$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: i921U3Z24rHWnIh+keDCgifZkzR1+vHw0hZ0fb80GqU= Subject key identifier: 35:32:32:09:7C:DA:EC:A4:3F:12:06:2E:F2:B8:FF:2C:E5:92:68:0C Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 80 Signing time: Fri 13 Jun 2025 05:40:37 +0000 Manifest this update: Fri 13 Jun 2025 05:40:36 +0000 Manifest next update: Fri 20 Jun 2025 05:40:36 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: ULKypq5NaeETcfPzGpD9v2FpRjZa72ZCu5UuszfzIog=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: ymXlk9RJfi9V2KzOznS96G8RXYI7jJ6rpj+phG/GZks=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: SX03ccnLTHDWWqP2dXM+ZAcRiPmXaj3vkOlikMISxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Jun 13 05:40:36 2025 GMT Not After : Jun 20 05:40:36 2025 GMT Subject: CN=684bb9d5-d45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:df:69:53:42:b5:22:71:d7:9a:ff:2a:82: 04:e8:9e:d9:b0:dd:a5:9f:70:79:4d:87:ae:4d:43: 03:59:0c:cb:4a:2e:5e:08:35:e0:2d:52:c6:23:3d: 5a:52:08:50:29:54:6b:c8:68:2b:3a:ac:ca:de:1e: 2c:67:6b:5f:83:5f:3e:4d:95:c2:9f:77:9f:36:82: 39:5d:e7:13:72:0d:de:ba:7b:5f:d9:ca:8a:fc:e0: 43:84:75:48:65:f0:4a:9f:18:d5:3f:57:02:99:74: 2f:2f:81:79:1a:cb:d2:a5:0a:e5:a0:53:2f:cb:92: 75:23:6d:17:ad:a4:c9:2a:df:db:4b:e2:12:44:53: 8c:39:68:00:16:7d:15:d2:78:ab:fe:33:08:3e:12: 6c:43:57:f5:dc:cb:f0:e3:89:24:79:a8:55:05:c5: 43:c9:0a:3e:2f:ab:ab:68:3f:32:13:1c:50:6a:07: 1f:5a:92:90:77:48:af:c2:95:14:90:75:5e:98:aa: 0c:b8:23:f5:1c:fe:83:07:6d:99:cb:41:94:68:82: fc:83:66:fa:36:6e:32:58:5f:54:95:73:d1:6d:7a: f5:3b:53:91:30:93:79:70:29:1e:b5:bb:e6:81:8b: 00:8e:7d:81:df:fa:e6:5c:a0:a0:4e:2f:85:a1:60: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:32:32:09:7C:DA:EC:A4:3F:12:06:2E:F2:B8:FF:2C:E5:92:68:0C X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:20:2e:77:e4:08:61:ff:57:fa:6e:25:d2:25:8e:82:a6:5a: e7:bc:61:3f:35:7b:e8:f8:4f:a6:96:21:26:a5:c7:70:85:af: ec:8a:00:f4:1d:7e:f9:d9:aa:42:1c:c3:e6:6a:99:76:d1:45: 37:09:4c:76:d7:31:4c:88:4a:f9:bc:09:e3:12:88:87:2d:4f: 40:6f:81:c9:18:a9:bd:de:e5:b0:8e:55:40:3c:28:36:da:ff: 07:ed:4c:ca:04:d5:3a:40:4b:7d:5f:75:c5:54:bc:34:5f:45: 9e:79:f1:d1:e9:28:13:56:44:aa:11:06:08:07:99:17:4b:56: 32:10:b7:ab:8d:a5:b1:1a:5b:7e:d9:cf:d2:b3:68:05:9e:8d: 3d:89:54:3a:75:54:38:dc:56:5a:b4:1e:ae:82:9a:99:63:79: 30:15:d9:a2:02:50:46:bf:1c:34:cc:43:4a:d7:4a:b2:eb:4a: 8b:c1:a3:9d:cd:50:93:1e:83:8a:74:e2:b3:3b:6f:22:ed:9c: a6:9d:c6:31:6c:25:12:0a:c1:f8:e7:d0:40:33:e9:c2:bd:58: 3a:4f:58:2c:a1:85:67:dd:15:4a:df:54:85:27:b3:a9:20:06: 07:ec:3e:f2:59:5a:73:73:77:6c:c5:52:4d:a7:81:de:c9:34: b7:b5:76:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjUwNjEzMDU0MDM2WhcNMjUwNjIwMDU0MDM2WjAYMRYwFAYD VQQDEw02ODRiYjlkNS1kNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodTfaVNCtSJx15r/KoIE6J7ZsN2ln3B5TYeuTUMDWQzLSi5eCDXgLVLGIz1a UghQKVRryGgrOqzK3h4sZ2tfg18+TZXCn3efNoI5XecTcg3euntf2cqK/OBDhHVI ZfBKnxjVP1cCmXQvL4F5GsvSpQrloFMvy5J1I20XraTJKt/bS+ISRFOMOWgAFn0V 0nir/jMIPhJsQ1f13Mvw44kkeahVBcVDyQo+L6uraD8yExxQagcfWpKQd0ivwpUU kHVemKoMuCP1HP6DB22Zy0GUaIL8g2b6Nm4yWF9UlXPRbXr1O1ORMJN5cCketbvm gYsAjn2B3/rmXKCgTi+FoWAzcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUyMgl8 2uykPxIGLvK4/yzlkmgMMB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPIC535Ahh/1f6biXSJY6CplrnvGE/NXvo+E+mliEmpcdwha/sigD0 HX752apCHMPmapl20UU3CUx21zFMiEr5vAnjEoiHLU9Ab4HJGKm93uWwjlVAPCg2 2v8H7UzKBNU6QEt9X3XFVLw0X0WeefHR6SgTVkSqEQYIB5kXS1YyELerjaWxGlt+ 2c/Ss2gFno09iVQ6dVQ43FZatB6ugpqZY3kwFdmiAlBGvxw0zENK10qy60qLwaOd zVCTHoOKdOKzO28i7ZymncYxbCUSCsH459BAM+nCvVg6T1gsoYVn3RVK31SFJ7Op IAYH7D7yWVpzc3dsxVJNp4HeyTS3tXYy -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:26 2025 by rpki-client