$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: Mj1kexQIauUFen1tqEstv4Q9gdKzF7v+/m8dys4ONo4= Subject key identifier: E4:93:49:2E:5B:BD:FD:1F:D2:D0:F7:09:6D:A7:52:23:79:16:91:CC Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0862 Signing time: Wed 18 Jun 2025 14:44:06 +0000 Manifest this update: Wed 18 Jun 2025 14:44:06 +0000 Manifest next update: Wed 25 Jun 2025 14:44:06 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: hCVqxJPuX8Pn1eg0ZKxoETG0KrLSD4kiZOT3A0zjZN4=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: qF9QEK3QPpy3Uy+0VtrwIu1I68i1XFjo3G0NKyyWueo=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: 1TGK4JO2Zf1/5yi9BJnBuBHhCgKzzBchGgX4YKczTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jun 18 14:44:06 2025 GMT Not After : Jun 25 14:44:06 2025 GMT Subject: CN=6852d0b6-354f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:a7:cb:37:27:f2:f7:65:b4:95:51:41:6e: b8:4a:85:fe:78:85:dc:76:3a:c4:6b:d4:31:c7:c5: d6:1b:85:f5:da:97:b6:28:7e:e0:26:d0:9f:0e:e0: 57:67:ab:eb:c6:da:fe:54:7d:41:e0:21:f7:6b:05: bf:a7:93:80:4c:25:7c:8f:41:09:14:7d:32:aa:0a: 6b:8b:90:d9:9e:c1:c5:81:db:ea:2d:b8:df:72:2b: 02:39:2e:49:9c:79:41:a8:6f:6e:4b:3c:ae:a2:cc: a1:08:81:ca:9f:dd:5f:77:ea:2f:13:f4:26:ad:45: 0e:6f:e0:1c:b7:e5:d9:b3:df:b5:7c:84:1d:9f:32: 0e:48:6f:3d:1e:b1:24:35:ed:e5:97:d3:58:a3:fe: 9f:ea:f9:0e:f5:9c:b1:65:9b:b6:49:bf:07:48:60: 38:2c:00:92:5f:d6:4b:f0:d9:e7:94:07:9d:9d:b3: 93:f7:c7:c9:4a:83:53:63:59:a1:59:22:af:ca:cd: 7b:22:8c:f8:d9:1d:50:60:b2:ad:f7:d4:34:2c:ee: 07:2f:d3:92:68:3a:ac:bd:d0:5b:c9:9a:98:2a:e6: 15:f3:eb:83:8d:62:1f:ec:61:bb:e8:0f:e1:d5:f4: 40:16:c8:8c:7a:e4:3f:ac:7e:11:76:8f:4f:84:b5: a9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:49:2E:5B:BD:FD:1F:D2:D0:F7:09:6D:A7:52:23:79:16:91:CC X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e1:cb:86:81:a1:f7:d0:fd:fa:65:69:8c:d7:4d:c3:1f:0e: 6c:79:ae:23:a7:de:69:37:b0:8b:63:1a:ee:17:36:4a:24:66: 6b:79:16:60:04:50:4e:a1:dc:1f:7d:f1:91:e9:35:a5:be:30: 24:90:b7:2c:18:aa:da:71:aa:ac:ef:3d:b1:cf:3d:32:b1:c1: a6:94:bf:80:5e:a9:5f:70:99:cd:c8:f0:7c:27:6c:fc:56:05: f8:21:1a:2f:24:89:55:bd:b9:29:f3:36:aa:51:4d:e5:2a:e7: 0a:3a:7b:aa:85:86:04:e8:8f:5b:76:35:fa:d2:99:e0:ba:fa: b0:ec:c6:0e:1c:92:0f:67:00:35:b3:4d:19:62:c2:83:54:70: 7f:33:6f:d9:a9:84:55:28:30:c1:41:11:f0:fe:22:9c:2b:06: cb:e3:df:10:48:32:b0:b3:1a:ad:66:74:eb:c4:f2:e4:6d:cc: 9c:7c:f1:77:87:fd:b9:0e:87:54:ef:d5:b9:66:1a:d2:04:11: 07:47:94:0a:ae:9c:fc:00:ae:6d:19:dd:91:67:87:f1:f2:43: 36:80:ff:8d:e9:90:34:86:0e:ed:ca:33:8a:8d:b2:48:9e:c3: 37:9e:36:6c:17:e6:64:66:cf:20:a2:11:c2:3c:44:22:d9:67: 8e:10:62:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwNjE4MTQ0NDA2WhcNMjUwNjI1MTQ0NDA2WjAYMRYwFAYD VQQDEw02ODUyZDBiNi0zNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D6nyzcn8vdltJVRQW64SoX+eIXcdjrEa9Qxx8XWG4X12pe2KH7gJtCfDuBX Z6vrxtr+VH1B4CH3awW/p5OATCV8j0EJFH0yqgpri5DZnsHFgdvqLbjfcisCOS5J nHlBqG9uSzyuosyhCIHKn91fd+ovE/QmrUUOb+Act+XZs9+1fIQdnzIOSG89HrEk Ne3ll9NYo/6f6vkO9ZyxZZu2Sb8HSGA4LACSX9ZL8NnnlAednbOT98fJSoNTY1mh WSKvys17Ioz42R1QYLKt99Q0LO4HL9OSaDqsvdBbyZqYKuYV8+uDjWIf7GG76A/h 1fRAFsiMeuQ/rH4Rdo9PhLWpdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSTSS5b vf0f0tD3CW2nUiN5FpHMMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo4cuGgaH30P36ZWmM103DHw5sea4jp95pN7CLYxruFzZKJGZreRZg BFBOodwfffGR6TWlvjAkkLcsGKracaqs7z2xzz0yscGmlL+AXqlfcJnNyPB8J2z8 VgX4IRovJIlVvbkp8zaqUU3lKucKOnuqhYYE6I9bdjX60pnguvqw7MYOHJIPZwA1 s00ZYsKDVHB/M2/ZqYRVKDDBQRHw/iKcKwbL498QSDKwsxqtZnTrxPLkbcycfPF3 h/25DodU79W5ZhrSBBEHR5QKrpz8AK5tGd2RZ4fx8kM2gP+N6ZA0hg7tyjOKjbJI nsM3njZsF+ZkZs8gohHCPEQi2WeOEGK5 -----END CERTIFICATE-----Generated at Fri Jun 20 08:56:07 2025 by rpki-client