrlc5O6ZPqDsBg7dM6jNsBRlzWnQiJSqQeLEQ+a 0EWUBmi5rjBjnQdTYAmTkbxCEjJDP2MK -----END CERTIFICATE-----Generated at Sat Aug 23 20:18:40 2025 by rpki-client