$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json) Hash identifier: FhgcjZkCTL227IuFJ7x6R3CHkSWcEPw8TWndbqqCl10= Subject key identifier: 15:3A:FE:43:09:15:AD:75:24:2C:BC:E1:1A:61:03:F1:0B:76:66:D3 Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft Manifest number: 36 Signing time: Fri 05 Sep 2025 08:08:54 +0000 Manifest this update: Fri 05 Sep 2025 08:08:53 +0000 Manifest next update: Fri 12 Sep 2025 08:08:53 +0000 Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: 1p01O0vFYN5R39s9T6FlCiRhfBzph5XxAVmsjyFiB2U=) 2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=) 3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: YUDZaJzqTJAMIH2aYnffmm6rXB/hTcHYJMvuVkjpDWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Sep 5 08:08:53 2025 GMT Not After : Sep 12 08:08:53 2025 GMT Subject: CN=68ba9a95-b657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:df:71:76:5b:de:87:0c:ad:7d:8a:09:ba: b1:87:0d:7e:c8:f5:a1:02:67:9b:b8:ee:b8:b5:07: a4:e8:ab:1f:86:66:8d:70:06:bc:3f:2c:3c:b5:9f: b7:81:15:30:98:1f:25:66:25:31:f3:70:a2:26:98: 8d:3f:4f:7d:82:70:d8:61:7c:d1:34:08:20:19:df: 2b:91:46:39:3b:e2:e2:a2:a9:da:3f:64:db:23:e6: 21:52:64:f0:92:8b:fe:b1:f5:9a:66:81:10:4c:19: 7a:04:97:4e:4e:3e:d2:d5:c3:58:c9:9c:99:79:72: 6f:38:99:65:50:da:c1:4e:3f:f5:bb:dc:21:69:db: db:b1:7b:63:82:ee:9a:f2:40:83:2c:10:24:ec:0d: ba:40:fd:ad:ee:14:97:af:2d:18:9f:26:7e:98:60: 0e:91:de:07:17:0a:e7:17:62:dc:c2:d1:d6:57:bf: aa:df:e5:d3:f8:10:72:ff:db:77:49:ff:b1:92:9a: 7f:68:ac:1b:c1:59:82:eb:9a:af:ac:ba:e9:ee:b3: ff:34:65:36:d2:cf:97:78:0c:28:7c:35:7d:b5:09: ab:64:7d:2c:f8:37:b2:fd:ae:bc:e2:a9:f2:23:12: a4:1e:b7:d0:54:ef:f9:16:6a:b0:0a:ae:5b:04:31: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3A:FE:43:09:15:AD:75:24:2C:BC:E1:1A:61:03:F1:0B:76:66:D3 X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c7:04:7c:9b:a9:17:11:34:83:b1:b1:85:21:f2:21:b8:88: d0:c0:69:63:e3:4a:b8:ab:7c:d6:f1:34:2d:aa:cf:10:53:be: 62:b4:10:f1:32:c3:d0:bb:14:28:7e:7f:30:f1:70:47:46:0c: 1c:c4:23:a7:41:c4:55:a9:6e:cb:b1:0f:fe:8b:dc:28:9e:e7: 88:64:31:36:cb:f3:d8:bd:30:0f:57:57:af:5c:a6:9f:ec:f3: af:85:db:8d:e5:68:90:cb:40:03:83:4a:b6:65:4d:2b:da:8f: cb:38:a2:cc:f3:82:cc:17:52:65:19:fe:b3:5f:09:4c:43:a6: b9:26:9e:c3:af:56:cd:25:18:a3:9d:34:9b:a3:0f:5a:99:99: 26:c2:97:67:c3:85:3c:02:63:99:aa:1d:4d:75:cb:d0:c1:4d: ff:49:67:01:86:64:38:bc:10:79:3d:84:70:15:92:3b:cd:d8: ff:f5:13:09:c2:98:fa:7e:92:45:2d:41:60:0f:5e:43:b0:e5: d1:52:35:37:1b:fd:4f:99:43:99:25:7f:6d:3b:e6:de:fe:9d: b7:84:6e:90:44:49:aa:aa:86:f4:90:c9:5b:8b:72:49:83:d7: ca:7b:d1:35:c1:58:b2:fa:12:7a:28:69:a7:10:07:4d:60:5d: b6:74:64:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF NUFERjYzQjAeFw0yNTA5MDUwODA4NTNaFw0yNTA5MTIwODA4NTNaMBgxFjAUBgNV BAMTDTY4YmE5YTk1LWI2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTEt9xdlvehwytfYoJurGHDX7I9aECZ5u47ri1B6Toqx+GZo1wBrw/LDy1n7eB FTCYHyVmJTHzcKImmI0/T32CcNhhfNE0CCAZ3yuRRjk74uKiqdo/ZNsj5iFSZPCS i/6x9ZpmgRBMGXoEl05OPtLVw1jJnJl5cm84mWVQ2sFOP/W73CFp29uxe2OC7pry QIMsECTsDbpA/a3uFJevLRifJn6YYA6R3gcXCucXYtzC0dZXv6rf5dP4EHL/23dJ /7GSmn9orBvBWYLrmq+suunus/80ZTbSz5d4DCh8NX21CatkfSz4N7L9rrziqfIj EqQet9BU7/kWarAKrlsEMXsNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFTr+QwkV rXUkLLzhGmED8Qt2ZtMwHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnHBHybqRcRNIOxsYUh8iG4iNDAaWPjSrirfNbxNC2qzxBTvmK0EPEy w9C7FCh+fzDxcEdGDBzEI6dBxFWpbsuxD/6L3Cie54hkMTbL89i9MA9XV69cpp/s 86+F243laJDLQAODSrZlTSvaj8s4oszzgswXUmUZ/rNfCUxDprkmnsOvVs0lGKOd NJujD1qZmSbCl2fDhTwCY5mqHU11y9DBTf9JZwGGZDi8EHk9hHAVkjvN2P/1EwnC mPp+kkUtQWAPXkOw5dFSNTcb/U+ZQ5klf2075t7+nbeEbpBESaqqhvSQyVuLckmD 18p70TXBWLL6EnooaacQB01gXbZ0ZDA= -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:09 2025 by rpki-client