$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: bwSkEn/Wo9Iu3lf5UNcIZ5zQP61Su5ZAW3WlzaMLbRs= Subject key identifier: F3:95:DD:5C:79:32:C9:59:63:2D:78:75:C7:E3:77:1F:63:EB:42:F3 Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: 99 Signing time: Fri 25 Jul 2025 06:40:00 +0000 Manifest this update: Fri 25 Jul 2025 06:40:00 +0000 Manifest next update: Fri 01 Aug 2025 06:40:00 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: JksAkplxSywvDsRwZH2vdFl2qIo3jp+bak61/yuY7HQ=) 2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 06:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: Jul 25 06:40:00 2025 GMT Not After : Aug 1 06:40:00 2025 GMT Subject: CN=688326c0-36b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:27:2e:18:1c:b1:37:a0:38:16:f7:58:48: b2:4e:83:49:b8:5a:34:1d:c1:ab:34:29:c4:ee:0a: a2:cf:54:67:2f:28:1b:0e:c5:fc:11:b0:d7:84:e4: b0:7e:0c:a5:55:82:85:f5:da:0a:1f:00:4d:06:74: 22:e9:f5:3f:de:40:c4:87:9b:40:0f:1e:0a:69:df: a6:41:a4:fa:23:d8:e4:f2:cf:f5:5c:8d:12:1c:17: 4a:5b:30:d3:c8:56:b8:20:26:72:37:6d:41:b6:2f: 86:9c:63:ff:9a:e4:1c:0b:79:bb:12:af:56:f2:ff: 83:e8:1c:7e:6b:52:47:32:31:01:e9:2c:10:63:c0: 73:2e:6a:a5:01:3e:51:5d:53:19:6a:e3:0f:35:d7: 9c:b9:14:d4:68:19:77:31:cb:b3:48:83:ab:97:d1: 2d:90:9d:58:41:be:19:dd:cf:07:75:12:15:40:f3: 4e:4b:0e:f1:69:72:75:bf:3e:67:f4:1c:da:07:22: f0:b9:b7:c1:ae:26:6d:11:07:85:68:67:c9:e3:43: f4:0d:4e:a2:ce:37:e7:6a:2f:cb:6b:e6:36:61:98: 9e:cb:c8:b9:35:81:8d:57:d0:ce:c4:d4:0d:e2:e0: 76:fa:6a:a9:d9:c3:6d:8c:86:20:bf:3b:30:5a:7b: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:95:DD:5C:79:32:C9:59:63:2D:78:75:C7:E3:77:1F:63:EB:42:F3 X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0c:cc:88:79:e3:34:51:0d:70:f4:54:a9:fb:2d:80:b3:40: 2d:53:e4:5e:24:2b:5b:72:ce:74:96:f0:a4:96:6d:0d:c0:77: 3a:a2:67:72:65:e7:ed:d7:1e:7e:18:3b:84:e4:f0:5a:00:6e: 1f:30:74:e6:e5:a4:b9:93:b9:e4:66:0b:75:88:b4:74:9a:95: 49:e7:3c:ca:52:fa:1a:8f:02:14:10:f4:54:6d:65:9d:39:36: 43:8f:20:57:8b:8e:5b:55:c3:7c:2c:23:4f:26:35:ae:a6:07: 84:5f:31:db:92:57:7d:a5:2e:55:45:a9:d6:55:74:25:8f:57: 38:b3:fe:cd:4b:2e:d8:63:19:ab:5f:b5:75:e0:d6:45:d7:e4: c8:39:cc:3e:d5:59:d1:8e:46:4e:f1:c8:a3:d1:33:ea:0a:b7: 10:a4:eb:56:6d:6b:4e:c2:ea:6b:83:3f:19:c3:ed:de:94:b0: 11:33:a4:0a:70:8d:60:1d:b6:16:83:5f:7b:73:0c:7a:ce:ab: 22:63:25:52:88:cb:11:dd:46:47:b8:46:ca:a4:3d:15:8a:ca: ff:21:cc:1b:f3:b9:81:ff:e5:14:17:56:ba:ef:31:49:7b:13: 46:8f:f9:96:43:52:ca:8d:50:f7:dc:d8:f7:c9:15:85:91:c0: 97:28:31:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKERDNkEyMzc0QzUxNEU4Q0Y0QUM3NjRBMEYzQzg0NkYw OUIzM0QyODIwHhcNMjUwNzI1MDY0MDAwWhcNMjUwODAxMDY0MDAwWjAYMRYwFAYD VQQDEw02ODgzMjZjMC0zNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3P0nLhgcsTegOBb3WEiyToNJuFo0HcGrNCnE7gqiz1RnLygbDsX8EbDXhOSw fgylVYKF9doKHwBNBnQi6fU/3kDEh5tADx4Kad+mQaT6I9jk8s/1XI0SHBdKWzDT yFa4ICZyN21Bti+GnGP/muQcC3m7Eq9W8v+D6Bx+a1JHMjEB6SwQY8BzLmqlAT5R XVMZauMPNdecuRTUaBl3McuzSIOrl9EtkJ1YQb4Z3c8HdRIVQPNOSw7xaXJ1vz5n 9BzaByLwubfBriZtEQeFaGfJ40P0DU6izjfnai/La+Y2YZiey8i5NYGNV9DOxNQN 4uB2+mqp2cNtjIYgvzswWntq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOV3Vx5 MslZYy14dcfjdx9j60LzMB8GA1UdIwQYMBaAFNxqI3TFFOjPSsdkoPPIRvCbM9KC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS82NDIzQkUwNjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi8zR29qZE1VVTZNOUt4MlNnODhoRzhKc3ow b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS82NDIzQkUwNjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi8zR29qZE1VVTZN OUt4MlNnODhoRzhKc3owb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCDMyIeeM0UQ1w9FSp+y2As0AtU+ReJCtbcs50lvCklm0NwHc6omdy Zeft1x5+GDuE5PBaAG4fMHTm5aS5k7nkZgt1iLR0mpVJ5zzKUvoajwIUEPRUbWWd OTZDjyBXi45bVcN8LCNPJjWupgeEXzHbkld9pS5VRanWVXQlj1c4s/7NSy7YYxmr X7V14NZF1+TIOcw+1VnRjkZO8cij0TPqCrcQpOtWbWtOwuprgz8Zw+3elLARM6QK cI1gHbYWg197cwx6zqsiYyVSiMsR3UZHuEbKpD0Visr/Icwb87mB/+UUF1a67zFJ exNGj/mWQ1LKjVD33Nj3yRWFkcCXKDHl -----END CERTIFICATE-----Generated at Sat Jul 26 19:21:15 2025 by rpki-client