$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: LRlqjszfJdmPLEfaWCeH+W2zqnQd+5M/00GM3NN7oQk= Subject key identifier: F8:6C:EA:76:F4:38:9F:CD:9D:40:9B:80:67:A2:8E:13:B2:C8:40:0F Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 2596 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2560 Signing time: Sun 20 Jul 2025 14:20:52 +0000 Manifest this update: Sun 20 Jul 2025 14:20:51 +0000 Manifest next update: Sun 27 Jul 2025 14:20:51 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: 75BlT+Q28aQDZbUmWbmUnSoq/ewOvWZfAmtR3z1zF64=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9622 (0x2596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Jul 20 14:20:51 2025 GMT Not After : Jul 27 14:20:51 2025 GMT Subject: CN=687cfb44-924f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:5e:79:67:7d:73:9d:1c:80:36:30:67:b5: f1:0f:87:53:8a:e9:20:20:c5:60:b9:c5:a0:01:e7: 2b:dd:e8:81:3c:45:09:d5:38:c7:4d:14:55:db:88: f3:ae:bc:ff:7f:19:59:a4:d2:d1:88:4f:76:a8:3d: 97:a7:86:ee:05:8c:e0:1d:88:36:ac:6a:e5:57:10: e9:40:5a:4b:12:4b:77:94:97:88:7d:bc:18:e5:5a: ae:77:22:56:1a:7f:00:49:9c:11:98:84:09:f6:9d: 7d:13:d8:32:ed:85:f1:7a:c5:e9:e0:9e:74:92:6d: af:92:c5:65:b7:f8:17:cd:d9:c5:72:0c:57:de:e5: 00:f1:88:08:af:19:d5:3e:68:e2:34:57:5b:13:2b: 97:5b:57:46:72:18:07:b2:1e:41:82:c2:98:21:62: 50:c5:45:de:66:d1:e5:91:8a:b2:cd:1b:8f:2a:4f: 95:54:41:fa:78:de:51:f4:3a:84:cf:7f:a0:d9:af: 37:70:1f:10:aa:41:50:4e:3a:00:ec:c1:d7:16:a9: 8f:04:68:28:de:f5:32:29:83:a4:78:ca:0c:92:ee: 25:3e:8d:c3:21:de:a3:8a:41:0b:98:24:32:d4:be: 35:64:44:d9:47:27:39:33:06:1f:7c:07:14:d9:a6: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6C:EA:76:F4:38:9F:CD:9D:40:9B:80:67:A2:8E:13:B2:C8:40:0F X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:72:c2:84:3e:4d:1e:bc:78:18:78:bb:10:f7:b5:0e:53:c4: 94:43:12:86:7a:ef:ea:12:9d:b5:6f:5f:33:5d:19:f1:c2:8b: 6b:75:74:11:b7:ac:a9:9b:c4:0a:ed:75:93:30:fe:02:e0:b1: fc:34:6b:67:74:d1:87:b2:fd:80:ca:be:fe:0d:2f:1b:5e:f8: a6:76:c9:ea:31:e7:bf:dd:b1:5d:5d:02:4f:62:21:a5:58:24: 7e:62:46:8c:45:a9:8c:3b:93:93:d9:bf:1f:bc:19:bf:c2:42: 86:d2:e4:cb:d8:63:f0:2d:09:57:95:a1:7b:e0:96:26:2c:95: 29:a0:f4:6e:25:a7:77:c9:52:9e:ed:0a:ce:a1:5b:4c:77:f0: 4c:3d:3b:67:e8:34:67:4d:c9:12:e0:5b:9b:67:96:b2:67:a9: f8:0b:a2:81:b8:2e:5c:af:27:1e:cf:3e:c6:c8:71:81:a3:d0: 9a:33:7a:6c:0c:17:9f:18:15:18:e6:a2:90:5e:99:d6:45:f4: ec:5e:70:ac:6d:5c:1e:19:05:75:7d:c0:ca:42:1d:bc:ec:f0: 2d:35:7a:d9:a7:95:94:37:b2:99:3e:06:01:47:69:81:f2:44: 78:53:70:db:80:32:1c:69:6c:ac:32:fe:9e:f8:8c:12:8c:27: 63:c4:08:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwNzIwMTQyMDUxWhcNMjUwNzI3MTQyMDUxWjAYMRYwFAYD VQQDEw02ODdjZmI0NC05MjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NheeWd9c50cgDYwZ7XxD4dTiukgIMVgucWgAecr3eiBPEUJ1TjHTRRV24jz rrz/fxlZpNLRiE92qD2Xp4buBYzgHYg2rGrlVxDpQFpLEkt3lJeIfbwY5VqudyJW Gn8ASZwRmIQJ9p19E9gy7YXxesXp4J50km2vksVlt/gXzdnFcgxX3uUA8YgIrxnV PmjiNFdbEyuXW1dGchgHsh5BgsKYIWJQxUXeZtHlkYqyzRuPKk+VVEH6eN5R9DqE z3+g2a83cB8QqkFQTjoA7MHXFqmPBGgo3vUyKYOkeMoMku4lPo3DId6jikELmCQy 1L41ZETZRyc5MwYffAcU2aZ2ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhs6nb0 OJ/NnUCbgGeijhOyyEAPMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/csKEPk0evHgYeLsQ97UOU8SUQxKGeu/qEp21b18zXRnxwotrdXQR t6ypm8QK7XWTMP4C4LH8NGtndNGHsv2Ayr7+DS8bXvimdsnqMee/3bFdXQJPYiGl WCR+YkaMRamMO5OT2b8fvBm/wkKG0uTL2GPwLQlXlaF74JYmLJUpoPRuJad3yVKe 7QrOoVtMd/BMPTtn6DRnTckS4FubZ5ayZ6n4C6KBuC5crycezz7GyHGBo9CaM3ps DBefGBUY5qKQXpnWRfTsXnCsbVweGQV1fcDKQh287PAtNXrZp5WUN7KZPgYBR2mB 8kR4U3DbgDIcaWysMv6e+IwSjCdjxAiF -----END CERTIFICATE-----Generated at Mon Jul 21 07:52:04 2025 by rpki-client