$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: dyUqiSy4DkpY17MXfEEyP4ufOwD1YVYaL27l6p+IVJQ= Subject key identifier: DA:B2:E6:34:AA:6E:E3:D3:46:E7:7D:C7:75:F4:3A:A5:EF:46:89:C4 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1BD8 Signing time: Wed 18 Jun 2025 16:14:28 +0000 Manifest this update: Wed 18 Jun 2025 16:14:28 +0000 Manifest next update: Wed 25 Jun 2025 16:14:28 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: 6SzKe9uwRlOaedcWVVMSK/nwwSzSQ7xIl1FYAbnehHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7128 (0x1bd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Jun 18 16:14:28 2025 GMT Not After : Jun 25 16:14:28 2025 GMT Subject: CN=6852e5e4-bdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e9:71:8b:2a:f2:4b:4f:16:19:68:12:83:60: ff:f8:6f:40:0f:15:b5:3c:53:98:9e:c0:57:99:87: e6:d0:2c:f4:c2:28:cd:ef:74:1f:b8:3b:cc:14:f0: d3:a7:0e:33:44:e3:08:ac:b0:af:17:b3:ce:a3:4b: cc:b0:90:bd:a3:25:4b:cf:86:27:a6:e0:15:59:85: 35:51:0a:92:1a:0c:62:75:15:f3:26:05:ac:89:c8: 95:03:bb:17:b6:80:4e:70:85:78:de:19:e8:7a:47: 02:01:eb:6d:15:6b:62:af:4b:b6:3b:0d:84:e3:bf: 1c:7d:48:3f:95:09:76:b0:0d:f7:40:ad:e9:69:43: 17:01:1a:16:ef:31:14:a7:ba:f2:c5:c7:6c:69:76: 3c:f6:18:55:47:fb:64:5f:94:67:b8:4a:46:af:d2: 0a:8c:f8:fd:bd:0a:12:34:91:bb:c1:5a:5b:0e:f2: 80:82:5e:37:3b:9e:7e:83:dc:21:d7:01:d6:e1:9a: 2e:b7:29:42:03:c9:7c:23:d2:e3:3c:20:91:d1:c5: e3:94:89:a5:09:a6:15:84:d4:ea:f5:1f:0c:05:02: 2c:70:23:03:48:87:06:72:f0:0e:09:36:4b:f5:4f: 5e:34:fc:e5:81:6d:71:e0:05:6b:e2:fa:e5:29:dd: 31:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B2:E6:34:AA:6E:E3:D3:46:E7:7D:C7:75:F4:3A:A5:EF:46:89:C4 X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:a3:9e:d6:9f:7b:32:70:91:2f:59:08:e9:73:8e:19:39:bc: b8:1c:c9:62:3d:79:fa:e8:f1:b0:5d:34:d0:98:80:9a:79:c0: b5:4c:5d:f1:68:22:aa:2b:98:3c:eb:88:d4:d6:85:36:87:6d: fe:f9:72:61:83:22:09:f7:5f:0a:22:c0:ef:a9:82:50:41:24: 02:49:48:97:32:80:28:0d:7a:7f:e0:81:0c:6e:a4:50:5c:74: b6:55:87:e4:1b:9d:9c:7d:b8:5f:1b:84:92:65:6d:36:3b:cc: 1e:15:1d:54:08:3a:39:6f:10:36:76:90:cd:4e:9d:6d:61:72: fb:6d:d4:53:17:17:8f:41:2c:00:b1:50:ba:28:e0:3d:54:10: aa:f0:3c:98:33:1a:87:fb:e4:2e:75:2c:f6:c4:46:e4:32:f1: a6:ae:66:91:f6:a9:84:bc:39:de:57:4f:76:ac:05:3e:ad:f1: 9b:7f:f6:72:1d:9e:8d:d4:5f:1f:fb:ae:29:c3:b9:59:93:0b: 32:16:4a:02:a1:ec:71:63:eb:d5:4b:1d:65:d4:a9:2e:12:a2: 95:87:28:6c:a5:a0:f8:f1:c1:01:67:78:60:dc:04:66:ff:31: 8d:d1:dc:68:3f:dd:24:9a:30:4b:12:03:b5:48:77:b5:b9:1e: f0:9a:ba:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUwNjE4MTYxNDI4WhcNMjUwNjI1MTYxNDI4WjAYMRYwFAYD VQQDEw02ODUyZTVlNC1iZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6elxiyryS08WGWgSg2D/+G9ADxW1PFOYnsBXmYfm0Cz0wijN73QfuDvMFPDT pw4zROMIrLCvF7POo0vMsJC9oyVLz4YnpuAVWYU1UQqSGgxidRXzJgWsiciVA7sX toBOcIV43hnoekcCAettFWtir0u2Ow2E478cfUg/lQl2sA33QK3paUMXARoW7zEU p7ryxcdsaXY89hhVR/tkX5RnuEpGr9IKjPj9vQoSNJG7wVpbDvKAgl43O55+g9wh 1wHW4ZoutylCA8l8I9LjPCCR0cXjlImlCaYVhNTq9R8MBQIscCMDSIcGcvAOCTZL 9U9eNPzlgW1x4AVr4vrlKd0xhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqy5jSq buPTRud9x3X0OqXvRonEMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKo57Wn3sycJEvWQjpc44ZOby4HMliPXn66PGwXTTQmICaecC1TF3x aCKqK5g864jU1oU2h23++XJhgyIJ918KIsDvqYJQQSQCSUiXMoAoDXp/4IEMbqRQ XHS2VYfkG52cfbhfG4SSZW02O8weFR1UCDo5bxA2dpDNTp1tYXL7bdRTFxePQSwA sVC6KOA9VBCq8DyYMxqH++QudSz2xEbkMvGmrmaR9qmEvDneV092rAU+rfGbf/Zy HZ6N1F8f+64pw7lZkwsyFkoCoexxY+vVSx1l1KkuEqKVhyhspaD48cEBZ3hg3ARm /zGN0dxoP90kmjBLEgO1SHe1uR7wmrpi -----END CERTIFICATE-----Generated at Thu Jun 19 23:52:14 2025 by rpki-client