$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: SUJx18KQFtHjs4kf7zxC+Q6+Hkp8eFylwomQdlSO93U= Subject key identifier: 0B:AA:EF:F2:CE:90:DF:D9:7C:93:64:B1:32:48:AE:E0:85:10:E6:16 Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: EE Signing time: Sat 19 Jul 2025 05:31:49 +0000 Manifest this update: Sat 19 Jul 2025 05:31:48 +0000 Manifest next update: Sat 26 Jul 2025 05:31:48 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: kSZDiajo6eu+1YF43B/iF0t7i6PDhQSRFugLlaFNpQg=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Jul 19 05:31:48 2025 GMT Not After : Jul 26 05:31:48 2025 GMT Subject: CN=687b2dc5-bd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:70:8a:07:b9:2f:42:eb:a6:45:de:ba:cb: 2f:72:82:e3:2b:16:70:7c:f3:a4:d4:33:b3:d6:67: 11:0d:97:fc:62:58:f2:9d:b9:47:65:e2:52:2a:76: 2b:fa:04:ad:fe:90:ee:ff:a8:9a:f0:50:4f:38:50: 52:83:77:b4:f2:33:8a:ce:b3:e3:87:9c:e8:1d:b7: 9f:4f:6d:fd:81:42:e7:3d:6a:ad:a3:12:13:c2:4a: bd:c2:fb:b7:fe:4b:63:16:6f:4d:d0:f9:a0:ff:f9: 54:7e:a0:33:9f:e2:bf:89:d6:77:0d:c8:90:82:a0: e3:9f:47:a8:4b:6d:a3:66:c0:70:44:2b:22:69:9b: f5:f5:b6:e3:b8:9f:0c:10:00:de:be:1c:46:09:e5: 00:49:c1:8d:8f:9b:04:f3:d3:89:5a:9a:6d:36:e2: 08:b4:ce:12:d3:c6:35:76:26:1e:db:77:dd:8f:48: ab:9c:5c:94:94:3b:c4:3e:5e:c6:95:b5:f5:3f:e1: ab:7b:9d:dc:8b:3f:e7:f7:dc:c7:bc:36:fd:3f:58: cd:e2:ff:51:7f:fb:37:a7:23:e5:c3:d3:b7:76:eb: c9:dc:80:c2:0f:d3:ab:7b:4e:9c:61:7e:b0:20:10: cc:9f:46:c3:85:bb:16:aa:90:e5:19:92:b1:35:d3: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AA:EF:F2:CE:90:DF:D9:7C:93:64:B1:32:48:AE:E0:85:10:E6:16 X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ce:46:62:b0:a2:56:5d:61:1e:65:bf:2f:ae:34:4c:0d:63: 34:fc:16:4e:19:37:88:d1:bc:b5:34:b7:cd:0d:4c:c9:dc:47: 50:57:14:4f:75:a0:ad:84:0c:5c:f2:fe:81:0d:df:25:ac:c3: 5b:ad:42:ce:41:9f:a2:cd:49:0f:11:b4:d3:93:99:66:94:90: 92:45:28:b5:56:cd:4b:dc:ee:fc:5d:03:3b:8c:17:32:8e:f3: c7:10:80:8e:be:88:b6:ee:93:88:27:01:ad:6b:e0:30:9b:8d: a3:be:ed:8d:2c:54:d9:f9:39:36:86:c9:24:99:88:be:04:f0: 3b:ba:55:79:bb:35:70:05:ad:7e:e6:3c:e7:5f:89:6a:c0:c4: 8d:4e:68:49:82:44:2a:92:a1:1c:47:d7:4d:17:f1:fe:28:59: 95:0b:f1:3c:5f:98:c5:35:5d:0c:7b:0f:5b:fd:c0:e3:36:5e: 21:57:a5:43:c2:20:e2:83:80:97:f0:01:e4:e2:a0:f7:0f:53: ac:0c:77:31:65:5e:49:8a:39:fa:5c:22:55:6f:91:c2:d4:f5: 46:a2:c1:b6:b6:5c:6d:59:cc:62:7d:6a:08:75:ba:57:75:8d: 67:f1:4b:85:83:83:77:0a:ac:6d:a3:e8:b4:f0:7a:ca:0e:0e: 97:0c:a5:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUwNzE5MDUzMTQ4WhcNMjUwNzI2MDUzMTQ4WjAYMRYwFAYD VQQDEw02ODdiMmRjNS1iZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgZwige5L0LrpkXeussvcoLjKxZwfPOk1DOz1mcRDZf8YljynblHZeJSKnYr +gSt/pDu/6ia8FBPOFBSg3e08jOKzrPjh5zoHbefT239gULnPWqtoxITwkq9wvu3 /ktjFm9N0Pmg//lUfqAzn+K/idZ3DciQgqDjn0eoS22jZsBwRCsiaZv19bbjuJ8M EADevhxGCeUAScGNj5sE89OJWpptNuIItM4S08Y1diYe23fdj0irnFyUlDvEPl7G lbX1P+Gre53ciz/n99zHvDb9P1jN4v9Rf/s3pyPlw9O3duvJ3IDCD9Ore06cYX6w IBDMn0bDhbsWqpDlGZKxNdPrnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuq7/LO kN/ZfJNksTJIruCFEOYWMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCszkZisKJWXWEeZb8vrjRMDWM0/BZOGTeI0by1NLfNDUzJ3EdQVxRP daCthAxc8v6BDd8lrMNbrULOQZ+izUkPEbTTk5lmlJCSRSi1Vs1L3O78XQM7jBcy jvPHEICOvoi27pOIJwGta+Awm42jvu2NLFTZ+Tk2hskkmYi+BPA7ulV5uzVwBa1+ 5jznX4lqwMSNTmhJgkQqkqEcR9dNF/H+KFmVC/E8X5jFNV0Mew9b/cDjNl4hV6VD wiDig4CX8AHk4qD3D1OsDHcxZV5Jijn6XCJVb5HC1PVGosG2tlxtWcxifWoIdbpX dY1n8UuFg4N3Cqxto+i08HrKDg6XDKW5 -----END CERTIFICATE-----Generated at Sun Jul 20 07:45:04 2025 by rpki-client