$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: zyX6S0/N3qwlCA1JG/IVsGSNzm+Gv0dNfSARRDo59W8= Subject key identifier: 1B:1F:95:27:A9:6C:30:B6:5E:0B:81:E4:F5:F5:C7:E8:99:CE:D6:C1 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 0169 Signing time: Sun 15 Jun 2025 03:07:08 +0000 Manifest this update: Sun 15 Jun 2025 03:07:07 +0000 Manifest next update: Sun 22 Jun 2025 03:07:07 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: T/9FeBlSgMT3Y+wWDSed+h6c1myrmxzAlCWHX4SO6mI=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: 9qj5nS2jHu6HnjeglTS9hUbn0VPzT6niooBC/rePBvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Jun 15 03:07:07 2025 GMT Not After : Jun 22 03:07:07 2025 GMT Subject: CN=684e38dc-c402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:5f:3e:b2:cc:fd:33:cf:c9:38:f3:f7:21: fe:1c:4e:4e:53:0d:f1:fe:7e:b7:b4:a2:23:f8:7a: b3:2d:af:36:64:70:ec:49:4b:5b:04:42:66:7c:26: 5e:17:13:91:d1:5f:16:1d:ac:4e:e3:77:3d:94:4a: 22:5e:7b:48:55:d2:58:da:59:d9:44:10:71:b4:14: cd:45:8d:80:94:c5:e4:66:65:d9:d6:23:7f:7c:38: 86:c6:ce:78:52:f3:65:b0:63:8e:45:46:ed:7e:e9: 36:48:1f:5a:fb:8e:58:95:7f:d2:c2:46:f0:49:96: 56:44:bc:a2:5e:b0:03:62:af:eb:e9:31:e3:82:66: ef:e9:57:38:eb:98:da:94:37:5d:79:bf:20:6d:59: 91:aa:af:14:f6:d0:65:08:68:12:18:81:09:0d:e4: 9e:c2:14:2f:59:bf:1f:a9:0a:d2:f9:8f:1c:99:ac: 97:45:3a:83:9c:69:52:a1:dc:81:70:34:56:a3:96: 81:5b:98:b1:1b:44:70:b9:14:0e:4c:8d:ed:13:48: 89:b1:56:5a:a4:25:d4:b4:0e:0a:5a:e3:45:55:c6: 44:7e:06:fa:ca:a1:bf:ee:25:89:1f:1e:94:94:94: 56:00:09:10:a1:8a:79:90:d5:18:69:1d:b4:17:e2: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1F:95:27:A9:6C:30:B6:5E:0B:81:E4:F5:F5:C7:E8:99:CE:D6:C1 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d6:8b:d9:7e:c5:a2:33:7c:4f:ac:8d:01:73:3d:5b:96:2e: 70:62:fd:91:59:47:fe:b9:88:43:00:87:95:87:e4:07:03:54: 1b:3a:e2:d6:3c:ec:fb:7e:68:16:11:bf:a8:93:e4:56:37:a1: 7b:14:f3:1b:83:97:8c:7d:fa:fe:cd:14:61:66:60:db:59:42: af:ec:29:c7:c6:ef:ac:19:82:c1:cb:4e:83:70:7c:3e:ec:e6: f4:e1:73:78:7c:49:44:5c:3b:5a:11:83:33:7c:1e:76:a8:eb: e5:f2:65:43:8b:5c:67:d2:39:10:dc:61:a1:09:db:53:bf:70: 44:0a:d8:30:7c:6f:f8:2a:37:c4:69:b8:28:5b:69:dd:c5:33: 85:aa:86:58:cd:f0:76:5c:0b:8f:fa:2c:d0:80:72:73:59:5c: ae:c3:1e:f5:d3:eb:43:02:ec:ed:52:57:10:db:bf:32:68:ed: 91:fb:c1:fa:97:bd:4e:f6:98:e5:77:25:ac:ac:db:dd:4f:67: df:99:e2:a6:2d:ee:11:67:59:3d:69:4a:af:f1:91:21:4a:3e: 39:35:6e:54:cd:b4:25:13:f5:31:7d:92:e9:1a:39:b2:23:02: ee:9f:87:2d:95:af:ff:8c:6b:47:7e:28:bf:cc:03:20:c8:38: 11:fc:7b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUwNjE1MDMwNzA3WhcNMjUwNjIyMDMwNzA3WjAYMRYwFAYD VQQDEw02ODRlMzhkYy1jNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNVfPrLM/TPPyTjz9yH+HE5OUw3x/n63tKIj+HqzLa82ZHDsSUtbBEJmfCZe FxOR0V8WHaxO43c9lEoiXntIVdJY2lnZRBBxtBTNRY2AlMXkZmXZ1iN/fDiGxs54 UvNlsGOORUbtfuk2SB9a+45YlX/SwkbwSZZWRLyiXrADYq/r6THjgmbv6Vc465ja lDddeb8gbVmRqq8U9tBlCGgSGIEJDeSewhQvWb8fqQrS+Y8cmayXRTqDnGlSodyB cDRWo5aBW5ixG0RwuRQOTI3tE0iJsVZapCXUtA4KWuNFVcZEfgb6yqG/7iWJHx6U lJRWAAkQoYp5kNUYaR20F+I7gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsflSep bDC2XguB5PX1x+iZztbBMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc1ovZfsWiM3xPrI0Bcz1bli5wYv2RWUf+uYhDAIeVh+QHA1QbOuLW POz7fmgWEb+ok+RWN6F7FPMbg5eMffr+zRRhZmDbWUKv7CnHxu+sGYLBy06DcHw+ 7Ob04XN4fElEXDtaEYMzfB52qOvl8mVDi1xn0jkQ3GGhCdtTv3BECtgwfG/4KjfE abgoW2ndxTOFqoZYzfB2XAuP+izQgHJzWVyuwx710+tDAuztUlcQ278yaO2R+8H6 l71O9pjldyWsrNvdT2ffmeKmLe4RZ1k9aUqv8ZEhSj45NW5UzbQlE/UxfZLpGjmy IwLun4ctla//jGtHfii/zAMgyDgR/Hti -----END CERTIFICATE-----Generated at Sun Jun 15 05:16:30 2025 by rpki-client