$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: lBV+fG64+9cC1xs4RjwHEybLrAeQb6fbqTvPN1aywF4= Subject key identifier: 23:58:CF:45:07:F8:84:66:07:65:42:0F:CA:A1:9A:E2:B6:F5:0D:B1 Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 2413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 2402 Signing time: Sun 24 Aug 2025 15:46:45 +0000 Manifest this update: Sun 24 Aug 2025 15:46:44 +0000 Manifest next update: Sun 31 Aug 2025 15:46:44 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: N2A/NHkMFT/+9N+2jtZoNYzVKldKWWwCpJZkrA3mLI4=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9235 (0x2413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Aug 24 15:46:44 2025 GMT Not After : Aug 31 15:46:44 2025 GMT Subject: CN=68ab33e4-8b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:e4:c0:2d:6c:34:d9:f2:80:71:11:87:7a: a8:51:88:56:c0:b5:09:f1:69:9f:6c:3b:ab:fd:b2: d5:a0:2d:21:60:44:f0:48:9a:93:22:31:06:22:19: b9:76:9a:11:e2:c3:4d:b1:ea:92:be:61:83:f2:c0: f2:86:c2:3d:1e:bd:e9:34:b8:64:38:a1:fc:39:13: bb:9d:72:dd:45:35:4a:44:04:5a:9f:b6:3f:82:a5: 5a:44:6b:91:1f:b0:1e:2c:89:af:db:d4:2a:f2:87: e2:67:1b:c6:61:80:ef:3e:ec:3b:9a:07:3a:ce:f7: 24:3d:fb:79:62:a2:b1:dd:29:56:73:c3:ec:18:b8: 7b:60:e8:e4:05:d7:89:9e:5f:7b:a0:72:fa:df:3e: f6:d2:2e:37:6a:07:58:42:9b:b9:59:82:2c:63:15: 91:60:81:39:f1:29:a1:9d:e5:89:fc:7b:e6:59:d1: 25:c3:33:88:64:33:a3:8d:e9:33:6f:c4:aa:b6:85: de:4e:14:9e:37:b9:18:ea:4d:76:28:9a:7a:41:b6: 0c:25:e3:80:6a:c3:dd:21:a0:9b:c8:02:58:9b:92: 1c:bd:da:8a:e9:bc:89:88:fc:52:2d:93:06:ad:aa: 4d:c2:e1:e1:66:45:92:aa:d5:dc:ff:ad:2d:34:a1: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:58:CF:45:07:F8:84:66:07:65:42:0F:CA:A1:9A:E2:B6:F5:0D:B1 X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:09:8c:52:64:34:91:49:c6:f8:40:af:35:f8:66:e4:2d:33: df:bc:e7:37:74:fe:22:a9:e9:37:27:b2:d4:3e:1e:1e:f6:07: 4a:ac:8d:12:61:cc:a8:6b:97:7b:10:d7:19:88:9a:02:82:61: 7e:ff:bb:fc:8f:0d:42:e9:0a:57:77:09:58:80:cd:80:22:74: 29:39:15:e5:9e:df:cc:fb:42:95:98:0e:89:64:0c:7a:6a:51: b2:a1:78:bc:17:5f:0f:3a:6f:30:a6:ed:23:55:2d:3a:ac:25: 30:d8:a6:fa:0a:91:f0:18:47:ec:d7:d7:99:ee:e1:81:fc:f8: 6f:cf:8b:b2:1b:a3:5c:57:53:46:dd:3a:67:2f:2d:06:69:06: 27:33:52:79:17:fe:11:ad:2e:f7:8a:ce:cd:fa:7d:b7:4c:4f: c5:94:07:8f:53:02:30:e4:e1:1d:78:00:82:5c:ba:fb:2b:f3: 72:8a:8a:43:e1:cf:63:89:7b:ef:37:ab:5e:37:86:83:ec:d7: e8:bf:22:ff:ba:f4:54:58:28:54:90:d7:d5:72:79:47:69:09: 5d:28:45:38:54:ba:c1:4b:2f:4b:26:fe:b2:54:50:84:e0:04: 41:69:7d:6b:5a:6f:a4:fc:c7:08:77:72:bf:61:f9:1e:72:c8: bf:de:2f:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjUwODI0MTU0NjQ0WhcNMjUwODMxMTU0NjQ0WjAYMRYwFAYD VQQDEw02OGFiMzNlNC04YjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNPkwC1sNNnygHERh3qoUYhWwLUJ8WmfbDur/bLVoC0hYETwSJqTIjEGIhm5 dpoR4sNNseqSvmGD8sDyhsI9Hr3pNLhkOKH8ORO7nXLdRTVKRARan7Y/gqVaRGuR H7AeLImv29Qq8ofiZxvGYYDvPuw7mgc6zvckPft5YqKx3SlWc8PsGLh7YOjkBdeJ nl97oHL63z720i43agdYQpu5WYIsYxWRYIE58SmhneWJ/HvmWdElwzOIZDOjjekz b8SqtoXeThSeN7kY6k12KJp6QbYMJeOAasPdIaCbyAJYm5IcvdqK6byJiPxSLZMG rapNwuHhZkWSqtXc/60tNKGsewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNYz0UH +IRmB2VCD8qhmuK29Q2xMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKCYxSZDSRScb4QK81+GbkLTPfvOc3dP4iqek3J7LUPh4e9gdKrI0S Ycyoa5d7ENcZiJoCgmF+/7v8jw1C6QpXdwlYgM2AInQpORXlnt/M+0KVmA6JZAx6 alGyoXi8F18POm8wpu0jVS06rCUw2Kb6CpHwGEfs19eZ7uGB/Phvz4uyG6NcV1NG 3TpnLy0GaQYnM1J5F/4RrS73is7N+n23TE/FlAePUwIw5OEdeACCXLr7K/NyiopD 4c9jiXvvN6teN4aD7NfovyL/uvRUWChUkNfVcnlHaQldKEU4VLrBSy9LJv6yVFCE 4ARBaX1rWm+k/McId3K/Yfkecsi/3i+j -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:20 2025 by rpki-client