$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: JnNtim0VEyCN5p/PADdrZO7UoPJREPuuCU0rd1R8/2s= Subject key identifier: 47:13:17:E6:9A:9C:43:0C:CA:95:C4:3F:AC:8B:F7:BA:DE:98:5D:5D Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0941 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0933 Signing time: Fri 20 Jun 2025 20:09:30 +0000 Manifest this update: Fri 20 Jun 2025 20:09:30 +0000 Manifest next update: Fri 27 Jun 2025 20:09:30 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: UoTQqQi8sV41twK2UeGf1uuTqg3WqYKyybDWj3H1q+0=) 2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: bw4sMGnKDiftNLfRmiZR5SdnMpNduWFQjTQlPL6jZYY=) 3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: FPAklaM71rdV3Mf7CFthJcOnotN1vw1BtN7p9xcPR+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 20:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2369 (0x941) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Jun 20 20:09:30 2025 GMT Not After : Jun 27 20:09:30 2025 GMT Subject: CN=6855bffa-a34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:1c:e7:f0:c1:da:bc:08:ef:06:38:df:ad: aa:9c:68:e3:8a:ba:76:c1:6b:0a:5b:ba:f5:74:d4: ad:dc:64:3d:a0:c0:50:ae:11:5f:b4:bf:dd:58:59: 58:37:c3:13:b3:d4:49:00:64:92:93:e1:77:b6:8e: 4e:e9:da:fe:17:df:34:3e:85:b6:79:2b:89:fc:c6: 64:b1:26:14:ea:cb:6e:3d:82:21:50:e0:9b:3a:3f: 29:95:11:7e:73:30:49:e8:15:fd:1b:70:89:54:48: 89:1e:b6:04:ae:25:5f:35:75:c0:d2:50:a8:a3:59: a1:f3:63:51:f7:ef:e8:87:a6:ee:c0:af:6c:c5:4d: 82:f3:b3:36:e7:18:81:54:95:46:86:b4:59:bd:6d: b4:1c:2f:cb:e3:da:77:ef:33:3a:be:9a:52:da:2f: ae:a4:87:15:8f:0e:b8:d7:b7:e7:16:8a:10:4e:ba: 92:0c:d3:7d:fb:0c:6e:68:2b:f0:6a:3f:24:31:56: 40:92:28:8e:41:e0:31:ba:73:26:78:ba:da:42:6e: d6:36:d4:32:6f:70:26:99:bf:a6:94:fc:1e:9e:9b: 8d:d8:be:a8:e9:ef:cf:e4:90:2b:8f:06:47:ec:6c: 37:4b:a9:2b:9a:e5:45:8a:0f:b2:05:9b:cb:a4:2b: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:13:17:E6:9A:9C:43:0C:CA:95:C4:3F:AC:8B:F7:BA:DE:98:5D:5D X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:25:61:12:5d:ee:d0:58:9b:fb:9a:c2:17:3e:40:cc:c0:79: ba:ad:ea:5d:2b:72:cb:02:84:02:8a:67:de:1e:87:f4:21:67: 6b:08:48:b1:90:ff:e4:b8:3f:c7:50:18:d1:d0:20:94:98:27: 86:e7:aa:3c:8f:5a:73:80:91:ba:58:f7:65:7c:73:61:66:c7: 43:ab:68:56:73:0c:2c:9a:e0:c6:60:a6:71:ff:d4:b4:e5:ff: 82:7e:d4:10:28:b8:4a:f4:c9:98:12:a9:e3:7c:92:62:0d:60: 00:90:c6:d2:3a:c9:a8:18:7c:fb:18:05:f9:87:a9:1e:50:4c: e2:42:93:7e:1e:ac:05:66:ee:e9:23:d6:fa:e5:ba:2e:87:43: ac:3b:a0:e9:12:47:52:7a:93:db:35:8b:2a:d1:f9:d7:43:fe: 69:19:bf:17:c1:4c:fb:91:dc:f8:dc:61:b6:18:f6:9e:6f:82: 2f:30:cf:d9:af:ae:68:6a:5a:19:d4:fb:05:86:e4:52:e4:bd: d8:24:52:a5:84:60:2c:03:ab:27:9d:80:f1:ea:4a:26:1c:c6: 5d:ff:60:6e:9c:16:fd:15:0c:92:c4:e9:5e:5e:27:24:b6:eb: 10:24:7c:78:a5:7e:93:36:80:5f:6e:3c:e3:34:59:b6:37:3a: b0:50:ed:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwNjIwMjAwOTMwWhcNMjUwNjI3MjAwOTMwWjAYMRYwFAYD VQQDEw02ODU1YmZmYS1hMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiMc5/DB2rwI7wY4362qnGjjirp2wWsKW7r1dNSt3GQ9oMBQrhFftL/dWFlY N8MTs9RJAGSSk+F3to5O6dr+F980PoW2eSuJ/MZksSYU6stuPYIhUOCbOj8plRF+ czBJ6BX9G3CJVEiJHrYEriVfNXXA0lCoo1mh82NR9+/oh6buwK9sxU2C87M25xiB VJVGhrRZvW20HC/L49p37zM6vppS2i+upIcVjw6417fnFooQTrqSDNN9+wxuaCvw aj8kMVZAkiiOQeAxunMmeLraQm7WNtQyb3Ammb+mlPwenpuN2L6o6e/P5JArjwZH 7Gw3S6krmuVFig+yBZvLpCtOQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcTF+aa nEMMypXEP6yL97remF1dMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIJWESXe7QWJv7msIXPkDMwHm6repdK3LLAoQCimfeHof0IWdrCEix kP/kuD/HUBjR0CCUmCeG56o8j1pzgJG6WPdlfHNhZsdDq2hWcwwsmuDGYKZx/9S0 5f+CftQQKLhK9MmYEqnjfJJiDWAAkMbSOsmoGHz7GAX5h6keUEziQpN+HqwFZu7p I9b65bouh0OsO6DpEkdSepPbNYsq0fnXQ/5pGb8XwUz7kdz43GG2GPaeb4IvMM/Z r65oaloZ1PsFhuRS5L3YJFKlhGAsA6snnYDx6komHMZd/2BunBb9FQySxOleXick tusQJHx4pX6TNoBfbjzjNFm2NzqwUO3X -----END CERTIFICATE-----Generated at Sat Jun 21 02:08:31 2025 by rpki-client