$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: ZdSXfBupwsg0KuFrEBOepVJpCJ+GtKKAfHl8H62cxhE= Subject key identifier: 5A:37:39:84:47:0C:23:4B:20:58:F3:1F:26:A5:AC:9D:6E:91:AD:07 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 1090 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 192B Signing time: Sat 14 Jun 2025 17:17:30 +0000 Manifest this update: Sat 14 Jun 2025 17:17:29 +0000 Manifest next update: Sat 21 Jun 2025 17:17:29 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: zwy7XsHHuDEpufcsKBmHeO3xbsBixiRinriuFxZri6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4240 (0x1090) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Jun 14 17:17:29 2025 GMT Not After : Jun 21 17:17:29 2025 GMT Subject: CN=684daea9-1f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:d9:ba:f8:ed:d8:8f:65:3a:aa:93:cf:db: 2d:ce:91:23:7e:32:b6:f4:a9:86:eb:a8:4a:34:88: c3:b9:7a:73:77:4a:bf:07:8c:7d:be:ba:11:32:ce: 27:4c:eb:8a:e3:6d:45:29:89:94:1a:80:9c:c5:3f: db:d7:dd:50:de:09:e3:2e:6e:0c:46:f4:34:62:1d: be:d5:c2:0e:b6:96:24:4d:8e:aa:ce:25:f4:65:fe: 30:2f:18:a4:a2:aa:2d:86:cd:9c:dc:1c:75:ab:26: f9:72:7d:d2:95:e9:e9:4d:79:5f:8e:44:e4:1a:17: 0f:a5:90:93:4e:e7:91:5c:d4:6a:de:f0:e6:30:a0: 73:2e:f3:ac:a3:df:5e:c2:4e:28:83:42:10:e2:84: d0:24:60:e2:1e:14:0d:f9:78:32:ae:d3:60:32:a9: b7:f3:07:f2:b4:f6:c7:69:90:00:5d:09:0d:7d:04: 2b:ea:de:8d:00:35:bd:52:1a:1c:f6:6d:12:50:b1: eb:12:ef:b4:d5:01:fe:9f:ef:ee:a0:43:b2:3e:f2: 5b:fe:42:8f:0b:37:7e:6f:36:d0:ca:80:bc:6b:6b: bf:02:d0:2c:22:b2:32:81:bc:af:9e:07:8e:aa:13: bc:ab:92:1d:00:84:78:ce:77:c0:0e:6e:4c:f8:27: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:37:39:84:47:0C:23:4B:20:58:F3:1F:26:A5:AC:9D:6E:91:AD:07 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0c:8c:54:d2:57:21:70:c6:cb:d1:1e:d1:96:a9:73:bd:f4: 9b:14:44:47:45:b5:a3:3b:57:0e:ec:53:43:5b:48:01:59:97: 21:e5:75:00:9f:b1:8a:03:0c:d1:c1:e8:be:9d:d8:62:ca:d4: 6a:59:b3:32:54:65:64:e9:7c:14:81:2c:29:67:b3:03:ac:53: e6:80:b5:0f:4a:15:1a:28:bb:75:c8:3c:fb:71:c8:25:df:20: a3:4a:03:3c:10:75:42:0e:69:d0:82:da:11:7b:62:50:d0:72: 7f:4b:58:3d:8e:1e:0b:d2:e0:13:cc:a2:9d:8a:c6:bf:99:40: 75:42:6f:af:fd:c0:df:22:ed:42:09:04:16:66:8f:cb:fa:d7: 49:c1:5d:ff:3e:c1:eb:8b:f3:80:90:d6:da:21:d8:bc:2c:01: 05:e0:13:a4:ce:08:ef:70:af:ab:53:15:ed:13:bb:d4:bc:de: 46:b2:cf:d1:6f:61:78:1c:24:cb:38:63:c9:23:67:68:4f:35: d1:96:c8:6d:da:a5:25:5a:76:91:72:73:30:45:b7:2f:72:2d: 8e:8e:bb:de:3a:75:63:9a:50:56:40:de:e0:e4:b7:a8:12:27: 4b:13:b7:29:41:e9:f4:16:5a:cd:39:72:c5:4e:d6:94:4b:89: da:b2:f0:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjUwNjE0MTcxNzI5WhcNMjUwNjIxMTcxNzI5WjAYMRYwFAYD VQQDEw02ODRkYWVhOS0xZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/rZuvjt2I9lOqqTz9stzpEjfjK29KmG66hKNIjDuXpzd0q/B4x9vroRMs4n TOuK421FKYmUGoCcxT/b191Q3gnjLm4MRvQ0Yh2+1cIOtpYkTY6qziX0Zf4wLxik oqoths2c3Bx1qyb5cn3SlenpTXlfjkTkGhcPpZCTTueRXNRq3vDmMKBzLvOso99e wk4og0IQ4oTQJGDiHhQN+XgyrtNgMqm38wfytPbHaZAAXQkNfQQr6t6NADW9Uhoc 9m0SULHrEu+01QH+n+/uoEOyPvJb/kKPCzd+bzbQyoC8a2u/AtAsIrIygbyvngeO qhO8q5IdAIR4znfADm5M+Cf8RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo3OYRH DCNLIFjzHyalrJ1uka0HMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFDIxU0lchcMbL0R7RlqlzvfSbFERHRbWjO1cO7FNDW0gBWZch5XUA n7GKAwzRwei+ndhiytRqWbMyVGVk6XwUgSwpZ7MDrFPmgLUPShUaKLt1yDz7ccgl 3yCjSgM8EHVCDmnQgtoRe2JQ0HJ/S1g9jh4L0uATzKKdisa/mUB1Qm+v/cDfIu1C CQQWZo/L+tdJwV3/PsHri/OAkNbaIdi8LAEF4BOkzgjvcK+rUxXtE7vUvN5Gss/R b2F4HCTLOGPJI2doTzXRlsht2qUlWnaRcnMwRbcvci2OjrveOnVjmlBWQN7g5Leo EidLE7cpQen0FlrNOXLFTtaUS4nasvAb -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:50 2025 by rpki-client