$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: yPsJ3SVANkAcXeS7b1z6QN7GFemGtJYvk38GWq64qZI= Subject key identifier: D3:87:72:6D:11:4B:13:56:BB:82:E7:9E:5C:DD:24:92:C0:BD:39:AD Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 04C9 Signing time: Thu 12 Jun 2025 23:24:45 +0000 Manifest this update: Thu 12 Jun 2025 23:24:45 +0000 Manifest next update: Thu 19 Jun 2025 23:24:45 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: gawKle0dICYQxBwbiLZzUpb9qDKR34t0oVvJ5PRxSJM=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: wh1NM+NSrXNgk+dMjusznA6q+s8v+UAafuQbIX3k9wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: Jun 12 23:24:45 2025 GMT Not After : Jun 19 23:24:45 2025 GMT Subject: CN=684b61bd-aa9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:7a:15:5b:f4:d8:e9:7e:c3:b9:50:ef:5d: f2:6b:41:72:5e:77:9e:11:3c:9c:2b:84:39:f5:f4: e2:6d:f8:e4:73:ef:5f:2d:61:04:ed:34:67:fa:89: 39:4e:dd:d9:69:e4:73:ce:c3:0b:33:41:51:0c:9e: 2b:f8:51:0f:26:3f:9e:37:82:dd:e9:51:81:d8:05: ef:87:4b:21:8c:23:81:62:53:f3:44:5c:5e:60:ef: c6:23:cf:bd:6e:b5:9e:d5:f5:dc:92:fc:d6:09:79: c4:81:cd:3b:0d:f8:1c:c2:5a:b9:d0:f5:1f:51:c1: 51:14:a3:9e:80:3f:f0:f3:cf:38:99:46:82:63:f8: 8f:cc:a5:75:86:82:93:c8:6e:9d:a4:04:e4:ec:7f: 25:42:10:8e:6b:36:b5:a6:7e:85:75:ed:de:f4:fc: bc:5e:4c:0b:d1:1f:46:c6:65:52:0d:a5:53:ff:32: d0:0f:24:5b:75:25:05:9f:1d:60:5e:7e:2c:e2:f6: e7:27:ca:20:84:9f:1a:95:49:66:87:4b:0a:da:27: 8c:9f:84:1f:56:02:2c:7a:f7:c4:35:f9:17:06:1e: af:c2:42:b7:64:62:46:cd:40:8e:4f:0e:4f:3c:8e: 92:97:06:1e:17:f7:ed:5b:ca:36:ca:3f:0e:90:15: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:87:72:6D:11:4B:13:56:BB:82:E7:9E:5C:DD:24:92:C0:BD:39:AD X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:5f:66:d1:76:87:9e:46:0b:e8:65:fd:22:83:de:19:f7:f3: dc:d5:a1:83:c3:29:44:4e:06:f5:92:02:32:dc:80:19:b1:5b: 53:29:71:8b:a6:48:4c:35:cc:c5:2d:9f:9d:8f:67:b5:d6:00: 68:9c:4a:72:72:90:8c:8f:08:af:13:dd:42:64:bc:1a:b1:e4: 63:2d:af:3b:72:6f:9c:e5:04:e5:70:2f:09:0b:a7:2e:23:b0: 86:9c:1e:5c:74:b8:cc:c3:c5:c8:56:f6:b3:d3:5a:ea:6b:f1: 72:71:2d:b0:a3:3f:2e:22:e0:f8:ef:c7:84:e3:eb:b5:e6:7e: ea:75:75:b8:8c:f1:b2:16:9d:2f:68:5f:91:08:4f:96:06:25: 59:63:f0:42:75:c3:ec:47:86:4f:39:99:7d:56:30:a8:51:3a: ad:a8:a5:5b:db:72:bb:99:3e:42:17:01:db:f1:7b:68:89:8e: ab:f7:2d:fe:a6:ff:40:19:d2:4c:35:41:f4:fe:76:d1:5e:f1: 29:5b:56:31:08:df:e6:2e:dc:72:70:a5:62:a6:d7:b1:d3:18: 9d:00:b9:5c:8b:68:01:a9:75:82:18:76:5a:2e:7f:b6:94:ad: 2c:e1:61:ab:ed:7a:3b:c7:d5:85:62:f8:57:3a:b8:89:18:a2: 43:80:a1:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjUwNjEyMjMyNDQ1WhcNMjUwNjE5MjMyNDQ1WjAYMRYwFAYD VQQDEw02ODRiNjFiZC1hYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxud6FVv02Ol+w7lQ713ya0FyXneeETycK4Q59fTibfjkc+9fLWEE7TRn+ok5 Tt3ZaeRzzsMLM0FRDJ4r+FEPJj+eN4Ld6VGB2AXvh0shjCOBYlPzRFxeYO/GI8+9 brWe1fXckvzWCXnEgc07Dfgcwlq50PUfUcFRFKOegD/w8884mUaCY/iPzKV1hoKT yG6dpATk7H8lQhCOaza1pn6Fde3e9Py8XkwL0R9GxmVSDaVT/zLQDyRbdSUFnx1g Xn4s4vbnJ8oghJ8alUlmh0sK2ieMn4QfVgIsevfENfkXBh6vwkK3ZGJGzUCOTw5P PI6SlwYeF/ftW8o2yj8OkBU03QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOHcm0R SxNWu4LnnlzdJJLAvTmtMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEX2bRdoeeRgvoZf0ig94Z9/Pc1aGDwylETgb1kgIy3IAZsVtTKXGL pkhMNczFLZ+dj2e11gBonEpycpCMjwivE91CZLwaseRjLa87cm+c5QTlcC8JC6cu I7CGnB5cdLjMw8XIVvaz01rqa/FycS2woz8uIuD478eE4+u15n7qdXW4jPGyFp0v aF+RCE+WBiVZY/BCdcPsR4ZPOZl9VjCoUTqtqKVb23K7mT5CFwHb8XtoiY6r9y3+ pv9AGdJMNUH0/nbRXvEpW1YxCN/mLtxycKViptex0xidALlci2gBqXWCGHZaLn+2 lK0s4WGr7Xo7x9WFYvhXOriJGKJDgKH9 -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:59 2025 by rpki-client