$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: vpHiYvn517050UeBP0OsfwF5U0CpSLIsqtNhL5w7ALc= Subject key identifier: F8:9D:45:80:1E:69:F7:C2:96:EF:56:02:8A:5F:16:92:2D:AC:0D:BB Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2FA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2F7C Signing time: Mon 08 Sep 2025 15:26:33 +0000 Manifest this update: Mon 08 Sep 2025 15:26:32 +0000 Manifest next update: Mon 15 Sep 2025 15:26:32 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: DOubFzM06MxPOfGzd/CITgG1/OVbwDTh/cR4GZ3HZjs=) 2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zwQt0U0MX29MPa93PKs9TYXFxS+49eXVEwZ6lR+uSHo=) 3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: odNG2CTuocV+iFzm6p+rsTOH7z1wG0je4WOLqIbugr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12201 (0x2fa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: Sep 8 15:26:32 2025 GMT Not After : Sep 15 15:26:32 2025 GMT Subject: CN=68bef5a8-4ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:50:5e:a2:10:9d:60:4b:f3:f1:dd:eb:7a: be:e0:47:15:3e:8a:f7:a2:6a:9e:1f:9a:f9:36:f6: 34:1f:b2:ba:ec:58:69:8b:52:86:67:3e:75:55:49: d8:83:6c:b4:0e:5a:9c:1b:48:e0:01:86:90:f4:1f: fb:a0:02:d1:6a:9e:ef:ad:ba:98:42:7c:f1:63:f4: c0:32:51:fc:d7:bc:c7:8e:ea:25:45:77:69:e9:4f: e4:10:fc:2b:dd:1c:91:01:a6:43:de:9a:7f:7e:bd: 10:16:dc:92:20:9b:42:19:2b:63:7c:ae:b9:3a:05: e6:77:07:18:22:84:eb:68:0b:02:e0:ea:af:e1:4b: 81:1d:c1:31:55:0f:7e:1d:df:fc:ce:30:34:61:97: aa:14:06:e7:e2:76:a1:be:51:fb:c4:3f:e6:f7:8b: 89:09:10:43:9c:a2:8f:00:f2:d7:f5:a1:d1:36:8b: 1f:60:fd:de:d5:5d:8d:41:e8:3d:fc:6f:7e:29:e6: 5e:48:72:02:37:c5:20:4b:90:72:56:69:65:dd:4f: 2e:bb:bf:40:f1:c6:ba:3f:18:fb:dd:0b:fc:6e:5f: b8:d5:6b:88:0e:7c:81:d5:f7:3d:e0:4a:4a:41:c0: 07:ff:bd:5f:88:11:bc:5b:84:32:c0:4f:c2:26:2b: bc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:45:80:1E:69:F7:C2:96:EF:56:02:8A:5F:16:92:2D:AC:0D:BB X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:1a:6d:10:37:cb:1b:d2:e8:ea:11:d1:ff:d9:11:34:da:8f: f7:63:07:de:65:53:fc:66:15:59:49:7b:7a:e3:ea:b8:bb:74: a5:1b:c9:20:4f:ea:01:3b:9b:1c:d3:58:c6:61:0a:8a:b5:a1: 72:ea:8d:35:ac:3d:e6:76:00:73:0a:3f:54:2c:f8:89:1d:1f: 7b:cb:14:77:d3:2c:f4:9f:0c:c8:ed:f4:b4:3f:38:71:bf:bf: b4:00:6c:6b:6d:99:75:35:92:d6:2b:f5:93:bb:2a:44:3a:23: 8b:48:57:89:2e:82:fd:85:e0:b7:c5:58:79:e8:2e:36:04:e9: 4b:cf:b5:76:e0:c8:e8:29:60:da:58:4b:85:83:67:03:53:ab: 41:1d:79:10:ae:d8:1b:8f:04:b0:87:7b:36:d0:91:ea:ad:77: 80:1a:c6:57:9f:51:33:e6:8c:cb:67:13:df:e9:1a:a5:75:46: 91:4d:eb:46:20:bb:f4:bc:76:ea:e8:8e:b1:32:6f:d7:b1:20: c7:0f:77:22:82:16:e3:8a:b2:57:e2:d3:76:87:df:26:4e:7c: e2:d2:bf:2a:12:f6:10:c0:cf:09:f9:4a:be:54:98:68:52:7f: 32:0d:c6:2e:6b:83:36:a0:4e:08:47:a4:22:b6:d0:77:64:e5: 9c:12:e0:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjUwOTA4MTUyNjMyWhcNMjUwOTE1MTUyNjMyWjAYMRYwFAYD VQQDEw02OGJlZjVhOC00YWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zhQXqIQnWBL8/Hd63q+4EcVPor3omqeH5r5NvY0H7K67Fhpi1KGZz51VUnY g2y0DlqcG0jgAYaQ9B/7oALRap7vrbqYQnzxY/TAMlH817zHjuolRXdp6U/kEPwr 3RyRAaZD3pp/fr0QFtySIJtCGStjfK65OgXmdwcYIoTraAsC4Oqv4UuBHcExVQ9+ Hd/8zjA0YZeqFAbn4nahvlH7xD/m94uJCRBDnKKPAPLX9aHRNosfYP3e1V2NQeg9 /G9+KeZeSHICN8UgS5ByVmll3U8uu79A8ca6Pxj73Qv8bl+41WuIDnyB1fc94EpK QcAH/71fiBG8W4QywE/CJiu8dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPidRYAe affClu9WAopfFpItrA27MB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpGm0QN8sb0ujqEdH/2RE02o/3YwfeZVP8ZhVZSXt64+q4u3SlG8kg T+oBO5sc01jGYQqKtaFy6o01rD3mdgBzCj9ULPiJHR97yxR30yz0nwzI7fS0Pzhx v7+0AGxrbZl1NZLWK/WTuypEOiOLSFeJLoL9heC3xVh56C42BOlLz7V24MjoKWDa WEuFg2cDU6tBHXkQrtgbjwSwh3s20JHqrXeAGsZXn1Ez5ozLZxPf6RqldUaRTetG ILv0vHbq6I6xMm/XsSDHD3cighbjirJX4tN2h98mTnzi0r8qEvYQwM8J+Uq+VJho Un8yDcYua4M2oE4IR6QittB3ZOWcEuDj -----END CERTIFICATE-----Generated at Tue Sep 9 08:59:11 2025 by rpki-client