$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: fd1FKbl1ztSeagWeRuhOSCA8xLaM6CC92twwmJygujs= Subject key identifier: 26:C7:91:0D:67:9F:8A:37:E2:B1:0E:04:E5:E8:7E:01:EA:E7:9A:34 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: 9B Signing time: Thu 19 Jun 2025 05:38:33 +0000 Manifest this update: Thu 19 Jun 2025 05:38:32 +0000 Manifest next update: Thu 26 Jun 2025 05:38:32 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: 31eP5OFUb5YZsHDUxGkkgxLzI9zx9aIoUg35PDnqjrU=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qWDPCZUNoXxLfCTQ51artmgIDTxez9EecMCL2qvkzMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Jun 19 05:38:32 2025 GMT Not After : Jun 26 05:38:32 2025 GMT Subject: CN=6853a258-352f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:c5:7c:bd:b4:f7:ef:83:b1:7e:ca:52:fd: 45:96:c0:99:ab:37:1d:3d:f3:38:2d:7a:a2:37:17: 73:5f:46:67:3e:75:ba:a3:f3:4b:58:44:7e:fb:6e: 53:6e:a9:53:d3:25:4f:45:59:1f:60:18:e6:02:86: 58:15:b5:ac:84:66:0b:f0:47:2e:74:63:bd:13:39: 50:49:cb:89:71:46:9b:27:bf:4c:2b:8c:f1:54:0f: d0:1e:c0:17:f2:51:0a:25:b9:8e:33:48:bd:52:3a: 74:47:73:c6:89:57:e3:a8:b7:84:9d:50:8e:75:eb: 42:77:4d:0a:d2:ee:61:8d:a3:ed:93:4c:90:bc:87: e9:4f:bb:9f:66:cc:9f:f9:b7:b2:e9:b2:9d:33:0e: 9a:c0:cc:67:6c:fb:b2:ed:62:10:69:30:c9:6a:e6: e8:1c:00:e4:b0:f3:d1:ff:7d:ea:3e:ab:cc:5a:94: 7f:7c:19:23:b3:04:38:20:09:52:75:a1:0c:2d:2b: 77:0e:83:5a:86:0b:d1:9e:2b:ca:76:44:5b:0e:85: 42:95:fe:47:ff:a7:53:f1:7d:11:b6:86:ec:68:b0: ad:41:73:8c:18:e7:31:a1:ce:c9:9d:ab:83:ae:1b: 54:23:a9:c8:26:f4:6a:f3:01:f0:41:3f:ec:70:83: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C7:91:0D:67:9F:8A:37:E2:B1:0E:04:E5:E8:7E:01:EA:E7:9A:34 X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9f:db:6f:bb:1c:d0:c2:75:8e:2f:03:ab:31:87:e5:10:d1: da:98:ce:fe:1c:7f:45:07:27:fb:52:ee:eb:09:a4:37:45:c0: 37:54:8f:58:26:45:b8:86:2f:1c:58:95:4a:d3:29:e9:9b:2e: 09:d8:f5:ef:ec:c8:dd:69:5d:f3:9d:ce:21:41:ac:89:a9:8d: 44:84:7b:32:4a:c1:7d:49:18:55:74:e6:bb:5b:ac:16:e3:9f: 99:b4:20:23:f5:03:48:2d:29:32:e1:65:13:b9:ef:64:8b:18: bf:51:de:cd:82:b0:c7:a4:d8:7b:a9:b5:47:20:41:ac:4a:a5: c2:0a:06:32:17:47:f0:b0:3f:f4:ec:18:42:88:de:31:02:0e: a3:37:3a:f1:a8:3b:bf:e3:e7:6c:32:45:b4:fd:b0:4d:76:bd: 68:1f:94:f1:08:cf:ab:6c:77:78:72:b8:a4:78:4c:d5:6b:d4: c7:b6:bb:1a:4c:9e:c4:ab:46:d3:8e:c2:7d:ba:9f:7f:14:bc: 74:4e:0e:82:99:19:da:bf:36:7e:f4:60:05:93:66:2b:67:28: 03:e8:fb:51:2f:c2:26:29:97:7a:29:ce:4f:b3:a3:e1:02:4b: 01:af:b3:1c:cb:9c:47:b4:a3:89:22:b5:a8:7b:bb:7d:07:bc: 93:13:f6:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF OTg4Nzg2NjcwHhcNMjUwNjE5MDUzODMyWhcNMjUwNjI2MDUzODMyWjAYMRYwFAYD VQQDEw02ODUzYTI1OC0zNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOHFfL209++DsX7KUv1FlsCZqzcdPfM4LXqiNxdzX0ZnPnW6o/NLWER++25T bqlT0yVPRVkfYBjmAoZYFbWshGYL8EcudGO9EzlQScuJcUabJ79MK4zxVA/QHsAX 8lEKJbmOM0i9Ujp0R3PGiVfjqLeEnVCOdetCd00K0u5hjaPtk0yQvIfpT7ufZsyf +bey6bKdMw6awMxnbPuy7WIQaTDJauboHADksPPR/33qPqvMWpR/fBkjswQ4IAlS daEMLSt3DoNahgvRnivKdkRbDoVClf5H/6dT8X0RtobsaLCtQXOMGOcxoc7JnauD rhtUI6nIJvRq8wHwQT/scIO6kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbHkQ1n n4o34rEOBOXofgHq55o0MB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhC M1dBTjBxWVhocnpwaUhobWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCan9tvuxzQwnWOLwOrMYflENHamM7+HH9FByf7Uu7rCaQ3RcA3VI9Y JkW4hi8cWJVK0ynpmy4J2PXv7MjdaV3znc4hQayJqY1EhHsySsF9SRhVdOa7W6wW 45+ZtCAj9QNILSky4WUTue9kixi/Ud7NgrDHpNh7qbVHIEGsSqXCCgYyF0fwsD/0 7BhCiN4xAg6jNzrxqDu/4+dsMkW0/bBNdr1oH5TxCM+rbHd4crikeEzVa9THtrsa TJ7Eq0bTjsJ9up9/FLx0Tg6CmRnavzZ+9GAFk2YrZygD6PtRL8ImKZd6Kc5Ps6Ph AksBr7Mcy5xHtKOJIrWoe7t9B7yTE/ba -----END CERTIFICATE-----Generated at Thu Jun 19 17:51:49 2025 by rpki-client