$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: wW93pdz1iRTiq9QXxuG6I7H/9SDV/COZpujtoezGdMI= Subject key identifier: 83:14:43:08:16:E7:38:40:97:E8:43:FE:77:F5:6F:15:6E:02:6B:8B Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 082E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 0822 Signing time: Fri 22 Aug 2025 20:58:58 +0000 Manifest this update: Fri 22 Aug 2025 20:58:57 +0000 Manifest next update: Fri 29 Aug 2025 20:58:57 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: S3aSv9U7VwYCituTYCJwalb0ZyhPGCbScAUwfGOdaFg=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Aug 22 20:58:57 2025 GMT Not After : Aug 29 20:58:57 2025 GMT Subject: CN=68a8da11-24d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:19:69:bc:b7:0f:61:3f:a7:2b:73:e4:ae: cc:f5:a9:fb:c8:76:0d:44:91:30:01:4c:b9:66:5a: 04:93:f5:6a:71:fc:1e:a6:ef:ec:1a:b0:f8:22:50: 39:97:e4:32:96:b5:5e:af:07:a4:54:92:d2:72:a4: 01:3b:8f:00:c5:db:cc:2d:ac:d0:15:cf:b1:27:bc: 93:fe:ad:7e:14:7d:ec:16:ed:27:64:9c:96:78:3e: 35:1d:46:a1:dc:97:55:eb:df:79:36:2c:4b:e8:35: 74:da:61:0b:04:27:6b:f5:3d:cd:c5:79:2b:a4:d8: 3a:33:d2:10:0f:13:16:1d:ee:64:19:66:ae:22:f5: 4d:de:ba:2c:4a:23:35:f2:3d:df:31:35:6f:c8:76: 68:34:82:25:c1:fd:6e:9b:ee:86:d9:a9:0a:8d:39: 4e:5a:85:e0:fb:35:78:c1:73:17:98:c6:c0:b6:1c: cb:f3:ea:d9:66:1a:a0:03:dd:5b:e4:16:56:57:00: e9:69:3f:47:4f:ab:af:9c:01:1a:8c:67:7c:34:ab: 78:2f:ac:6f:db:87:8b:11:5f:b2:20:c0:cd:31:84: 73:28:57:09:3e:ee:38:e7:b5:fd:b5:74:95:fb:ba: 7a:34:39:ce:5e:be:ce:16:95:04:94:04:c9:f9:37: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:14:43:08:16:E7:38:40:97:E8:43:FE:77:F5:6F:15:6E:02:6B:8B X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9e:08:62:13:8e:58:fb:5c:a1:46:b8:18:ad:73:85:c5:1b: 49:c1:85:cb:7c:68:91:15:ec:d4:de:6f:d3:09:86:8e:a7:1f: 58:06:81:0d:26:cd:00:0b:50:12:7f:fe:67:00:13:8e:30:22: 47:96:d1:cd:8f:1a:b5:06:74:e7:3c:c4:4a:1a:bd:d0:50:bd: b2:bc:ec:75:9b:c2:3a:7b:89:42:3a:cd:b0:57:87:bf:e3:19: 0b:76:01:e3:40:f1:97:2c:c2:ce:75:c8:44:07:bc:17:3b:2b: 85:6c:0f:18:96:09:9c:ba:60:8e:c1:55:bf:1d:a7:a2:cd:fe: c8:ce:f3:11:f1:20:30:28:37:16:87:99:f2:1a:17:4b:a9:84: 31:a4:4a:cb:d6:d2:61:b6:bf:4d:5a:e6:a1:b8:73:fb:f7:ba: 84:46:dc:80:a2:0d:1c:04:4a:b7:03:a4:4a:44:8f:3b:3a:09: 7d:65:fd:7c:77:75:1a:ed:9d:a4:af:09:d1:1f:b6:3f:67:80: 66:05:cb:95:d7:4c:c4:7e:cb:93:52:4b:8c:3d:63:35:25:c3: f4:07:51:1a:05:36:55:51:0f:47:c3:73:e0:2c:68:40:0f:00: d1:bf:7f:ff:5a:89:d8:91:46:52:fe:a8:85:8d:ae:e5:d7:9c: bc:a5:5a:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjUwODIyMjA1ODU3WhcNMjUwODI5MjA1ODU3WjAYMRYwFAYD VQQDEw02OGE4ZGExMS0yNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFoZaby3D2E/pytz5K7M9an7yHYNRJEwAUy5ZloEk/Vqcfwepu/sGrD4IlA5 l+QylrVerwekVJLScqQBO48AxdvMLazQFc+xJ7yT/q1+FH3sFu0nZJyWeD41HUah 3JdV6995NixL6DV02mELBCdr9T3NxXkrpNg6M9IQDxMWHe5kGWauIvVN3rosSiM1 8j3fMTVvyHZoNIIlwf1um+6G2akKjTlOWoXg+zV4wXMXmMbAthzL8+rZZhqgA91b 5BZWVwDpaT9HT6uvnAEajGd8NKt4L6xv24eLEV+yIMDNMYRzKFcJPu4457X9tXSV +7p6NDnOXr7OFpUElATJ+Tc/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMUQwgW 5zhAl+hD/nf1bxVuAmuLMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcnghiE45Y+1yhRrgYrXOFxRtJwYXLfGiRFezU3m/TCYaOpx9YBoEN Js0AC1ASf/5nABOOMCJHltHNjxq1BnTnPMRKGr3QUL2yvOx1m8I6e4lCOs2wV4e/ 4xkLdgHjQPGXLMLOdchEB7wXOyuFbA8YlgmcumCOwVW/Haeizf7IzvMR8SAwKDcW h5nyGhdLqYQxpErL1tJhtr9NWuahuHP797qERtyAog0cBEq3A6RKRI87Ogl9Zf18 d3Ua7Z2krwnRH7Y/Z4BmBcuV10zEfsuTUkuMPWM1JcP0B1EaBTZVUQ9Hw3PgLGhA DwDRv3//WonYkUZS/qiFja7l15y8pVr7 -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:54 2025 by rpki-client