$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: my/uRrcHb5X6CkvEE9nxGnft3tHlrr0Qa+vJMKTveuI= Subject key identifier: 34:EF:C0:AF:27:68:FA:05:61:18:D1:85:3F:92:34:B2:D4:64:D1:70 Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: DD Signing time: Sun 15 Jun 2025 04:39:40 +0000 Manifest this update: Sun 15 Jun 2025 04:39:40 +0000 Manifest next update: Sun 22 Jun 2025 04:39:40 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: TCHWwlv+GHK9GUjUdms9PpbrfNK6LsdHNOVEIGqUReo=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Jun 15 04:39:40 2025 GMT Not After : Jun 22 04:39:40 2025 GMT Subject: CN=684e4e8c-573e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:c2:11:b2:9a:5b:6a:13:ed:f5:c8:d0:9d: 08:f6:e0:8f:7a:d8:98:1e:75:62:e2:6e:f2:1d:a8: 6b:69:f5:d0:00:64:51:c8:af:60:b6:94:f6:00:be: 87:e4:23:b5:19:79:bd:6f:93:61:a8:7e:d0:a0:97: 61:c0:9d:f6:a7:c7:31:a4:5e:f5:e9:2f:a5:fe:5d: b9:b6:b7:55:e6:4a:7a:50:28:a2:cf:ac:53:5d:05: ec:e6:d6:58:63:dd:a4:2a:9d:32:7d:64:c8:41:25: 93:80:8d:06:d2:6c:5b:f2:8f:4f:0d:f8:b4:2e:79: ca:66:6b:e6:b4:bf:51:8e:6d:66:64:69:26:c2:b5: 39:dd:29:05:2d:d1:f2:87:32:92:a2:a5:91:f1:2a: 06:c2:cc:9d:be:47:04:42:a0:13:06:16:db:fe:ed: 5c:d6:57:01:35:7d:7b:f1:74:2e:0c:67:e8:90:51: 18:1c:f8:a8:d0:51:30:53:40:26:bc:0a:ab:bc:cf: 30:a0:ac:50:af:4b:be:a8:c6:e7:a8:24:5b:07:c3: 2f:74:7c:84:2d:4a:50:ed:33:60:a7:cc:01:0a:3f: 64:81:84:2a:c3:f9:4c:c9:53:d7:ca:98:25:f5:ba: 64:bd:db:61:ea:9d:a6:13:b6:3f:65:56:e9:64:7b: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EF:C0:AF:27:68:FA:05:61:18:D1:85:3F:92:34:B2:D4:64:D1:70 X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b0:a7:38:4f:5b:71:39:82:67:c0:bb:94:00:0a:73:44:02: 07:49:9b:7d:ed:40:aa:6d:f7:e8:8e:0f:6e:f9:b3:b0:6d:55: ea:63:0c:81:73:51:53:af:b5:0f:f1:bb:d0:ea:68:37:36:0f: 34:98:66:5a:ea:a8:5b:d0:18:b7:d9:e2:70:58:76:c9:de:5f: 0f:28:b8:52:35:dc:14:a9:ba:2e:31:0f:02:b2:42:07:ee:17: 9c:37:82:eb:ac:f7:d9:88:37:91:a9:43:f4:a7:f5:22:4b:02: 77:65:6c:da:d4:ae:01:2c:2d:d8:1d:e6:5d:06:5a:ff:51:fa: a6:95:7f:ea:05:f4:30:43:e8:f2:fe:ac:9d:b0:d4:06:89:92: 34:3d:c2:3e:8d:c1:34:85:af:03:64:d9:0d:a7:9b:43:8e:df: e4:b5:a1:a6:86:4f:5b:98:44:f6:ce:a9:f5:22:59:fa:27:74: 44:1b:37:b4:73:d6:19:92:59:04:21:e2:be:25:41:1f:2e:c8: 95:0a:cf:bf:a9:6a:98:6b:58:b6:40:c5:e9:b9:f7:9b:58:6f: ef:dc:d9:48:b8:8b:c5:76:d4:2d:0b:23:9b:c0:9c:d4:88:94: 0d:81:98:55:e0:1b:49:d8:65:28:83:11:6d:75:15:00:be:c2: 65:f5:2e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUwNjE1MDQzOTQwWhcNMjUwNjIyMDQzOTQwWjAYMRYwFAYD VQQDEw02ODRlNGU4Yy01NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszjCEbKaW2oT7fXI0J0I9uCPetiYHnVi4m7yHahrafXQAGRRyK9gtpT2AL6H 5CO1GXm9b5NhqH7QoJdhwJ32p8cxpF716S+l/l25trdV5kp6UCiiz6xTXQXs5tZY Y92kKp0yfWTIQSWTgI0G0mxb8o9PDfi0LnnKZmvmtL9Rjm1mZGkmwrU53SkFLdHy hzKSoqWR8SoGwsydvkcEQqATBhbb/u1c1lcBNX178XQuDGfokFEYHPio0FEwU0Am vAqrvM8woKxQr0u+qMbnqCRbB8MvdHyELUpQ7TNgp8wBCj9kgYQqw/lMyVPXypgl 9bpkvdth6p2mE7Y/ZVbpZHunCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTvwK8n aPoFYRjRhT+SNLLUZNFwMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJsKc4T1txOYJnwLuUAApzRAIHSZt97UCqbffojg9u+bOwbVXqYwyB c1FTr7UP8bvQ6mg3Ng80mGZa6qhb0Bi32eJwWHbJ3l8PKLhSNdwUqbouMQ8CskIH 7hecN4LrrPfZiDeRqUP0p/UiSwJ3ZWza1K4BLC3YHeZdBlr/UfqmlX/qBfQwQ+jy /qydsNQGiZI0PcI+jcE0ha8DZNkNp5tDjt/ktaGmhk9bmET2zqn1Iln6J3REGze0 c9YZklkEIeK+JUEfLsiVCs+/qWqYa1i2QMXpufebWG/v3NlIuIvFdtQtCyObwJzU iJQNgZhV4BtJ2GUogxFtdRUAvsJl9S5y -----END CERTIFICATE-----Generated at Sun Jun 15 09:36:36 2025 by rpki-client