$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json) Hash identifier: cNLF5Yl2HffDQMmO+D1CpZQABpBNLrQR2MHy2h4t+Pg= Subject key identifier: D0:F0:15:43:0A:45:65:F8:AC:9D:9E:85:A7:44:EC:D1:65:96:F5:3D Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft Manifest number: 04FC Signing time: Mon 16 Jun 2025 23:18:25 +0000 Manifest this update: Mon 16 Jun 2025 23:18:25 +0000 Manifest next update: Mon 23 Jun 2025 23:18:25 +0000 Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: 9556ZJ8yOaO1qu+/hiZkUtBQoheRoly09hAFAY5M+Ls=) 2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rWRqJhH4y787QjbpEE2hN3YZgixRs8J4MQqNG/pdZs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Validity Not Before: Jun 16 23:18:25 2025 GMT Not After : Jun 23 23:18:25 2025 GMT Subject: CN=6850a641-16b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:6c:9a:ba:dc:17:a4:86:48:74:c3:bb:8e: 13:25:ce:ad:8f:56:ae:6f:68:10:15:e7:ff:e3:dd: 99:3f:e6:c1:4f:ca:3a:28:d3:28:15:4e:4f:93:00: 2b:56:97:e6:93:93:51:d4:e5:83:a2:a8:81:59:88: de:cd:9b:08:1d:e6:f9:05:fd:28:09:6b:e8:b4:9d: 3d:08:3d:c0:36:72:e9:99:3e:16:fc:b7:cc:b1:16: 44:b6:bf:39:e4:53:4c:97:05:21:bb:a8:a3:a7:81: 72:0d:28:47:5f:92:c8:27:3a:2b:1f:94:d8:97:2f: ae:8e:b6:9e:4a:21:76:7a:ff:d6:1a:bf:2f:5b:4d: f2:5e:68:4e:59:4f:51:36:52:d8:22:5d:e3:17:09: 09:a2:44:65:67:91:ac:42:2b:5f:83:29:0a:c7:97: 73:02:b0:6a:a0:d6:5e:e6:40:c7:10:8a:f2:7b:d9: 39:f6:02:4e:87:3d:ba:e1:2d:de:d1:2a:58:7a:fa: f5:0a:4d:18:bd:3d:c3:82:60:17:a7:38:01:99:56: 44:10:4c:7f:61:0d:a1:9b:79:34:fc:06:18:0b:2d: 3f:7b:a0:f1:aa:62:56:47:18:00:4e:b5:a5:84:57: fd:c3:21:d9:be:3b:30:ef:11:10:e5:56:db:93:52: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F0:15:43:0A:45:65:F8:AC:9D:9E:85:A7:44:EC:D1:65:96:F5:3D X509v3 Authority Key Identifier: keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c6:d5:79:66:34:ce:17:4b:bb:7b:c8:99:41:df:88:e2:ed: ea:2c:a2:f4:67:0e:7c:d2:e6:f9:e1:86:c8:48:6a:69:80:af: 09:c5:9a:21:6a:2c:b5:6f:62:2f:79:41:53:2e:8f:99:07:cb: 28:b9:2e:9f:20:81:a3:e9:4d:5b:0e:13:f9:56:e1:02:62:97: b9:d9:fb:c1:b5:2d:c7:95:52:8c:4d:88:33:63:ba:1c:e0:c2: 6d:4f:f9:ea:fd:ee:b1:6e:15:01:aa:be:cb:f6:90:3f:ce:ca: 75:47:b4:65:6e:0d:9f:22:c0:5f:d2:e2:69:9e:e1:00:5c:47: 17:d6:84:24:e3:df:ac:eb:e7:c1:fb:2c:76:ce:45:6a:b6:70: ca:50:66:42:ff:db:95:44:36:9b:9c:14:b7:d6:14:b8:0d:26: 69:7c:ed:06:a3:70:88:78:a3:f9:8d:64:dd:d7:7f:92:46:82: b8:55:4a:2d:0b:ea:8d:2f:4f:3c:60:cf:9f:34:80:03:3f:64: 07:64:99:56:b9:bf:b7:3f:50:7c:e7:8e:5b:bf:52:28:35:11: a0:e6:9b:54:af:62:76:a8:32:dc:27:2f:6d:7b:3a:ae:ba:74: 13:68:7d:05:51:3f:a2:85:e0:fc:ee:3c:dd:6f:09:87:60:14: 4f:d8:4b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2 M0QxNkVENUYwHhcNMjUwNjE2MjMxODI1WhcNMjUwNjIzMjMxODI1WjAYMRYwFAYD VQQDEw02ODUwYTY0MS0xNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjxsmrrcF6SGSHTDu44TJc6tj1aub2gQFef/492ZP+bBT8o6KNMoFU5PkwAr Vpfmk5NR1OWDoqiBWYjezZsIHeb5Bf0oCWvotJ09CD3ANnLpmT4W/LfMsRZEtr85 5FNMlwUhu6ijp4FyDShHX5LIJzorH5TYly+ujraeSiF2ev/WGr8vW03yXmhOWU9R NlLYIl3jFwkJokRlZ5GsQitfgykKx5dzArBqoNZe5kDHEIrye9k59gJOhz264S3e 0SpYevr1Ck0YvT3DgmAXpzgBmVZEEEx/YQ2hm3k0/AYYCy0/e6DxqmJWRxgATrWl hFf9wyHZvjsw7xEQ5Vbbk1LNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDwFUMK RWX4rJ2ehadE7NFllvU9MB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjExRS8wNkFGMUZCMjEzMTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xM ZGpyVllaa3JBOUZqMFc3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzxtV5ZjTOF0u7e8iZQd+I4u3qLKL0Zw580ub54YbISGppgK8JxZoh aiy1b2IveUFTLo+ZB8souS6fIIGj6U1bDhP5VuECYpe52fvBtS3HlVKMTYgzY7oc 4MJtT/nq/e6xbhUBqr7L9pA/zsp1R7Rlbg2fIsBf0uJpnuEAXEcX1oQk49+s6+fB +yx2zkVqtnDKUGZC/9uVRDabnBS31hS4DSZpfO0Go3CIeKP5jWTd13+SRoK4VUot C+qNL088YM+fNIADP2QHZJlWub+3P1B8545bv1IoNRGg5ptUr2J2qDLcJy9tezqu unQTaH0FUT+iheD87jzdbwmHYBRP2Etu -----END CERTIFICATE-----Generated at Wed Jun 18 15:26:25 2025 by rpki-client