$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: 31JS2WzHKwisv8TY2F6Eb06GNSXI1QYtyuDulg6tFhY= Subject key identifier: CA:E7:F0:F7:1D:D2:52:FE:8C:4F:29:35:BC:82:C4:30:BC:7E:9E:04 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1CFC Signing time: Sat 14 Jun 2025 16:07:43 +0000 Manifest this update: Sat 14 Jun 2025 16:07:42 +0000 Manifest next update: Sat 21 Jun 2025 16:07:42 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: DyVzci6V9otHwhwZEZFyGYp/fE2uQcBR/JrAev3/AC4=) 2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: fz4f6MmX7R6kRL2gcaEtaQrQoy9cdumfsJWJxUL1YME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7430 (0x1d06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Jun 14 16:07:42 2025 GMT Not After : Jun 21 16:07:42 2025 GMT Subject: CN=684d9e4f-e0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:4d:64:2e:a8:68:81:15:84:61:13:12:a5: 7e:b9:7b:86:10:78:77:46:f0:92:9f:2b:e3:8a:a5: e5:e0:62:06:3b:c9:06:52:d2:5b:63:62:ce:56:1d: 9d:17:e9:99:16:fb:13:d4:74:10:92:a5:7c:cf:07: 5d:1a:97:5c:54:9a:2f:eb:91:8e:0d:f9:af:d4:cb: 1d:52:31:cb:fd:b3:57:5d:94:84:06:bd:f0:e1:2c: b0:20:50:07:65:39:34:0c:28:2c:2e:86:d8:e2:ab: 1b:f0:5b:f5:32:ab:f9:56:7b:18:dc:cb:86:f4:df: f1:08:78:b3:90:95:32:99:2f:7c:c7:f6:fb:25:cd: 1d:d3:91:fc:8f:3d:99:46:f3:2a:da:7a:b9:b6:9e: f2:63:d6:b4:f6:aa:4e:59:9d:01:ad:3f:23:49:2c: 9d:bd:79:b8:64:43:01:e6:60:eb:c9:4d:32:fa:0d: 66:f9:72:13:9d:b4:c3:a7:69:4d:8a:42:70:51:ad: df:93:7e:5b:2d:70:7e:3f:64:3a:f8:f7:f4:c8:8f: 2e:e4:13:45:b4:7f:42:56:2e:6f:33:98:cc:0a:4b: 3e:b3:dc:d8:f4:f1:a2:84:14:21:b1:16:2a:5b:bd: 12:f2:25:fd:ff:81:62:57:97:09:21:e1:a2:67:78: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:F0:F7:1D:D2:52:FE:8C:4F:29:35:BC:82:C4:30:BC:7E:9E:04 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:64:df:57:fd:59:94:06:6e:58:6e:3b:7c:bb:0c:7f:ee:19: d1:f6:9f:78:30:36:9a:2b:2f:ca:7e:f6:34:2c:1e:57:6c:c5: 6c:95:37:e0:c2:46:64:d7:08:c1:43:52:f9:fa:24:1e:24:32: 71:13:f8:b0:8e:bc:3c:5e:a9:04:e8:a4:bb:ec:98:39:3b:79: 29:cf:36:91:27:1d:1e:fb:36:2b:a8:fe:81:67:8d:d2:42:fc: 81:07:9a:7c:10:55:98:f9:e7:7d:dd:22:59:3d:d9:0d:ba:ff: 82:bf:50:fc:53:2d:9e:0b:97:07:5c:07:0c:79:16:b8:7d:f4: 14:62:12:d0:1e:5f:62:02:48:17:58:69:69:58:0f:cd:d6:64: 8c:a8:1b:17:ec:b5:19:4f:2b:fc:17:01:5c:ab:f9:55:18:02: 8e:57:96:da:b9:e3:d7:e9:61:91:09:5b:1f:c5:f8:81:8e:59: ad:6e:70:74:4d:9f:05:0d:50:73:2a:a3:80:9a:36:a8:bc:9b: 1b:cf:d5:aa:ab:90:50:93:dc:45:08:28:82:69:a3:50:9c:cc: 29:20:2f:be:ba:db:ae:2e:c2:b8:d0:0d:47:15:9f:7a:45:7f: e9:1c:df:b8:58:a2:09:cb:0b:31:9d:0b:5a:18:4d:e8:8a:03: c8:b2:af:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjUwNjE0MTYwNzQyWhcNMjUwNjIxMTYwNzQyWjAYMRYwFAYD VQQDEw02ODRkOWU0Zi1lMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArphNZC6oaIEVhGETEqV+uXuGEHh3RvCSnyvjiqXl4GIGO8kGUtJbY2LOVh2d F+mZFvsT1HQQkqV8zwddGpdcVJov65GODfmv1MsdUjHL/bNXXZSEBr3w4SywIFAH ZTk0DCgsLobY4qsb8Fv1Mqv5VnsY3MuG9N/xCHizkJUymS98x/b7Jc0d05H8jz2Z RvMq2nq5tp7yY9a09qpOWZ0BrT8jSSydvXm4ZEMB5mDryU0y+g1m+XITnbTDp2lN ikJwUa3fk35bLXB+P2Q6+Pf0yI8u5BNFtH9CVi5vM5jMCks+s9zY9PGihBQhsRYq W70S8iX9/4FiV5cJIeGiZ3j+9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrn8Pcd 0lL+jE8pNbyCxDC8fp4EMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ZN9X/VmUBm5Ybjt8uwx/7hnR9p94MDaaKy/KfvY0LB5XbMVslTfg wkZk1wjBQ1L5+iQeJDJxE/iwjrw8XqkE6KS77Jg5O3kpzzaRJx0e+zYrqP6BZ43S QvyBB5p8EFWY+ed93SJZPdkNuv+Cv1D8Uy2eC5cHXAcMeRa4ffQUYhLQHl9iAkgX WGlpWA/N1mSMqBsX7LUZTyv8FwFcq/lVGAKOV5bauePX6WGRCVsfxfiBjlmtbnB0 TZ8FDVBzKqOAmjaovJsbz9Wqq5BQk9xFCCiCaaNQnMwpIC++utuuLsK40A1HFZ96 RX/pHN+4WKIJywsxnQtaGE3oigPIsq9S -----END CERTIFICATE-----Generated at Sun Jun 15 10:22:46 2025 by rpki-client