$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: xLm7VVD9axKwyV/Cg2yegS2ZYFsoK2jtCztaQbhQUHo= Subject key identifier: C4:76:2F:5D:0F:4E:FF:54:60:59:58:E2:9A:39:D3:4E:78:48:1C:85 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 151F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 1517 Signing time: Mon 16 Jun 2025 16:51:34 +0000 Manifest this update: Mon 16 Jun 2025 16:51:34 +0000 Manifest next update: Mon 23 Jun 2025 16:51:34 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: VUcnpBaOQBZi63gbPTuB28URHe+Xm0KEdRWSuhg5G5k=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5407 (0x151f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Jun 16 16:51:34 2025 GMT Not After : Jun 23 16:51:34 2025 GMT Subject: CN=68504b96-5d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:a7:f2:c8:b0:b4:9c:bd:e0:cf:ab:a7:af: 19:bb:e3:cc:6a:98:f2:7b:6c:94:f6:25:c5:e6:74: 5b:45:d9:7a:d4:b7:46:75:7c:78:0e:51:7e:c0:13: eb:42:41:0f:74:7d:9f:e9:46:e3:42:73:f2:54:16: 63:37:dd:cb:c9:2e:bd:5a:be:cf:5c:f9:fc:c4:75: 90:c1:8a:d4:1b:46:d2:10:7f:80:d2:8a:5a:12:1b: 19:80:8b:1b:a0:26:a3:22:78:5d:59:3f:9c:95:0b: e5:f7:56:62:b7:43:2b:45:7f:14:f5:de:cb:04:5d: 96:a1:12:e1:76:55:69:36:41:96:a9:c5:c5:df:8a: b8:44:2d:57:8e:39:26:f9:75:d9:c9:74:7b:85:15: f3:a6:04:fa:f0:0c:54:e3:88:75:01:90:5e:ae:5f: b5:76:71:a8:21:d5:3c:78:62:00:f3:bf:be:d6:b5: c1:ac:a0:6f:75:e7:c4:25:bf:33:39:2e:5a:b3:13: 21:ff:c0:46:5a:e1:36:be:e1:b0:07:58:2b:40:f2: 73:83:00:8c:7e:97:75:0b:f5:6c:80:49:93:43:04: f3:62:5f:08:b7:ba:11:19:94:30:a4:37:0f:11:fd: 41:a8:b6:1f:2c:77:7c:17:f8:a5:66:75:83:34:f2: 60:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:76:2F:5D:0F:4E:FF:54:60:59:58:E2:9A:39:D3:4E:78:48:1C:85 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:eb:25:a2:54:55:92:36:66:39:8a:4a:44:82:fc:84:2e:dc: 20:88:d5:77:ea:a8:e4:9f:af:41:79:ba:1f:03:7a:1a:57:f6: 0a:a5:e1:dd:32:ed:fd:e1:47:49:58:b4:26:f0:a1:4c:1b:2f: 13:95:d6:05:c3:b1:51:18:d9:9d:51:09:9d:31:b7:ca:c4:e0: cf:ce:ae:17:61:39:a2:62:dc:1b:78:9c:26:ee:07:54:f5:b0: 4f:0f:61:4c:50:9e:40:45:8e:a1:3b:59:61:6f:06:59:e8:79: 45:31:35:2a:a8:d4:7c:0c:6a:b0:27:67:e2:32:14:55:e3:48: 86:0b:b9:91:8e:74:cf:2c:03:bb:c5:d5:29:cf:c0:14:68:6c: 50:0b:f4:41:ad:0d:83:0b:32:33:a9:f8:2d:b2:9a:fe:7b:b4: a2:3b:e7:d0:b2:6b:8a:99:d8:51:97:1d:c8:b6:45:8b:6b:52: 80:b3:d9:67:d4:a6:eb:84:9d:08:d3:4c:c9:2e:b2:d9:9c:13: c0:c8:c5:0c:be:4e:40:d3:75:c2:61:aa:04:a9:41:0f:74:95: 07:4e:6d:3a:f8:b3:89:f5:11:58:80:cc:bf:56:82:23:64:77: 33:42:d7:74:31:c3:99:aa:16:43:78:c3:cc:5e:1e:8e:ec:81: 86:39:a0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUwNjE2MTY1MTM0WhcNMjUwNjIzMTY1MTM0WjAYMRYwFAYD VQQDEw02ODUwNGI5Ni01ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6en8siwtJy94M+rp68Zu+PMapjye2yU9iXF5nRbRdl61LdGdXx4DlF+wBPr QkEPdH2f6UbjQnPyVBZjN93LyS69Wr7PXPn8xHWQwYrUG0bSEH+A0opaEhsZgIsb oCajInhdWT+clQvl91Zit0MrRX8U9d7LBF2WoRLhdlVpNkGWqcXF34q4RC1Xjjkm +XXZyXR7hRXzpgT68AxU44h1AZBerl+1dnGoIdU8eGIA87++1rXBrKBvdefEJb8z OS5asxMh/8BGWuE2vuGwB1grQPJzgwCMfpd1C/VsgEmTQwTzYl8It7oRGZQwpDcP Ef1BqLYfLHd8F/ilZnWDNPJghQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR2L10P Tv9UYFlY4po50054SByFMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA66yWiVFWSNmY5ikpEgvyELtwgiNV36qjkn69BebofA3oaV/YKpeHd Mu394UdJWLQm8KFMGy8TldYFw7FRGNmdUQmdMbfKxODPzq4XYTmiYtwbeJwm7gdU 9bBPD2FMUJ5ARY6hO1lhbwZZ6HlFMTUqqNR8DGqwJ2fiMhRV40iGC7mRjnTPLAO7 xdUpz8AUaGxQC/RBrQ2DCzIzqfgtspr+e7SiO+fQsmuKmdhRlx3ItkWLa1KAs9ln 1KbrhJ0I00zJLrLZnBPAyMUMvk5A03XCYaoEqUEPdJUHTm06+LOJ9RFYgMy/VoIj ZHczQtd0McOZqhZDeMPMXh6O7IGGOaBL -----END CERTIFICATE-----Generated at Tue Jun 17 09:09:50 2025 by rpki-client