$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: X3GyQhP3cxbuF3kkZytBenQ2cgsD9HBrZobZ6rte5yc= Subject key identifier: FD:2A:52:ED:EC:CD:49:C0:40:55:CB:EF:0F:C1:6F:9E:B1:B0:D9:39 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2CA3 Signing time: Sat 14 Jun 2025 15:30:34 +0000 Manifest this update: Sat 14 Jun 2025 15:30:34 +0000 Manifest next update: Sat 21 Jun 2025 15:30:33 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: nzptK0tDubxojTNBf2ZdoVzq7R8pDXCXT2L5EGI7Bc4=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: skjzRKV2yiK6mRZi2jO6tjX3v0zfq/yBAWOKemHERmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11448 (0x2cb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jun 14 15:30:34 2025 GMT Not After : Jun 21 15:30:33 2025 GMT Subject: CN=684d959a-4d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:3c:43:fe:e5:9c:e2:83:c6:88:da:24:51: d3:e5:f7:9b:14:3b:ef:fd:3e:db:08:e6:7d:b8:b4: 5c:ef:17:1f:1a:e7:10:98:7b:51:41:63:df:61:45: c9:03:70:3f:6a:a5:a5:95:68:e0:79:87:89:26:47: 29:f8:ad:52:c6:00:db:2e:de:5c:d0:5f:cf:8b:f3: ba:79:97:75:35:e6:94:06:e8:3c:a3:6d:1b:5b:05: 4f:a9:4e:0a:94:ad:09:57:54:56:71:60:ae:45:95: d1:d6:78:c4:02:27:67:f0:69:de:34:5e:0a:92:7d: ea:bd:77:36:75:bd:40:c2:b5:d0:1e:54:e3:41:e4: 8d:c0:83:24:bf:16:d6:f9:ee:21:ee:b7:7e:70:54: 6d:84:aa:57:04:b0:76:2a:2f:25:15:be:2b:ca:59: b2:7f:91:2f:db:a3:51:6a:19:8c:2d:aa:b3:79:0f: 51:27:30:d4:e7:1e:46:38:d2:69:88:b1:24:19:4f: 16:a1:ba:1c:04:ee:cb:3f:4b:6a:da:75:4d:f4:23: 17:fb:7a:15:60:dd:c6:4c:dd:d7:16:89:2c:81:e7: c9:79:5b:2c:58:0e:b2:39:31:96:ab:e1:41:ce:fb: d8:25:82:80:35:8a:a9:8a:34:f5:9a:35:6b:24:52: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2A:52:ED:EC:CD:49:C0:40:55:CB:EF:0F:C1:6F:9E:B1:B0:D9:39 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:48:ac:b5:d2:ce:28:34:0c:23:1c:7f:e2:b1:be:8d:57:7b: 16:83:9c:85:48:e6:4c:16:c8:53:6d:ae:b5:e8:fb:39:ad:4f: cc:02:42:85:50:fd:e2:75:96:0b:8d:7d:aa:17:32:55:59:e5: 9b:0d:e2:6b:c7:69:5f:70:41:5d:0f:90:15:6d:d8:e2:1b:0a: 02:71:29:2f:65:aa:30:9b:f8:9f:c1:3d:2b:02:f5:5c:88:68: da:8b:84:14:e1:3d:43:18:f6:42:0e:47:44:7c:da:80:ae:81: 8e:b5:16:cc:8c:3f:1d:d2:90:dd:c5:0f:61:88:96:a6:84:1c: 2c:49:3e:36:38:8d:fa:6d:3e:31:7c:2d:cf:32:d5:9a:36:a7: 05:f7:56:aa:73:fe:37:0c:ef:03:6f:3f:62:da:d2:c4:42:a1: ec:73:9f:bc:84:7d:7f:d5:48:2e:35:51:37:e3:5a:bd:03:bf: cc:40:1d:57:11:dc:57:15:4c:d3:62:37:38:db:81:8a:09:36: 23:16:54:66:9c:a2:cf:50:54:04:e4:8c:15:ab:3f:40:42:b7: d8:d4:fa:fc:f7:8e:4c:27:f5:de:af:13:e7:26:1b:51:76:a5: 13:ed:50:4b:26:43:83:fe:bc:37:13:e6:44:e5:f0:5b:e4:ff: db:21:b4:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUwNjE0MTUzMDM0WhcNMjUwNjIxMTUzMDMzWjAYMRYwFAYD VQQDEw02ODRkOTU5YS00ZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurk8Q/7lnOKDxojaJFHT5febFDvv/T7bCOZ9uLRc7xcfGucQmHtRQWPfYUXJ A3A/aqWllWjgeYeJJkcp+K1SxgDbLt5c0F/Pi/O6eZd1NeaUBug8o20bWwVPqU4K lK0JV1RWcWCuRZXR1njEAidn8GneNF4Kkn3qvXc2db1AwrXQHlTjQeSNwIMkvxbW +e4h7rd+cFRthKpXBLB2Ki8lFb4rylmyf5Ev26NRahmMLaqzeQ9RJzDU5x5GONJp iLEkGU8WobocBO7LP0tq2nVN9CMX+3oVYN3GTN3XFoksgefJeVssWA6yOTGWq+FB zvvYJYKANYqpijT1mjVrJFKgFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0qUu3s zUnAQFXL7w/Bb56xsNk5MB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKSKy10s4oNAwjHH/isb6NV3sWg5yFSOZMFshTba616Ps5rU/MAkKF UP3idZYLjX2qFzJVWeWbDeJrx2lfcEFdD5AVbdjiGwoCcSkvZaowm/ifwT0rAvVc iGjai4QU4T1DGPZCDkdEfNqAroGOtRbMjD8d0pDdxQ9hiJamhBwsST42OI36bT4x fC3PMtWaNqcF91aqc/43DO8Dbz9i2tLEQqHsc5+8hH1/1UguNVE341q9A7/MQB1X EdxXFUzTYjc424GKCTYjFlRmnKLPUFQE5IwVqz9AQrfY1Pr8945MJ/XerxPnJhtR dqUT7VBLJkOD/rw3E+ZE5fBb5P/bIbSg -----END CERTIFICATE-----Generated at Sat Jun 14 17:55:45 2025 by rpki-client