$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: aA7Wn5ZgUWp7015rgmBssEOTH4y1MUBQP9Jyads3SpM= Subject key identifier: D0:32:BD:3D:2C:13:2D:2A:AD:20:0C:35:57:61:74:FF:3C:6F:30:FE Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 1634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 161E Signing time: Thu 12 Jun 2025 16:43:00 +0000 Manifest this update: Thu 12 Jun 2025 16:42:59 +0000 Manifest next update: Thu 19 Jun 2025 16:42:59 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: uJbhi5/YbETYbVpcQa0YTlWyTLTPoqhIYCe4gNItato=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5684 (0x1634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Jun 12 16:42:59 2025 GMT Not After : Jun 19 16:42:59 2025 GMT Subject: CN=684b0394-8d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:3b:6c:e7:a6:7b:85:a6:00:0f:46:ac:f6: e0:cc:7a:6d:e6:9e:57:ef:b5:d3:00:66:22:64:80: 65:b9:c0:1e:69:b8:e4:7a:28:ce:db:3b:b6:52:93: d5:2a:79:ab:85:8c:9d:a3:56:c4:7c:98:f9:ee:93: 07:3c:6e:58:da:75:6e:c1:7d:1e:87:2f:ed:a3:32: 4f:7c:69:61:f5:4f:68:a3:be:2c:5d:3c:02:33:52: 2d:d7:3c:a8:2e:c6:1e:c9:f3:5b:30:e8:b0:37:e3: 31:52:b4:c2:28:73:47:0c:71:67:0d:3a:e6:f6:11: d0:f1:8e:99:06:d1:51:83:38:22:9b:e1:fa:e8:56: 3b:14:54:6c:ca:bf:0c:f6:94:73:be:62:2a:a1:4d: 8f:6b:87:82:8e:52:dc:a9:e3:3e:d6:9b:cb:be:4d: 1d:40:a8:1c:ec:36:da:31:d7:13:b3:08:b6:04:4f: 38:94:05:ec:dc:aa:ab:0a:7a:ca:8f:5b:29:8a:ec: e5:ad:fa:39:c1:05:a8:55:88:65:59:4d:c7:68:3e: cb:3e:18:66:f0:dd:40:79:16:bb:4f:0c:eb:9f:c4: 3a:28:0f:e2:04:ad:33:99:0a:86:fd:b1:96:b2:c1: 0a:72:3d:7f:9c:4a:fa:da:c1:49:2c:4d:7d:f6:82: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:32:BD:3D:2C:13:2D:2A:AD:20:0C:35:57:61:74:FF:3C:6F:30:FE X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:6d:10:80:97:6e:77:37:1a:cc:2e:2b:83:06:22:a4:1d:7f: 02:7d:1a:1d:b1:99:91:95:5c:63:be:9e:b0:e8:5e:96:f6:9a: 25:0f:59:e4:05:7d:b2:75:0d:a4:ee:9a:70:b1:37:d1:54:b5: e2:61:15:59:f6:5b:5f:71:97:c5:88:70:85:c5:25:ef:01:23: 42:de:10:4c:41:c2:75:b6:65:27:50:0e:6f:64:a9:aa:bd:f5: 23:fc:6b:99:4c:c7:fe:13:d9:4b:e6:42:de:a2:1f:f5:cd:4b: 2a:c0:6f:1c:58:77:ea:b2:b7:2f:b1:0e:79:1f:85:be:c4:55: ac:1c:4f:b3:7b:3c:b9:76:b7:c0:88:84:de:ae:00:d4:cd:5b: cc:0a:61:2e:5a:a8:9c:30:1f:85:b8:59:d9:cd:2d:73:bd:b3: 54:c3:b7:56:5a:59:0b:b8:5d:93:82:db:a7:53:5b:97:3c:3f: 7d:5a:03:14:4b:2d:7a:92:ee:92:ad:0e:ae:20:d0:cb:63:21: da:0c:f8:26:77:8e:7d:d5:50:35:01:34:51:d5:c4:71:d1:ad: 24:7a:79:1b:a8:38:cf:1a:95:3b:74:23:d8:4f:d9:d5:e4:2b: 3c:62:86:42:53:bc:13:82:b8:76:23:00:03:1e:ec:eb:d3:c4: 93:61:fc:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUwNjEyMTY0MjU5WhcNMjUwNjE5MTY0MjU5WjAYMRYwFAYD VQQDEw02ODRiMDM5NC04ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeQ7bOeme4WmAA9GrPbgzHpt5p5X77XTAGYiZIBlucAeabjkeijO2zu2UpPV KnmrhYydo1bEfJj57pMHPG5Y2nVuwX0ehy/tozJPfGlh9U9oo74sXTwCM1It1zyo LsYeyfNbMOiwN+MxUrTCKHNHDHFnDTrm9hHQ8Y6ZBtFRgzgim+H66FY7FFRsyr8M 9pRzvmIqoU2Pa4eCjlLcqeM+1pvLvk0dQKgc7DbaMdcTswi2BE84lAXs3KqrCnrK j1spiuzlrfo5wQWoVYhlWU3HaD7LPhhm8N1AeRa7Twzrn8Q6KA/iBK0zmQqG/bGW ssEKcj1/nEr62sFJLE199oI2KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAyvT0s Ey0qrSAMNVdhdP88bzD+MB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4bRCAl253NxrMLiuDBiKkHX8CfRodsZmRlVxjvp6w6F6W9polD1nk BX2ydQ2k7ppwsTfRVLXiYRVZ9ltfcZfFiHCFxSXvASNC3hBMQcJ1tmUnUA5vZKmq vfUj/GuZTMf+E9lL5kLeoh/1zUsqwG8cWHfqsrcvsQ55H4W+xFWsHE+zezy5drfA iITergDUzVvMCmEuWqicMB+FuFnZzS1zvbNUw7dWWlkLuF2TgtunU1uXPD99WgMU Sy16ku6SrQ6uINDLYyHaDPgmd4591VA1ATRR1cRx0a0kenkbqDjPGpU7dCPYT9nV 5Cs8YoZCU7wTgrh2IwADHuzr08STYfz4 -----END CERTIFICATE-----Generated at Sat Jun 14 17:11:12 2025 by rpki-client