$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: kVrbcrY8sU8TCRZo3HXngCPTBEKIvXZqBCWBEWsXTXg= Subject key identifier: 81:C4:EB:9E:D9:BA:C4:4A:87:A8:53:C0:AC:21:78:F0:4C:78:2D:43 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 0825 Signing time: Sun 24 Aug 2025 20:51:08 +0000 Manifest this update: Sun 24 Aug 2025 20:51:07 +0000 Manifest next update: Sun 31 Aug 2025 20:51:07 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: ixKCXkfN7tiuUtUA2u42zaSqxsSzvwxFOe+jcghRZnM=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Aug 24 20:51:07 2025 GMT Not After : Aug 31 20:51:07 2025 GMT Subject: CN=68ab7b3b-bb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:5a:8e:5b:25:ca:85:81:22:eb:89:1f:d1: 5a:68:8e:fe:f0:54:e0:16:3f:aa:42:c3:1d:b7:e4: 0f:b5:6a:24:7c:de:22:9c:22:ce:02:b8:29:cc:c1: a0:2a:d2:b0:c0:ae:ca:d3:52:de:6b:bd:d7:d9:98: 14:55:54:18:93:59:29:d3:d6:0c:ba:ab:8e:eb:18: 40:a7:79:73:15:28:81:3f:ba:ad:f6:82:09:27:f8: 75:9b:ff:4c:5c:4f:1c:f9:ea:4e:76:6a:f8:0e:cd: 55:57:20:39:5a:99:5e:33:1d:6e:40:fb:ac:8e:5d: 1e:f7:82:68:4b:8a:c7:f8:5f:f8:72:fc:c5:f1:b9: 7c:35:87:9b:29:b4:5e:b2:1e:0b:60:84:4a:08:7e: 25:88:41:1f:78:79:ee:01:15:99:68:0b:fe:ee:29: e9:e4:8b:92:29:ed:92:64:5d:4e:7c:65:ea:4c:87: 10:be:ee:a7:c0:b0:83:ec:70:27:81:95:33:05:7e: 16:c5:0a:55:a6:bb:64:73:84:1e:8d:ef:2e:1c:de: 5e:55:1d:93:27:ec:4c:ba:15:ad:c3:db:b7:77:d2: 0d:38:2e:75:b9:80:41:06:0e:76:e3:ce:83:32:ce: 93:d3:2d:16:84:1c:44:3d:be:2f:3f:80:8e:1c:34: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C4:EB:9E:D9:BA:C4:4A:87:A8:53:C0:AC:21:78:F0:4C:78:2D:43 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d2:05:8a:78:2c:a3:53:82:54:af:cd:be:53:d0:8b:72:1b: 92:75:7f:07:54:bc:d0:1b:42:4f:ac:5d:4a:82:d0:0c:2f:05: 37:7d:9a:c7:3d:d9:82:d5:06:a8:c2:28:55:ab:da:96:fd:70: b3:35:52:88:88:9e:c5:c8:7f:43:b4:49:ca:4c:26:0e:89:32: 9e:1d:32:09:3b:b7:4e:13:de:36:98:f0:e1:8f:ff:2b:8b:c5: 79:99:12:1c:a7:af:71:f7:b4:9a:4a:81:4e:45:17:ce:c8:3a: 9a:b0:02:ca:e4:0d:60:f1:c0:51:13:52:c2:ba:df:ee:c7:a9: 05:9b:1a:07:f7:b8:98:93:c3:42:74:47:8c:a3:e7:73:fc:45: 85:3e:40:b2:d3:00:30:a2:6d:6e:3b:71:0d:08:c6:99:41:b5: 42:2b:43:e4:10:72:b8:35:e3:6e:94:27:6d:6f:a0:dc:f8:37: 2a:eb:fd:f6:05:4d:34:3f:19:52:94:0d:41:d6:11:22:63:cf: 41:a3:eb:1a:99:a6:45:d7:82:9d:fc:00:0c:77:50:b3:dd:93: ae:c8:e4:40:16:8a:46:81:3e:16:e6:bd:24:4d:2f:2f:19:b0: a5:78:d9:4d:c9:fe:8b:fd:7d:2f:3f:b6:64:18:19:2f:5e:ad: 64:61:9a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUwODI0MjA1MTA3WhcNMjUwODMxMjA1MTA3WjAYMRYwFAYD VQQDEw02OGFiN2IzYi1iYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqplajlslyoWBIuuJH9FaaI7+8FTgFj+qQsMdt+QPtWokfN4inCLOArgpzMGg KtKwwK7K01Lea73X2ZgUVVQYk1kp09YMuquO6xhAp3lzFSiBP7qt9oIJJ/h1m/9M XE8c+epOdmr4Ds1VVyA5WpleMx1uQPusjl0e94JoS4rH+F/4cvzF8bl8NYebKbRe sh4LYIRKCH4liEEfeHnuARWZaAv+7inp5IuSKe2SZF1OfGXqTIcQvu6nwLCD7HAn gZUzBX4WxQpVprtkc4Qeje8uHN5eVR2TJ+xMuhWtw9u3d9INOC51uYBBBg52486D Ms6T0y0WhBxEPb4vP4COHDR9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHE657Z usRKh6hTwKwhePBMeC1DMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO0gWKeCyjU4JUr82+U9CLchuSdX8HVLzQG0JPrF1KgtAMLwU3fZrH PdmC1QaowihVq9qW/XCzNVKIiJ7FyH9DtEnKTCYOiTKeHTIJO7dOE942mPDhj/8r i8V5mRIcp69x97SaSoFORRfOyDqasALK5A1g8cBRE1LCut/ux6kFmxoH97iYk8NC dEeMo+dz/EWFPkCy0wAwom1uO3ENCMaZQbVCK0PkEHK4NeNulCdtb6Dc+Dcq6/32 BU00PxlSlA1B1hEiY89Bo+samaZF14Kd/AAMd1Cz3ZOuyORAFopGgT4W5r0kTS8v GbCleNlNyf6L/X0vP7ZkGBkvXq1kYZpP -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:15 2025 by rpki-client