$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: FnN5+Q+jKstgPw2c3ZxBKsfwk7UnCtkEo2eK8dZ44jQ= Subject key identifier: 54:7D:65:12:5D:A6:54:D8:62:15:55:27:44:FF:EB:6F:CA:1D:09:EF Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 24B9 Signing time: Mon 16 Jun 2025 16:24:48 +0000 Manifest this update: Mon 16 Jun 2025 16:24:47 +0000 Manifest next update: Mon 23 Jun 2025 16:24:47 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: 04KdTiYc18aqnVMriw/XV1Edbr/KxlQNJ8SUVncuFwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Jun 16 16:24:47 2025 GMT Not After : Jun 23 16:24:47 2025 GMT Subject: CN=68504550-ad40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:d6:f9:39:0b:a0:86:b2:f1:59:08:23:7d: f1:8b:90:9e:55:64:38:49:5a:b4:a7:76:cc:3e:d0: 46:3f:4a:96:69:f1:59:b6:34:5f:1c:0f:31:b0:d3: 50:81:b9:99:e6:3b:71:30:da:64:59:5f:75:3f:4a: 4b:9d:1f:68:11:aa:38:1a:fa:8b:49:8e:c0:07:1e: 53:1d:b7:d2:a1:9e:34:7a:6d:21:5f:04:8f:53:0c: 43:35:48:b3:8c:93:ec:e0:ab:d4:d6:2b:19:2e:4a: 7a:71:c2:04:86:3a:5f:61:c5:f9:47:1d:27:32:3a: 4c:7f:70:bd:c9:8c:78:db:70:05:56:f1:d4:88:93: cb:94:01:f4:2a:3d:c8:d5:49:db:cb:dd:b0:0d:14: d7:87:32:58:0d:17:27:13:93:21:03:0e:9e:ab:99: d5:b7:01:1b:16:b2:b3:68:fe:83:81:c4:1e:74:a2: 5b:47:48:99:3d:92:7e:97:d2:03:69:9a:8d:bb:b7: 73:c6:0d:cb:d9:64:77:0f:ec:a7:83:3b:4a:e8:65: bd:f2:58:e6:91:25:3c:80:82:f0:86:14:83:40:40: 16:c0:1a:4c:d5:b4:a2:71:27:ee:b4:b7:d6:42:d5: 0c:2c:4f:d4:af:40:5c:f5:88:4e:f5:cf:4c:4b:6f: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7D:65:12:5D:A6:54:D8:62:15:55:27:44:FF:EB:6F:CA:1D:09:EF X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d9:e2:b4:b6:00:bf:17:4d:4f:2b:31:ac:56:8c:2b:fe:d2: f2:d8:94:e3:8d:18:44:8d:0c:96:68:88:75:26:99:b4:c5:a4: a1:98:89:68:43:e3:4f:44:90:b4:d1:e0:42:de:14:29:d4:58: 0c:ff:b4:1f:1e:68:6a:b5:8f:f8:08:46:87:87:d3:3f:db:63: 99:f3:2b:15:05:a0:da:aa:60:cd:a1:da:d9:cc:ad:c3:94:6d: ff:e7:02:7c:b8:ec:83:a8:4c:a6:db:c4:b5:71:b0:2a:52:a8: f7:19:0b:33:97:8e:97:b5:af:83:22:5b:a9:dd:df:90:ad:ec: fa:37:63:80:00:02:b8:69:20:88:53:0b:7d:f2:19:44:1c:98: 00:d9:8c:16:fe:b9:39:cc:28:2c:a0:31:df:7b:cc:aa:97:7c: 10:df:e8:54:3b:e5:c9:30:fc:72:cb:d5:13:79:34:5f:d0:a9: b4:db:10:be:59:1c:23:de:64:b8:2a:2f:36:c2:ac:18:9c:94: 9d:9b:54:47:f2:44:3d:89:25:3c:10:5f:34:05:db:fc:26:96: e1:eb:d0:73:19:ae:97:b0:9e:15:19:f8:25:b8:77:d7:e5:27: 85:17:b0:62:db:27:2f:9d:ed:13:6d:0f:44:e8:d6:0c:63:47: 74:be:13:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUwNjE2MTYyNDQ3WhcNMjUwNjIzMTYyNDQ3WjAYMRYwFAYD VQQDEw02ODUwNDU1MC1hZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37zW+TkLoIay8VkII33xi5CeVWQ4SVq0p3bMPtBGP0qWafFZtjRfHA8xsNNQ gbmZ5jtxMNpkWV91P0pLnR9oEao4GvqLSY7ABx5THbfSoZ40em0hXwSPUwxDNUiz jJPs4KvU1isZLkp6ccIEhjpfYcX5Rx0nMjpMf3C9yYx423AFVvHUiJPLlAH0Kj3I 1Unby92wDRTXhzJYDRcnE5MhAw6eq5nVtwEbFrKzaP6DgcQedKJbR0iZPZJ+l9ID aZqNu7dzxg3L2WR3D+yngztK6GW98ljmkSU8gILwhhSDQEAWwBpM1bSicSfutLfW QtUMLE/Ur0Bc9YhO9c9MS28exwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFR9ZRJd plTYYhVVJ0T/62/KHQnvMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO2eK0tgC/F01PKzGsVowr/tLy2JTjjRhEjQyWaIh1Jpm0xaShmIlo Q+NPRJC00eBC3hQp1FgM/7QfHmhqtY/4CEaHh9M/22OZ8ysVBaDaqmDNodrZzK3D lG3/5wJ8uOyDqEym28S1cbAqUqj3GQszl46Xta+DIlup3d+Qrez6N2OAAAK4aSCI Uwt98hlEHJgA2YwW/rk5zCgsoDHfe8yql3wQ3+hUO+XJMPxyy9UTeTRf0Km02xC+ WRwj3mS4Ki82wqwYnJSdm1RH8kQ9iSU8EF80Bdv8Jpbh69BzGa6XsJ4VGfgluHfX 5SeFF7Bi2ycvne0TbQ9E6NYMY0d0vhOc -----END CERTIFICATE-----Generated at Wed Jun 18 06:37:43 2025 by rpki-client