$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft File: -r3gfSxVjb3PPDIAdre1X9-gR0A.mft (raw, json) Hash identifier: 3zuTt47GaRleJ0Pm/Z+7UKOeboE1N+w2vrRroXKlUJk= Subject key identifier: 91:9C:D1:12:31:4B:B6:6D:C1:8A:31:CE:95:1E:85:48:CF:7F:59:56 Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 Certificate issuer: /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Certificate serial: 0A00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft Manifest number: 09F9 Signing time: Wed 18 Jun 2025 19:43:46 +0000 Manifest this update: Wed 18 Jun 2025 19:43:45 +0000 Manifest next update: Wed 25 Jun 2025 19:43:45 +0000 Files and hashes: 1: -r3gfSxVjb3PPDIAdre1X9-gR0A.crl (hash: i+8uWbH2xXStM9j9HiH9UIbI5me7Rfjh0LR00zHJTS0=) 2: 7E4ED0E4798B11EA90252969C4F9AE02.roa (hash: zi/2a7j2lYedIWZB1ZQVEfFe/URKlsQ3C6l5x+UUMmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918143E, serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Validity Not Before: Jun 18 19:43:45 2025 GMT Not After : Jun 25 19:43:45 2025 GMT Subject: CN=685316f1-ec02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:29:1a:2c:fb:3f:7e:a8:45:e8:36:8a:e5: ca:5e:a5:cc:6a:31:82:c9:f3:14:97:01:79:d0:eb: 9a:f0:9c:72:c6:99:65:33:68:2e:1c:02:28:d8:b1: 0c:32:f0:0e:65:ad:c7:32:da:fd:31:e7:dc:19:a5: c3:8c:a5:fd:f7:3d:cf:8b:e1:ca:7a:75:b5:f3:2a: 80:36:f3:0f:5d:a1:48:18:44:0d:da:72:a8:15:f5: 4e:ef:14:5e:c2:94:ed:10:bd:ef:dc:e9:3e:bc:67: 6d:fd:bb:24:97:75:d8:6d:5b:af:0b:e0:0f:bf:68: 8d:5a:88:e1:1e:fb:44:90:21:0f:68:7a:4d:0e:d6: 78:2f:5b:42:da:52:71:62:c7:ba:33:f7:19:bb:31: 02:24:96:53:6e:a1:45:b4:a8:1f:31:e9:b4:4a:6d: f7:d6:1c:ad:26:c4:3f:a2:e8:52:64:bc:66:95:23: 0f:bd:eb:16:17:d0:d9:53:51:cb:be:37:fd:c1:5b: 01:ba:a4:72:23:f1:f3:5f:27:3b:38:a5:c5:41:63: 8a:8f:58:93:d5:35:f9:84:cf:ad:09:8e:f5:ac:bf: 11:45:fa:5e:cc:86:d2:e7:e4:10:3d:b0:3b:50:10: 7b:06:ff:d5:df:34:f6:94:49:88:d1:f5:4d:c4:15: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9C:D1:12:31:4B:B6:6D:C1:8A:31:CE:95:1E:85:48:CF:7F:59:56 X509v3 Authority Key Identifier: keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:92:83:ca:ad:96:02:c2:41:d9:42:ae:af:b1:e9:50:54:69: cb:95:43:74:9e:4c:0b:50:63:7c:e0:4d:51:f0:1e:8c:d7:ed: 99:3c:5f:bc:61:60:af:08:48:ee:f1:66:1b:d6:f0:37:a2:95: 12:42:38:72:7b:d2:c7:4e:a1:a6:29:39:1e:f8:82:08:59:89: 84:f6:30:0c:14:e6:25:d4:5e:e0:c3:d9:e9:af:64:f7:93:95: 2d:36:07:33:6c:4c:cb:93:ca:1c:28:e7:1a:3a:a9:df:b0:96: 7a:ee:8e:9b:00:e7:4b:af:c4:58:f9:15:ed:fe:0f:d0:ef:9b: b3:a8:fc:47:83:35:a9:cf:dc:31:5a:7c:4d:3c:92:28:e6:bc: 76:7a:3e:b6:43:99:b6:44:db:12:1f:25:96:ac:97:fe:c6:31: e5:fa:f6:84:da:4a:ae:de:4e:8e:a7:62:f7:9e:42:b2:e8:91: 54:3e:b1:2d:b3:80:44:d3:57:c5:0c:9f:a2:38:b0:d3:36:d9: de:d0:e6:e7:80:52:96:09:85:57:9b:d1:68:85:ff:17:22:99: 63:b1:56:e6:be:82:82:66:05:73:5e:59:45:8a:59:2e:4d:27: dc:49:89:15:48:f8:de:ac:18:35:51:99:a3:ec:c5:ff:36:b1: 86:27:d6:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0M0UxMTAvBgNVBAUTKEZBQkRFMDdEMkM1NThEQkRDRjNDMzIwMDc2QjdCNTVG REZBMDQ3NDAwHhcNMjUwNjE4MTk0MzQ1WhcNMjUwNjI1MTk0MzQ1WjAYMRYwFAYD VQQDEw02ODUzMTZmMS1lYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR0pGiz7P36oReg2iuXKXqXMajGCyfMUlwF50Oua8JxyxpllM2guHAIo2LEM MvAOZa3HMtr9MefcGaXDjKX99z3Pi+HKenW18yqANvMPXaFIGEQN2nKoFfVO7xRe wpTtEL3v3Ok+vGdt/bskl3XYbVuvC+APv2iNWojhHvtEkCEPaHpNDtZ4L1tC2lJx Yse6M/cZuzECJJZTbqFFtKgfMem0Sm331hytJsQ/ouhSZLxmlSMPvesWF9DZU1HL vjf9wVsBuqRyI/HzXyc7OKXFQWOKj1iT1TX5hM+tCY71rL8RRfpezIbS5+QQPbA7 UBB7Bv/V3zT2lEmI0fVNxBVAYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGc0RIx S7ZtwYoxzpUehUjPf1lWMB8GA1UdIwQYMBaAFPq94H0sVY29zzwyAHa3tV/foEdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzRS9BM0MwN0I4Njc5 ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4VmpiM1BQRElBZHJlMVg5LWdS MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yM2dmU3hWamIzUFBESUFkcmUxWDktZ1IwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTQzRS9BM0MwN0I4Njc5ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4Vmpi M1BQRElBZHJlMVg5LWdSMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIkoPKrZYCwkHZQq6vselQVGnLlUN0nkwLUGN84E1R8B6M1+2ZPF+8 YWCvCEju8WYb1vA3opUSQjhye9LHTqGmKTke+IIIWYmE9jAMFOYl1F7gw9npr2T3 k5UtNgczbEzLk8ocKOcaOqnfsJZ67o6bAOdLr8RY+RXt/g/Q75uzqPxHgzWpz9wx WnxNPJIo5rx2ej62Q5m2RNsSHyWWrJf+xjHl+vaE2kqu3k6Op2L3nkKy6JFUPrEt s4BE01fFDJ+iOLDTNtne0ObngFKWCYVXm9Fohf8XIpljsVbmvoKCZgVzXllFilku TSfcSYkVSPjerBg1UZmj7MX/NrGGJ9YM -----END CERTIFICATE-----Generated at Fri Jun 20 20:55:42 2025 by rpki-client