$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json) Hash identifier: 51X8bsZQiKBrYRDPuPi2yGnhSXfREEfz3AAry1DYYlA= Subject key identifier: FC:2C:16:95:9C:F1:7D:66:F8:EC:6F:2D:25:BC:9F:14:D2:31:DE:EA Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft Manifest number: 55 Signing time: Sun 15 Jun 2025 06:19:21 +0000 Manifest this update: Sun 15 Jun 2025 06:19:21 +0000 Manifest next update: Sun 22 Jun 2025 06:19:21 +0000 Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: uHqA3fWZPmpAYJZC0np6lp3+4vImnvzIHOWXPAP+imc=) 2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Validity Not Before: Jun 15 06:19:21 2025 GMT Not After : Jun 22 06:19:21 2025 GMT Subject: CN=684e65e9-8405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:e6:cf:8f:e7:97:e3:75:a5:d7:1f:fb:8c: e2:48:c7:a0:8e:cc:5a:91:ac:5b:6c:0a:ec:ed:e8: b3:ce:c3:ea:65:24:9f:6a:2a:5a:b0:e3:ae:0d:c2: 66:52:87:45:84:8d:06:dd:79:22:9f:60:38:e1:6a: fd:22:db:2a:9a:89:88:be:e5:9a:6e:f0:2e:39:88: f9:bf:1a:ac:05:7c:f8:fe:4b:e1:f1:56:b0:4f:de: 06:e0:88:3a:d9:a6:89:56:35:d6:9b:6c:ea:bc:e1: 0e:25:d6:59:16:90:c3:c3:2f:c8:2f:bb:b5:74:63: 70:4b:47:71:55:6f:08:2b:07:b5:15:f5:cc:e0:a6: e2:0e:d5:37:0e:f3:a4:ec:c7:a6:0d:1b:a7:03:c9: 5b:f4:be:2c:c2:76:ac:7a:94:ae:7a:f3:3b:80:d6: 30:ad:dd:52:b2:29:8f:e8:89:af:09:f5:7e:eb:63: 2c:4b:e0:f5:93:d1:de:de:8c:50:e0:10:92:38:ca: a5:ee:a0:55:ec:93:a4:a5:f8:c7:a3:f6:06:87:b3: 72:56:b6:9b:a0:f7:16:48:1c:77:85:00:51:e9:74: 57:03:44:d6:8c:19:c9:00:f3:1e:31:66:f9:9d:39: 19:f7:e7:d5:08:cc:84:90:27:d6:06:e9:d9:ea:18: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2C:16:95:9C:F1:7D:66:F8:EC:6F:2D:25:BC:9F:14:D2:31:DE:EA X509v3 Authority Key Identifier: keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:06:2a:fd:a3:c2:a9:dd:9d:5e:5b:38:82:14:a5:ce:92:07: 4e:34:13:8b:5d:9b:ca:23:2e:cf:ce:ee:e3:b0:df:ea:35:77: 2a:b2:4d:8e:43:cd:16:0f:c7:02:6a:f7:b7:ec:0f:42:3f:48: 28:f3:ab:5d:b7:b4:83:9b:54:f7:56:ce:93:ce:d1:bd:4d:a6: d0:46:2a:95:d2:88:bc:e4:a3:d2:c4:2e:22:da:8f:f4:0b:0a: 19:55:ec:b4:b1:34:36:fa:79:a0:d3:44:63:31:e8:7f:46:bf: 50:67:dd:64:45:db:ac:bb:3d:05:11:d3:57:1a:e0:cb:17:4a: 4c:e1:a2:96:db:a7:b0:09:27:26:cb:53:c2:0c:f4:bc:94:63: 20:a0:6f:76:76:1d:db:23:89:76:e9:5b:d4:66:86:0a:0c:3a: 58:b0:9b:b9:d6:d6:37:18:a8:8b:b8:9d:38:09:96:d8:e4:65: ab:f5:46:d5:ce:79:19:cb:f3:e7:ef:e0:2a:83:5d:71:8b:03: d0:db:cc:a0:41:57:13:19:b6:cb:04:97:6c:f2:52:11:da:4b: 20:b4:ad:42:65:4e:34:8e:e3:87:e9:d3:f1:c5:b2:9e:71:79: fe:9c:16:40:24:c4:26:c2:93:86:4b:d4:76:90:59:c0:5b:90: 64:c1:66:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDEyNTExMC8GA1UEBRMoNkY3N0MxOUYxMUQzMkFBQUE0MkUyNjkxNkY3NDgyRUZC OEY5N0ExQzAeFw0yNTA2MTUwNjE5MjFaFw0yNTA2MjIwNjE5MjFaMBgxFjAUBgNV BAMTDTY4NGU2NWU5LTg0MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkcubPj+eX43Wl1x/7jOJIx6COzFqRrFtsCuzt6LPOw+plJJ9qKlqw464NwmZS h0WEjQbdeSKfYDjhav0i2yqaiYi+5Zpu8C45iPm/GqwFfPj+S+HxVrBP3gbgiDrZ polWNdabbOq84Q4l1lkWkMPDL8gvu7V0Y3BLR3FVbwgrB7UV9czgpuIO1TcO86Ts x6YNG6cDyVv0vizCdqx6lK568zuA1jCt3VKyKY/oia8J9X7rYyxL4PWT0d7ejFDg EJI4yqXuoFXsk6Sl+Mej9gaHs3JWtpug9xZIHHeFAFHpdFcDRNaMGckA8x4xZvmd ORn359UIzISQJ9YG6dnqGOgRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/CwWlZzx fWb47G8tJbyfFNIx3uowHwYDVR0jBBgwFoAUb3fBnxHTKqqkLiaRb3SC77j5ehww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMTI1L0Y1Rjc4NzhBQ0Mx MDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fxa0xpYVJiM1NDNzdqNWVo dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjNmQm54SFRLcXFrTGlhUmIzU0M3N2o1ZWh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MTI1L0Y1Rjc4NzhBQ0MxMDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fx a0xpYVJiM1NDNzdqNWVody5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIAGKv2jwqndnV5bOIIUpc6SB040E4tdm8ojLs/O7uOw3+o1dyqyTY5D zRYPxwJq97fsD0I/SCjzq123tIObVPdWzpPO0b1NptBGKpXSiLzko9LELiLaj/QL ChlV7LSxNDb6eaDTRGMx6H9Gv1Bn3WRF26y7PQUR01ca4MsXSkzhopbbp7AJJybL U8IM9LyUYyCgb3Z2HdsjiXbpW9RmhgoMOliwm7nW1jcYqIu4nTgJltjkZav1RtXO eRnL8+fv4CqDXXGLA9DbzKBBVxMZtssEl2zyUhHaSyC0rUJlTjSO44fp0/HFsp5x ef6cFkAkxCbCk4ZL1HaQWcBbkGTBZmE= -----END CERTIFICATE-----Generated at Mon Jun 16 20:03:42 2025 by rpki-client