$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: /CmqdJX9wZp3H7lCq72XKGTzWa/iIoA+TxqmANoYw18= Subject key identifier: ED:D3:8E:0C:46:DB:5A:AE:1E:F8:0B:A1:9C:FC:93:F6:13:10:F6:3F Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: 85 Signing time: Sat 21 Jun 2025 05:37:45 +0000 Manifest this update: Sat 21 Jun 2025 05:37:44 +0000 Manifest next update: Sat 28 Jun 2025 05:37:44 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: rn7jTIy8YSqZWK4cVsJPXQPP6OkwIwEJutUBmcdR0FQ=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Jun 21 05:37:44 2025 GMT Not After : Jun 28 05:37:44 2025 GMT Subject: CN=68564528-64c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:4c:08:44:07:ec:b9:9d:b5:a2:06:7c:2f: 97:b5:e7:0c:52:a1:61:3a:54:b4:f8:1c:07:7a:c0: 12:8c:b3:25:9c:54:86:6b:79:20:35:44:41:5f:26: 0c:0e:89:73:5c:b4:e5:4b:34:ee:8a:6e:51:d7:2a: 82:e0:69:89:54:67:60:53:bb:45:28:ba:af:14:9b: 9e:a8:ff:0c:db:1f:79:ca:a4:52:49:82:d0:fc:fd: 69:f3:0a:b3:fa:17:7d:8d:23:16:57:c7:b3:30:04: 4e:22:d4:83:04:62:52:6e:3a:de:b4:76:52:82:20: 89:95:4e:27:b3:c0:12:69:1a:c0:b9:6f:9e:89:36: 67:32:cb:a2:88:4e:4a:c6:f4:7c:82:c1:16:e8:00: 6a:c0:af:0c:36:4b:86:6e:58:55:9b:0b:95:32:90: 23:26:d0:f6:5c:16:ad:81:0f:67:1e:b6:93:20:b5: 48:57:5e:72:e7:6d:b7:ac:46:33:75:fc:28:c2:0a: 0a:b6:36:0f:59:8d:fe:08:1d:f5:e0:54:f4:4c:6d: b3:d9:01:12:98:36:58:84:01:06:85:84:e3:ac:f7: 4a:81:66:0f:07:c4:b8:bf:18:b9:7d:39:8f:f1:4f: 21:9c:e1:bb:d9:78:0b:df:6e:b6:2b:80:66:08:e1: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D3:8E:0C:46:DB:5A:AE:1E:F8:0B:A1:9C:FC:93:F6:13:10:F6:3F X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cd:c7:80:f8:9d:b6:94:44:99:80:09:b0:4a:2e:c7:83:50: bb:0f:78:c2:69:98:c8:55:aa:3b:b2:32:38:f0:07:c0:b0:da: e7:9d:d9:35:ad:07:13:d1:76:32:80:8c:2c:d7:c7:7f:c9:a5: 8b:3f:38:c2:dd:31:c3:11:42:9d:57:45:01:73:48:1d:b4:d1: 6e:da:3e:e3:37:69:90:2e:a5:66:11:d6:15:e4:98:ce:b7:6e: ae:bf:20:a1:b0:d8:11:70:ad:8f:e6:4a:cd:60:fd:b3:69:a7: 92:37:ac:33:66:31:8e:41:cd:73:c2:f9:91:59:ff:16:fd:8f: ac:81:4a:7e:bf:d7:f2:80:9e:33:6e:60:76:f2:38:0b:4e:2d: 55:07:0a:6b:8b:01:99:5a:52:c1:3a:a9:d3:99:46:b7:5b:69: 0f:9c:ec:29:69:6d:ac:1b:0e:9c:a5:82:ff:2f:64:40:f6:53: 9a:0f:cd:59:94:e9:87:fc:fc:76:b2:4c:8f:2f:b9:d3:48:32: 44:b2:69:28:8a:ba:ff:17:59:aa:5e:d3:f9:f7:34:bc:c3:82: 1a:e5:6b:4d:9e:8e:a7:01:f2:ab:fa:78:3b:8d:fb:01:41:60: 11:1f:d5:e9:1d:eb:1a:2d:af:09:ac:21:81:70:7d:36:85:62: a8:6f:c9:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE QTU2ODdCRjAwHhcNMjUwNjIxMDUzNzQ0WhcNMjUwNjI4MDUzNzQ0WjAYMRYwFAYD VQQDEw02ODU2NDUyOC02NGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV1MCEQH7LmdtaIGfC+XtecMUqFhOlS0+BwHesASjLMlnFSGa3kgNURBXyYM DolzXLTlSzTuim5R1yqC4GmJVGdgU7tFKLqvFJueqP8M2x95yqRSSYLQ/P1p8wqz +hd9jSMWV8ezMAROItSDBGJSbjretHZSgiCJlU4ns8ASaRrAuW+eiTZnMsuiiE5K xvR8gsEW6ABqwK8MNkuGblhVmwuVMpAjJtD2XBatgQ9nHraTILVIV15y5223rEYz dfwowgoKtjYPWY3+CB314FT0TG2z2QESmDZYhAEGhYTjrPdKgWYPB8S4vxi5fTmP 8U8hnOG72XgL3262K4BmCOEJuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3TjgxG 21quHvgLoZz8k/YTEPY/MB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1 MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn VkdFNkwwS1dld2ZhVm9lX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3zceA+J22lESZgAmwSi7Hg1C7D3jCaZjIVao7sjI48AfAsNrnndk1 rQcT0XYygIws18d/yaWLPzjC3THDEUKdV0UBc0gdtNFu2j7jN2mQLqVmEdYV5JjO t26uvyChsNgRcK2P5krNYP2zaaeSN6wzZjGOQc1zwvmRWf8W/Y+sgUp+v9fygJ4z bmB28jgLTi1VBwpriwGZWlLBOqnTmUa3W2kPnOwpaW2sGw6cpYL/L2RA9lOaD81Z lOmH/Px2skyPL7nTSDJEsmkoirr/F1mqXtP59zS8w4Ia5WtNno6nAfKr+ng7jfsB QWARH9XpHesaLa8JrCGBcH02hWKob8lh -----END CERTIFICATE-----Generated at Sat Jun 21 09:18:53 2025 by rpki-client