$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: 2CLLNi8gJS1TAZK1uJiRfFKefGebDDT8LYVH4/lbwOU= Subject key identifier: A6:35:84:8B:2B:40:01:F0:1E:8C:45:D9:3B:2B:5E:A8:9F:B0:82:36 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1EAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1E97 Signing time: Sat 14 Jun 2025 16:01:22 +0000 Manifest this update: Sat 14 Jun 2025 16:01:21 +0000 Manifest next update: Sat 21 Jun 2025 16:01:21 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: rDYGvl9wdSkN2iVLihG+Yi48BFFtqSeVK8NRpDAlIxg=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: h0HyLn8ocWGb9KjF4xTUCCRX3RLDUFI2FgHziz/KxqQ=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7854 (0x1eae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Jun 14 16:01:21 2025 GMT Not After : Jun 21 16:01:21 2025 GMT Subject: CN=684d9cd1-13eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:f5:7e:ff:46:b5:46:56:c3:73:46:d1:d7: a5:d2:aa:d6:5e:b7:c4:8a:be:f0:8d:9e:71:e1:24: ac:5f:f8:f6:77:87:0d:32:bc:9a:4f:69:74:a2:f9: 3a:ff:05:0c:94:30:0a:f5:ec:76:12:25:79:9b:5a: 0f:96:92:e3:e5:af:af:f4:f9:75:bf:7a:0e:4f:7e: 33:c3:31:1e:07:11:93:95:dc:40:e3:74:e1:e7:b7: cc:4b:b2:8a:98:b1:d4:33:a0:30:e2:33:7e:51:01: a8:d7:2e:00:8d:2f:21:3d:46:4e:c4:23:10:81:4b: e5:c4:6c:2c:ac:e1:e1:ff:26:66:24:e3:14:1b:23: 19:05:56:14:31:ec:98:7e:c2:e0:3d:d9:9e:01:e1: f6:7c:70:a1:e9:59:b5:ca:df:d5:88:13:86:8e:9a: f3:e8:5b:19:50:4b:d2:3e:8b:87:fd:b5:54:62:dd: cb:2d:e9:e6:05:a3:82:1f:eb:36:79:7e:ac:eb:aa: 46:f8:e6:68:59:90:fe:f6:1a:a2:b6:1a:a6:fc:37: ae:dc:52:30:8e:8f:9d:19:82:e1:4c:c1:e9:32:dd: 53:66:6f:a6:d8:2f:b9:08:f1:25:21:0e:45:ad:4f: 52:ff:f9:ba:2e:53:54:e8:cd:13:70:8c:0a:11:6b: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:35:84:8B:2B:40:01:F0:1E:8C:45:D9:3B:2B:5E:A8:9F:B0:82:36 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:eb:82:70:36:13:e9:df:5f:07:78:a6:b0:8e:43:f5:e6:7d: b7:12:5f:24:ac:11:c3:ec:f4:73:67:4f:73:58:42:2d:21:48: 71:54:2b:d8:83:5a:43:73:c3:3d:19:b2:fa:50:70:42:4e:1e: b9:24:6e:8f:cf:55:4d:dd:f1:8b:f4:39:1f:5d:8c:b2:b1:7a: e6:d1:b0:a0:c5:de:76:1e:7e:f1:cf:d6:3b:fc:97:63:6a:da: 24:20:1b:42:b2:c9:7d:21:86:5b:23:05:a3:76:bf:fd:61:14: 47:59:10:1a:14:4b:f8:7e:a7:9d:82:d2:ac:17:b0:92:14:fb: e1:d1:92:56:d5:84:90:0f:d0:a1:27:a2:c9:37:44:17:c0:72: 2f:1e:9e:73:56:e1:25:85:e7:3e:6c:f2:5d:62:e9:2e:56:59: b7:e0:a2:24:d2:47:b4:aa:39:22:9e:ac:ba:fb:63:a2:bf:58: 9c:c6:83:ae:ec:d8:cf:ad:26:4e:a6:ea:ad:dd:97:71:5c:5f: b9:bc:41:51:50:50:fe:61:d2:70:e3:e0:3b:92:14:88:da:9a: 1e:df:1e:0d:98:85:7a:87:f2:b6:5c:5e:29:cf:ee:4f:2c:3e: 62:d1:ae:3c:e3:7a:d8:6a:82:40:b3:b5:50:e4:9a:43:98:09: 2f:05:c1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjUwNjE0MTYwMTIxWhcNMjUwNjIxMTYwMTIxWjAYMRYwFAYD VQQDEw02ODRkOWNkMS0xM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryL1fv9GtUZWw3NG0del0qrWXrfEir7wjZ5x4SSsX/j2d4cNMryaT2l0ovk6 /wUMlDAK9ex2EiV5m1oPlpLj5a+v9Pl1v3oOT34zwzEeBxGTldxA43Th57fMS7KK mLHUM6Aw4jN+UQGo1y4AjS8hPUZOxCMQgUvlxGwsrOHh/yZmJOMUGyMZBVYUMeyY fsLgPdmeAeH2fHCh6Vm1yt/ViBOGjprz6FsZUEvSPouH/bVUYt3LLenmBaOCH+s2 eX6s66pG+OZoWZD+9hqithqm/Deu3FIwjo+dGYLhTMHpMt1TZm+m2C+5CPElIQ5F rU9S//m6LlNU6M0TcIwKEWvoDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY1hIsr QAHwHoxF2TsrXqifsII2MB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW64JwNhPp318HeKawjkP15n23El8krBHD7PRzZ09zWEItIUhxVCvY g1pDc8M9GbL6UHBCTh65JG6Pz1VN3fGL9DkfXYyysXrm0bCgxd52Hn7xz9Y7/Jdj atokIBtCssl9IYZbIwWjdr/9YRRHWRAaFEv4fqedgtKsF7CSFPvh0ZJW1YSQD9Ch J6LJN0QXwHIvHp5zVuElhec+bPJdYukuVlm34KIk0ke0qjkinqy6+2Oiv1icxoOu 7NjPrSZOpuqt3ZdxXF+5vEFRUFD+YdJw4+A7khSI2poe3x4NmIV6h/K2XF4pz+5P LD5i0a4843rYaoJAs7VQ5JpDmAkvBcE5 -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:31 2025 by rpki-client