$ rpki-client -vvf rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft File: 3qB5KN5ChJYNLNXo50cChCYLMmY.mft (raw, json) Hash identifier: RWY+g1LJZPxIMtGbPptKR50TIwEM/2X9gsZ5wvepzMY= Subject key identifier: 24:64:A5:0C:7B:29:47:75:60:4F:7A:22:23:94:81:17:00:68:6B:06 Authority key identifier: DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66 Certificate issuer: /CN=A9171AD3/serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft Manifest number: 0884 Signing time: Sat 14 Jun 2025 20:25:36 +0000 Manifest this update: Sat 14 Jun 2025 20:25:35 +0000 Manifest next update: Sat 21 Jun 2025 20:25:35 +0000 Files and hashes: 1: 3qB5KN5ChJYNLNXo50cChCYLMmY.crl (hash: 0QP1N/Z5MzpFIgE/IeKE7apwxRTGgYzrLqvuzfTjUl0=) 2: 186A811414CD11F0AB0B2C0CC4F9AE02.roa (hash: 7eGdphmXtZhUhFX6Ph1uLe9ZqTAdWtlD3BS/u1NYXHQ=) 3: BAA356B66F5611EB8862606AC4F9AE02.roa (hash: hXqRlxWUOgELX8BkSD9GAxJ/+ji0FZnADjlHzze8dU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.crl rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171AD3, serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266 Validity Not Before: Jun 14 20:25:35 2025 GMT Not After : Jun 21 20:25:35 2025 GMT Subject: CN=684ddabf-7cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:04:e5:de:7f:69:73:b4:75:62:a3:e1:35: 26:37:7c:78:e9:d1:fe:1e:67:af:1e:93:17:47:7c: b6:79:0d:c2:c0:6b:87:34:07:3a:dc:93:c5:77:49: 15:2a:8b:f7:a4:b0:b5:e1:b7:93:2f:0f:50:26:65: 55:35:63:1d:52:0a:5b:1a:ba:5b:ef:0e:9e:f9:1d: e1:1c:cd:40:8d:41:7c:ce:81:91:69:c0:57:51:c7: 60:1d:4b:26:83:e7:45:53:47:b8:7c:25:e9:b2:03: 1c:31:01:38:ed:da:0d:4c:46:83:82:71:b3:8e:c8: e8:74:19:5a:0a:41:a6:a8:28:29:5d:b9:b2:b1:75: 06:ff:30:ea:2c:a9:1e:50:57:bf:e3:1f:f8:e1:75: 56:a3:5b:f9:c5:0c:10:29:ac:4b:3e:b8:d4:ed:bc: 49:8d:ed:e5:aa:bc:f0:89:4e:df:1e:2f:16:ef:53: 39:23:32:fe:b8:0d:ad:cf:54:a5:77:c9:0d:eb:2a: 85:6e:de:ce:f7:87:b0:83:f1:b5:9c:e6:8f:e0:2b: 09:0d:f0:04:6b:70:56:86:72:27:12:78:14:0f:d5: 79:5e:17:32:5b:1f:2e:4e:a7:34:cb:8e:8d:b4:00: b5:a5:56:74:61:2c:aa:32:4c:2e:14:ce:b9:9f:9a: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:64:A5:0C:7B:29:47:75:60:4F:7A:22:23:94:81:17:00:68:6B:06 X509v3 Authority Key Identifier: keyid:DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:6f:df:65:e1:71:a9:f2:9d:a7:4f:95:1b:c8:57:25:22:24: bd:29:75:23:48:91:6d:63:30:64:10:86:7a:75:0b:06:84:c0: b0:28:49:b1:87:2c:20:45:ce:59:5d:8b:c3:3b:f6:a7:84:c5: 3f:5b:c9:9e:56:9f:8a:93:68:f8:f7:16:8c:c9:07:d4:56:1b: 1b:24:f9:ef:af:ce:37:44:8e:96:91:7f:b3:5a:12:5a:0a:fe: ba:1e:2d:3d:fa:61:42:0e:e2:ba:b0:87:ae:fa:1a:f2:07:bd: 78:fc:89:28:91:96:4f:07:59:56:0c:1a:0c:f2:d7:97:ea:f9: ce:4b:59:72:97:f5:68:d3:11:0b:d0:f4:00:24:c9:5c:db:c9: f9:c3:36:6c:a7:56:2a:d8:05:31:84:96:3d:60:f3:6d:05:40: b0:43:bd:4a:cd:38:23:d2:de:15:d1:63:68:dd:b7:f1:1c:d8: e9:a9:14:2f:ef:26:dd:ba:01:51:a5:56:07:82:be:79:ef:1f: 5a:2f:82:c8:c7:24:b9:6e:66:14:83:05:f9:db:4e:89:95:df: 74:71:45:78:b0:11:a7:3a:bc:8e:54:a0:39:96:3a:e4:ef:df: 1f:7e:f0:75:24:cd:6f:80:f9:a4:9b:c1:d9:06:6d:19:34:fe: b6:a8:34:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBRDMxMTAvBgNVBAUTKERFQTA3OTI4REU0Mjg0OTYwRDJDRDVFOEU3NDcwMjg0 MjYwQjMyNjYwHhcNMjUwNjE0MjAyNTM1WhcNMjUwNjIxMjAyNTM1WjAYMRYwFAYD VQQDEw02ODRkZGFiZi03Y2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydoE5d5/aXO0dWKj4TUmN3x46dH+HmevHpMXR3y2eQ3CwGuHNAc63JPFd0kV Kov3pLC14beTLw9QJmVVNWMdUgpbGrpb7w6e+R3hHM1AjUF8zoGRacBXUcdgHUsm g+dFU0e4fCXpsgMcMQE47doNTEaDgnGzjsjodBlaCkGmqCgpXbmysXUG/zDqLKke UFe/4x/44XVWo1v5xQwQKaxLPrjU7bxJje3lqrzwiU7fHi8W71M5IzL+uA2tz1Sl d8kN6yqFbt7O94ewg/G1nOaP4CsJDfAEa3BWhnInEngUD9V5XhcyWx8uTqc0y46N tAC1pVZ0YSyqMkwuFM65n5o1ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRkpQx7 KUd1YE96IiOUgRcAaGsGMB8GA1UdIwQYMBaAFN6geSjeQoSWDSzV6OdHAoQmCzJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUFEMy8wQkM0Rjg0MEMx QjIxMUVBODMyNzg3NjdDNEY5QUUwMi8zcUI1S041Q2hKWU5MTlhvNTBjQ2hDWUxN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxQjVLTjVDaEpZTkxOWG81MGNDaENZTE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUFEMy8wQkM0Rjg0MEMxQjIxMUVBODMyNzg3NjdDNEY5QUUwMi8zcUI1S041Q2hK WU5MTlhvNTBjQ2hDWUxNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8b99l4XGp8p2nT5UbyFclIiS9KXUjSJFtYzBkEIZ6dQsGhMCwKEmx hywgRc5ZXYvDO/anhMU/W8meVp+Kk2j49xaMyQfUVhsbJPnvr843RI6WkX+zWhJa Cv66Hi09+mFCDuK6sIeu+hryB714/IkokZZPB1lWDBoM8teX6vnOS1lyl/Vo0xEL 0PQAJMlc28n5wzZsp1Yq2AUxhJY9YPNtBUCwQ71KzTgj0t4V0WNo3bfxHNjpqRQv 7ybdugFRpVYHgr557x9aL4LIxyS5bmYUgwX5206Jld90cUV4sBGnOryOVKA5ljrk 798ffvB1JM1vgPmkm8HZBm0ZNP62qDRv -----END CERTIFICATE-----Generated at Sun Jun 15 10:04:16 2025 by rpki-client