$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: g8jlmoEDREUYvJ1CMX1I0xRaIoxHfjwFDIB4/vJnYNM= Subject key identifier: CD:C1:69:8A:9D:83:ED:29:D0:95:F8:A2:EC:F3:41:09:5B:4A:CD:63 Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 079C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 0796 Signing time: Sat 14 Jun 2025 21:05:58 +0000 Manifest this update: Sat 14 Jun 2025 21:05:57 +0000 Manifest next update: Sat 21 Jun 2025 21:05:57 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: 27j+XJEYv0yVOD3yoNPN5UUOqFttBYSondlbCdEyhSs=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Jun 14 21:05:57 2025 GMT Not After : Jun 21 21:05:57 2025 GMT Subject: CN=684de436-0b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:50:56:cf:03:cc:a2:99:0e:d4:fe:8c:69: 85:9d:25:73:ca:05:df:8b:5e:4f:65:3f:fe:1f:24: 05:ec:61:2d:9e:48:89:3c:bd:cd:ce:df:f4:2b:0e: c7:f4:dd:9a:ea:92:74:17:3f:b2:9c:8e:c9:7e:35: 97:d0:9d:50:f1:cf:0e:4e:21:10:b4:fd:36:98:3f: c0:12:fa:92:e1:fc:ec:73:0f:f3:46:1c:fc:26:18: 8c:41:ea:7a:f1:99:bb:8e:25:2d:9b:7e:fb:ab:06: 93:2f:35:16:8e:fb:e4:56:df:7c:6d:57:c3:9d:d6: f2:f8:8d:e6:5f:ca:d1:7d:2d:49:2c:2e:6c:05:2d: 30:80:bb:0a:f8:30:65:84:0f:ca:24:af:2b:d5:f6: 03:63:5b:7b:3e:53:6a:6b:62:c3:1e:3d:b9:8d:dd: 8a:9d:92:ae:12:3f:94:75:33:02:c9:67:29:f9:fb: f6:d1:4b:81:cb:54:8b:6f:0d:a2:38:3f:ed:63:6a: fe:81:bc:3f:21:f8:c5:f2:d8:c7:e5:20:b6:fc:37: 15:53:76:f8:39:e9:41:e6:2c:e1:b4:1f:48:97:f0: 6e:1b:c5:25:24:f4:4e:7b:7c:5f:a9:83:c3:85:2b: 23:6a:ab:40:0c:73:54:ee:42:3d:75:59:a5:9d:cc: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C1:69:8A:9D:83:ED:29:D0:95:F8:A2:EC:F3:41:09:5B:4A:CD:63 X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:de:ed:8a:2f:db:56:be:45:ef:56:91:17:55:77:df:d3:c6: 22:28:9a:8d:5b:95:d0:f5:4b:72:db:18:34:83:46:43:35:e8: 59:81:ad:e8:84:68:8a:cc:fb:ba:b6:ab:07:d2:ae:c5:da:ac: 4d:7d:84:1e:72:a9:1d:e0:67:a8:22:8a:61:62:d4:64:fd:62: 2d:56:59:79:79:26:50:5a:af:fd:52:22:45:d2:cf:5c:d6:65: f5:8a:43:29:a5:64:cd:85:cf:2e:75:18:0a:b9:32:b3:75:d5: 57:ef:2f:f6:4c:3b:8b:61:53:b9:f5:17:37:27:71:a7:e3:ec: 7d:1c:ec:d0:5e:e9:ec:71:b4:a1:49:37:ed:3a:c5:19:39:92: 6f:3f:b6:a6:03:2c:d9:e1:f9:02:29:1e:54:b0:cc:89:64:57: e7:ff:1d:e8:b0:90:50:ae:bd:ff:59:1c:8c:48:2a:4d:6b:53: 87:67:03:99:69:3f:aa:dc:20:4e:fb:cb:3b:af:34:87:fc:f8: e3:a7:57:6b:93:6b:a2:33:f6:e7:da:95:8d:27:ef:47:6b:29: 2f:f8:ab:49:ec:0f:03:44:6e:fb:d4:02:bd:4c:58:6d:0e:eb: 50:8f:6b:31:65:bc:08:b5:46:ed:34:90:91:7d:bb:de:21:6f: 99:38:34:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUwNjE0MjEwNTU3WhcNMjUwNjIxMjEwNTU3WjAYMRYwFAYD VQQDEw02ODRkZTQzNi0wYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4lQVs8DzKKZDtT+jGmFnSVzygXfi15PZT/+HyQF7GEtnkiJPL3Nzt/0Kw7H 9N2a6pJ0Fz+ynI7JfjWX0J1Q8c8OTiEQtP02mD/AEvqS4fzscw/zRhz8JhiMQep6 8Zm7jiUtm377qwaTLzUWjvvkVt98bVfDndby+I3mX8rRfS1JLC5sBS0wgLsK+DBl hA/KJK8r1fYDY1t7PlNqa2LDHj25jd2KnZKuEj+UdTMCyWcp+fv20UuBy1SLbw2i OD/tY2r+gbw/IfjF8tjH5SC2/DcVU3b4OelB5izhtB9Il/BuG8UlJPROe3xfqYPD hSsjaqtADHNU7kI9dVmlncyvuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3BaYqd g+0p0JX4ouzzQQlbSs1jMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp3u2KL9tWvkXvVpEXVXff08YiKJqNW5XQ9Uty2xg0g0ZDNehZga3o hGiKzPu6tqsH0q7F2qxNfYQecqkd4GeoIophYtRk/WItVll5eSZQWq/9UiJF0s9c 1mX1ikMppWTNhc8udRgKuTKzddVX7y/2TDuLYVO59Rc3J3Gn4+x9HOzQXunscbSh STftOsUZOZJvP7amAyzZ4fkCKR5UsMyJZFfn/x3osJBQrr3/WRyMSCpNa1OHZwOZ aT+q3CBO+8s7rzSH/Pjjp1drk2uiM/bn2pWNJ+9Haykv+KtJ7A8DRG771AK9TFht DutQj2sxZbwItUbtNJCRfbveIW+ZODTB -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:18 2025 by rpki-client