$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: Oel/D0h3getRcaifGvQR5gZWv5eRiG2TCaxcpkgr224= Subject key identifier: 1B:3F:6F:24:3F:17:9F:6D:9E:78:F8:89:49:AB:AD:AD:A3:47:28:5D Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 03FC Signing time: Thu 19 Jun 2025 00:18:15 +0000 Manifest this update: Thu 19 Jun 2025 00:18:14 +0000 Manifest next update: Thu 26 Jun 2025 00:18:14 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: AyuxgC6ejpqW1Sv6EOLaBqIk+QjwjOCjIzlynKqWX+o=) 2: 4B167396E74111EC80E35542C4F9AE02.roa (hash: bHN8Wd0Zu68QTsipkyferF9uwGKu6L4i92pMNTEMusM=) 3: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: mO2TDz8iVH1QjiN6s50lIdAYCPwhB4UYqdlU/m/h8sE=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: J8gquWVTmRgJWJ3mBG8a1mA8su1ptSNi3imZDckI5g0=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: RqwnZfnau7RkdBU68iXpJ/pJr2ocars1rJf1vcp1FOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Jun 19 00:18:14 2025 GMT Not After : Jun 26 00:18:14 2025 GMT Subject: CN=68535747-05f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:70:65:4a:3b:11:f3:d7:08:09:04:8f:f2: 14:fd:f4:b1:fc:89:3f:e6:3e:c2:28:76:e6:28:6f: 6c:25:83:bc:1d:da:f4:6f:61:5b:c6:2f:42:09:72: f1:c7:33:9f:7f:36:99:9c:64:91:05:4a:1e:f0:20: bc:b2:4f:f7:e7:6c:3c:51:0f:01:83:77:ac:97:78: 86:91:d7:bf:27:bc:d3:9d:9a:6d:ed:14:e6:a9:12: aa:14:9d:83:92:f9:ac:33:1b:af:66:bc:09:b0:fd: 97:81:53:44:fd:19:c6:25:41:e8:8b:37:15:de:99: 04:26:69:ce:46:6f:9a:fb:d6:bf:04:2c:bf:0a:49: a8:5f:df:c7:5f:2b:9e:61:f9:d8:01:aa:ec:40:08: 88:a8:86:5e:b2:cf:51:42:04:f0:5a:43:8f:8d:ad: a0:e5:05:25:9c:1c:c9:67:8e:4a:a8:bf:9d:be:f8: a2:1f:8b:b4:9d:d1:5e:80:07:bc:7f:6b:cd:be:85: f1:f0:be:95:ae:15:36:39:7e:7c:25:1b:94:c4:7d: 0d:44:07:7a:c3:c8:9c:ea:7d:44:69:3b:48:77:90: 16:c1:26:00:cc:7f:1a:58:7e:d4:4f:fc:df:59:f5: 52:7d:9f:bb:5a:d4:4b:a3:5b:19:68:0f:0e:83:a4: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3F:6F:24:3F:17:9F:6D:9E:78:F8:89:49:AB:AD:AD:A3:47:28:5D X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:65:f6:cd:17:5a:ff:4c:82:83:2e:5e:8e:c2:29:70:de:a8: ca:7f:ed:0e:b3:e7:c3:98:9f:93:f9:30:2a:fd:cf:26:f6:12: 8d:97:1e:c6:42:69:40:74:14:8c:e5:0c:75:b4:f8:b8:ad:ab: 04:5d:7d:f1:7b:5a:ea:99:ed:4e:67:1b:66:6a:63:11:3d:78: 7a:62:94:df:fb:05:b2:f9:ff:46:4a:73:ff:fc:e4:eb:24:2c: 09:c7:e2:07:91:43:05:b0:7f:fb:77:51:d5:55:1d:33:c8:bc: d3:02:ce:b4:9a:f7:46:4b:21:bc:13:53:70:4d:bf:a9:4f:cd: eb:0d:93:63:dc:54:62:78:84:57:90:9e:9e:69:37:4d:0b:4f: 23:b9:4c:74:4b:c1:b0:2c:8b:94:03:1f:f2:9b:c9:e4:ed:f2: 81:8c:13:d8:75:2d:62:6c:b2:dd:cd:e0:ed:47:39:f3:23:7a: e2:fc:91:c6:41:29:9f:71:9c:04:a3:bc:e6:7c:d6:06:95:ca: 45:2c:11:fc:2c:e4:52:a2:e4:93:4a:3b:ab:8e:65:31:45:6c: 26:7f:1f:e8:3f:6f:4d:06:18:ea:ad:02:a2:6d:da:57:1a:62: ae:02:cc:0d:90:27:38:5d:03:bc:53:91:6a:8d:36:0b:64:0e: d2:86:1b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUwNjE5MDAxODE0WhcNMjUwNjI2MDAxODE0WjAYMRYwFAYD VQQDEw02ODUzNTc0Ny0wNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqShwZUo7EfPXCAkEj/IU/fSx/Ik/5j7CKHbmKG9sJYO8Hdr0b2Fbxi9CCXLx xzOffzaZnGSRBUoe8CC8sk/352w8UQ8Bg3esl3iGkde/J7zTnZpt7RTmqRKqFJ2D kvmsMxuvZrwJsP2XgVNE/RnGJUHoizcV3pkEJmnORm+a+9a/BCy/CkmoX9/HXyue YfnYAarsQAiIqIZess9RQgTwWkOPja2g5QUlnBzJZ45KqL+dvviiH4u0ndFegAe8 f2vNvoXx8L6VrhU2OX58JRuUxH0NRAd6w8ic6n1EaTtId5AWwSYAzH8aWH7UT/zf WfVSfZ+7WtRLo1sZaA8Og6QadwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs/byQ/ F59tnnj4iUmrra2jRyhdMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ZfbNF1r/TIKDLl6Owilw3qjKf+0Os+fDmJ+T+TAq/c8m9hKNlx7G QmlAdBSM5Qx1tPi4rasEXX3xe1rqme1OZxtmamMRPXh6YpTf+wWy+f9GSnP//OTr JCwJx+IHkUMFsH/7d1HVVR0zyLzTAs60mvdGSyG8E1NwTb+pT83rDZNj3FRieIRX kJ6eaTdNC08juUx0S8GwLIuUAx/ym8nk7fKBjBPYdS1ibLLdzeDtRznzI3ri/JHG QSmfcZwEo7zmfNYGlcpFLBH8LORSouSTSjurjmUxRWwmfx/oP29NBhjqrQKibdpX GmKuAswNkCc4XQO8U5FqjTYLZA7Shhur -----END CERTIFICATE-----Generated at Thu Jun 19 05:56:31 2025 by rpki-client