$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: k1VRNQVgQKaF9UzqnnwjXsmMLAr0Xz3BGDuQa7qIXLU= Subject key identifier: DB:FD:56:21:E8:0D:0C:0B:64:EC:AF:BA:B6:1A:6A:7E:ED:B4:7D:AB Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 25AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2579 Signing time: Sat 06 Sep 2025 14:20:49 +0000 Manifest this update: Sat 06 Sep 2025 14:20:49 +0000 Manifest next update: Sat 13 Sep 2025 14:20:49 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: Lt7zSXY/8XauOTRr5714mmzJ12Jd6pTiSRgKwGEoDqI=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9647 (0x25af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Sep 6 14:20:49 2025 GMT Not After : Sep 13 14:20:49 2025 GMT Subject: CN=68bc4341-2e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:ed:6c:d9:c0:84:e4:25:06:06:bb:c7:21: c0:d5:14:29:25:e2:b4:2f:d9:c0:19:91:7c:86:ee: 31:c6:1b:1e:51:f2:8f:db:65:f3:1e:90:9a:fd:62: 59:6f:6c:4b:a7:78:ef:dd:0a:e7:22:69:64:9d:6a: 02:46:52:8a:10:f1:f7:24:c8:f8:fb:c9:ba:44:a9: fa:82:e1:22:2a:cf:b8:8e:7f:ca:0b:47:23:8d:06: 8a:78:1c:8e:33:fd:ca:e5:37:72:a7:d8:fd:ac:9a: 84:85:27:0c:54:f4:74:df:dd:60:0b:d3:ec:72:2a: ca:8b:fc:88:d8:79:34:1a:03:43:71:72:6a:66:89: 5f:e4:a4:8d:f2:0d:4d:d9:f1:0a:97:59:3a:71:39: 5a:05:0e:38:e8:d8:c0:a5:44:0e:eb:bd:26:f1:90: 86:e7:5d:cf:12:4d:36:f5:cc:e4:a0:5b:77:43:ab: d3:9f:ea:8f:49:40:66:fb:6a:8a:af:e6:a2:93:a7: ce:99:5b:c5:8b:37:43:bd:4f:a2:12:34:a0:81:65: 16:23:65:54:3e:19:15:a0:11:38:b0:50:00:fa:15: 9a:24:d0:52:36:31:ef:15:2b:58:5d:e7:a6:1e:7c: ea:90:de:33:fd:01:48:fe:8d:d2:90:26:a7:9f:cc: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FD:56:21:E8:0D:0C:0B:64:EC:AF:BA:B6:1A:6A:7E:ED:B4:7D:AB X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a9:5d:57:72:2a:6a:40:3a:6f:59:a0:93:a2:47:19:ed:53: 6a:1e:c0:9f:cb:66:90:59:96:01:16:85:c2:ad:42:82:5c:6a: 55:b2:d2:37:82:f2:e8:c0:52:f0:8d:2a:8f:6f:77:15:0a:a5: 0f:5f:a4:31:aa:52:3b:3f:a7:99:96:97:0d:b3:5c:e0:72:ba: 7a:db:a6:10:1f:2d:43:e2:38:e7:ed:67:4e:73:fc:71:43:aa: bb:31:bb:d1:8d:38:86:d9:d4:4e:db:e9:a3:54:d6:19:9f:fb: f9:c6:38:b8:39:24:a7:09:22:e7:74:a8:b4:a1:73:83:ba:b4: 32:82:2a:8d:ee:c2:a2:77:3c:bd:1f:1c:9a:6d:de:72:be:55: b6:8c:4b:f3:f8:d8:b0:3d:a8:5e:46:b8:b1:c8:e3:94:b3:0f: e2:f4:a2:c9:62:1f:b7:a6:97:f3:cf:1c:68:24:7d:02:a6:da: 7b:82:3b:71:8d:1d:50:b7:38:a0:18:fe:72:7f:8f:87:64:3d: eb:da:fe:c2:c4:51:a7:3e:25:0c:23:23:0b:2e:db:bd:a5:56: 49:4c:ef:4d:f5:5d:b4:46:9f:2d:73:ce:60:2b:b3:7f:bd:97: 96:3d:1d:7e:14:96:58:41:90:8d:fa:06:80:3f:12:9d:3e:5b: 5b:b4:14:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwOTA2MTQyMDQ5WhcNMjUwOTEzMTQyMDQ5WjAYMRYwFAYD VQQDEw02OGJjNDM0MS0yZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5ftbNnAhOQlBga7xyHA1RQpJeK0L9nAGZF8hu4xxhseUfKP22XzHpCa/WJZ b2xLp3jv3QrnImlknWoCRlKKEPH3JMj4+8m6RKn6guEiKs+4jn/KC0cjjQaKeByO M/3K5Tdyp9j9rJqEhScMVPR0391gC9PscirKi/yI2Hk0GgNDcXJqZolf5KSN8g1N 2fEKl1k6cTlaBQ446NjApUQO670m8ZCG513PEk029czkoFt3Q6vTn+qPSUBm+2qK r+aik6fOmVvFizdDvU+iEjSggWUWI2VUPhkVoBE4sFAA+hWaJNBSNjHvFStYXeem HnzqkN4z/QFI/o3SkCann8yLaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNv9ViHo DQwLZOyvurYaan7ttH2rMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqV1XcipqQDpvWaCTokcZ7VNqHsCfy2aQWZYBFoXCrUKCXGpVstI3 gvLowFLwjSqPb3cVCqUPX6QxqlI7P6eZlpcNs1zgcrp626YQHy1D4jjn7WdOc/xx Q6q7MbvRjTiG2dRO2+mjVNYZn/v5xji4OSSnCSLndKi0oXODurQygiqN7sKidzy9 Hxyabd5yvlW2jEvz+NiwPaheRrixyOOUsw/i9KLJYh+3ppfzzxxoJH0Cptp7gjtx jR1QtzigGP5yf4+HZD3r2v7CxFGnPiUMIyMLLtu9pVZJTO9N9V20Rp8tc85gK7N/ vZeWPR1+FJZYQZCN+gaAPxKdPltbtBQm -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:27 2025 by rpki-client