$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: 1RFwdt+YKMVw5HguX0zH20mwSNxE/I6Wy+em9Mi1UBg= Subject key identifier: DC:99:99:F5:09:4E:16:6A:26:95:4B:1E:59:C5:83:B7:9E:E4:B6:59 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: FC Signing time: Thu 19 Jun 2025 04:33:32 +0000 Manifest this update: Thu 19 Jun 2025 04:33:31 +0000 Manifest next update: Thu 26 Jun 2025 04:33:31 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: erVk4Cwk24k/cV/a3jpcKDcoodQSxtfmX/GYU/U59PI=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 1uxD9+JBsmHAELgtODtowZ9H7bGY5PrdUNrrDTftS4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Jun 19 04:33:31 2025 GMT Not After : Jun 26 04:33:31 2025 GMT Subject: CN=6853931c-e057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:03:3c:86:b1:7e:22:9a:bb:5b:11:95:87: 2d:ae:67:57:06:b2:d4:ef:70:bb:a8:e6:59:d1:a4: ab:d6:10:e7:ab:8e:3d:d1:56:77:84:5c:cd:f6:f5: 80:2c:68:61:24:57:fd:9e:69:34:39:4c:4a:e2:92: c0:93:f1:4f:2f:6d:96:4d:b9:e6:c5:27:1f:59:fd: 47:9e:49:d2:82:b7:00:c0:c3:96:80:44:59:58:6a: 73:97:c3:62:20:c0:22:5f:6b:57:a3:d0:d5:7d:1b: 09:0a:aa:e2:03:40:09:95:a4:e4:c3:0d:b1:eb:09: 70:00:b6:2e:fe:a9:80:e2:b8:7c:1a:9b:89:57:3a: a8:81:0f:0b:5c:48:41:6a:56:62:17:d0:8e:8a:f2: de:ad:e1:01:3f:e3:9c:11:d9:ad:a5:5e:d6:75:5e: d1:46:2c:5a:5d:d1:8e:83:2c:43:de:bf:5c:51:c9: cb:99:1a:6b:db:37:35:ff:3d:1f:e6:82:41:5e:a7: 3c:8e:e6:0d:9d:f4:84:0e:2e:ca:4d:1b:4e:c6:50: db:c6:5a:87:3e:2c:c8:7d:84:a4:2f:02:56:ac:21: 12:d6:5e:f4:80:37:c3:ea:14:a1:8b:4c:d0:06:f7: 1f:e4:c7:d1:18:24:48:00:16:ed:2e:53:a3:df:6f: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:99:99:F5:09:4E:16:6A:26:95:4B:1E:59:C5:83:B7:9E:E4:B6:59 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:ab:81:57:51:cf:4d:b5:72:7b:d6:4e:84:d0:85:0c:c2: de:bf:3c:61:f3:c6:a3:e0:12:8e:4d:ab:27:57:e9:c8:69:45: 13:d4:d1:36:5f:20:77:da:aa:aa:6b:c6:52:34:5b:37:f9:42: 45:0d:f6:df:1d:f6:98:53:59:b5:4c:37:ea:30:a3:90:99:b4: c1:7d:3c:8e:62:42:10:f2:e7:e4:57:40:97:e1:6e:ec:52:fe: 01:a6:fe:cb:d8:ca:a1:22:c4:67:d6:28:f6:a7:4d:c0:76:31: 94:31:3e:66:c8:f9:37:9a:a3:d8:89:2d:5f:4b:ca:f2:23:d4: dc:d5:85:13:cd:96:b6:db:2a:2d:21:2d:a2:c8:ec:42:71:82: 31:3b:e6:e1:fc:42:da:75:e8:e9:4d:87:19:34:61:41:1e:3b: 1b:2b:bf:80:b5:34:7a:a5:84:fa:7d:ff:4d:23:cc:e7:ff:3b: a8:66:14:dd:eb:dc:88:d2:d0:e5:9e:ca:bc:08:2d:ce:6c:7e: bb:d8:ae:6c:06:f4:36:a7:9f:fd:33:fd:32:f0:7a:4a:a9:4e: 7d:14:db:74:eb:de:04:28:9e:9a:49:af:b7:4b:89:14:25:28: 5c:bf:a6:79:23:fe:46:04:29:2c:c9:61:5f:78:7b:7c:9d:7b: d0:dc:74:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUwNjE5MDQzMzMxWhcNMjUwNjI2MDQzMzMxWjAYMRYwFAYD VQQDEw02ODUzOTMxYy1lMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRIDPIaxfiKau1sRlYctrmdXBrLU73C7qOZZ0aSr1hDnq4490VZ3hFzN9vWA LGhhJFf9nmk0OUxK4pLAk/FPL22WTbnmxScfWf1HnknSgrcAwMOWgERZWGpzl8Ni IMAiX2tXo9DVfRsJCqriA0AJlaTkww2x6wlwALYu/qmA4rh8GpuJVzqogQ8LXEhB alZiF9COivLereEBP+OcEdmtpV7WdV7RRixaXdGOgyxD3r9cUcnLmRpr2zc1/z0f 5oJBXqc8juYNnfSEDi7KTRtOxlDbxlqHPizIfYSkLwJWrCES1l70gDfD6hShi0zQ Bvcf5MfRGCRIABbtLlOj329rDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyZmfUJ ThZqJpVLHlnFg7ee5LZZMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXequBV1HPTbVye9ZOhNCFDMLevzxh88aj4BKOTasnV+nIaUUT1NE2 XyB32qqqa8ZSNFs3+UJFDfbfHfaYU1m1TDfqMKOQmbTBfTyOYkIQ8ufkV0CX4W7s Uv4Bpv7L2MqhIsRn1ij2p03AdjGUMT5myPk3mqPYiS1fS8ryI9Tc1YUTzZa22yot IS2iyOxCcYIxO+bh/ELadejpTYcZNGFBHjsbK7+AtTR6pYT6ff9NI8zn/zuoZhTd 69yI0tDlnsq8CC3ObH672K5sBvQ2p5/9M/0y8HpKqU59FNt0694EKJ6aSa+3S4kU JShcv6Z5I/5GBCksyWFfeHt8nXvQ3HRl -----END CERTIFICATE-----Generated at Fri Jun 20 04:39:50 2025 by rpki-client