$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft File: mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json) Hash identifier: FyA0Afz8276YoCbXq6wlmyF3Pd1Q30THC8FyaZ3K8Bw= Subject key identifier: 6C:E7:2D:4B:4A:C4:CC:A8:A1:53:E3:0F:19:35:F3:BA:24:03:70:A2 Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 Certificate issuer: /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Certificate serial: 0792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft Manifest number: 078A Signing time: Mon 16 Jun 2025 21:11:52 +0000 Manifest this update: Mon 16 Jun 2025 21:11:52 +0000 Manifest next update: Mon 23 Jun 2025 21:11:52 +0000 Files and hashes: 1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: M4yUODIJ/jg5H19v/t9qwjZ2Cz4djFmhjEvmwaU3C+4=) 2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Validity Not Before: Jun 16 21:11:52 2025 GMT Not After : Jun 23 21:11:52 2025 GMT Subject: CN=68508898-60d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d6:f6:d1:a0:de:0f:69:72:fd:fd:56:5e:bd: f7:a4:22:9c:3d:6e:c3:88:15:10:c5:ec:24:20:00: 54:e6:d4:43:1a:ca:b7:36:8a:6f:0a:60:0b:95:05: 1c:fd:93:cd:16:f9:42:21:38:55:e6:df:5a:6d:5b: e8:be:fc:52:90:49:5a:fa:fa:08:67:0b:57:d8:cd: 1e:b4:86:68:73:ea:7f:0e:b3:51:68:b8:08:ce:28: f1:f7:f1:26:34:ac:c7:d3:13:f3:8d:b4:16:5d:e4: ab:8c:33:8e:f7:65:fb:e0:55:9e:a5:92:23:38:af: e2:8c:f4:b3:0c:0e:d5:dc:b7:3d:18:ed:46:e1:68: 08:4f:59:8f:45:58:a5:5b:72:74:6b:0b:b0:f3:96: 75:c9:a3:ff:39:2a:6c:c4:29:cf:a7:d2:64:25:a0: a5:25:55:6c:a1:26:5d:94:92:c3:aa:38:f5:4d:50: 43:d5:64:fd:de:38:87:c9:cf:06:2a:8d:ee:8f:75: 8e:ea:33:f4:95:b2:f9:8d:23:1c:8b:53:ef:6c:41: 10:4f:f4:b3:bf:87:48:7d:64:63:da:69:fa:03:86: 61:5a:d6:d8:2a:12:cb:6d:ec:c6:ad:1c:19:b5:16: fd:4a:e2:b9:ec:1e:4c:75:f8:a3:93:09:aa:16:95: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E7:2D:4B:4A:C4:CC:A8:A1:53:E3:0F:19:35:F3:BA:24:03:70:A2 X509v3 Authority Key Identifier: keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e8:f6:9a:50:fb:3e:ce:f3:f0:5b:1c:87:c1:5d:59:9d:e2: fa:fc:a8:66:55:c8:73:e3:62:53:81:43:c6:2e:ad:e8:d4:fc: ad:17:7b:b3:3c:9e:aa:b0:31:15:4d:62:9c:7f:13:2d:60:d8: ab:2f:03:11:2d:74:e4:92:cc:9b:a7:0e:47:85:db:e2:e6:c8: 2f:96:1b:56:d6:17:f7:7d:b9:c4:4a:ae:7a:60:3d:81:f6:f9: a9:02:e6:a1:96:ec:d2:e7:28:75:eb:b2:dc:06:c1:9a:df:c9: 9b:20:38:5c:48:4b:cc:54:f1:c5:ed:52:41:8a:16:ff:d2:af: 53:75:e4:42:5d:94:57:98:41:58:8a:b6:04:de:8b:d9:0d:31: 96:ff:97:83:c8:bc:a5:7c:49:df:73:3c:67:03:4a:69:74:26: e9:8c:16:d4:4a:97:c9:0f:96:03:39:2f:16:71:f1:a9:ae:44: e7:82:56:2b:ab:6a:a4:1e:a8:b4:1f:d9:1e:cf:de:13:a4:74: 7e:ee:ab:d2:97:85:90:f1:94:a1:b2:39:1d:73:b2:aa:35:b6: dc:d5:98:21:db:d7:ac:f2:29:56:9e:a0:94:71:52:58:64:91: 7c:99:73:3b:ac:7d:76:5f:7b:e3:1c:fa:ab:cd:f9:eb:8f:f3: 63:34:f1:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFENTFBOThDQzg3 MTkxM0YzQTkwHhcNMjUwNjE2MjExMTUyWhcNMjUwNjIzMjExMTUyWjAYMRYwFAYD VQQDEw02ODUwODg5OC02MGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0db20aDeD2ly/f1WXr33pCKcPW7DiBUQxewkIABU5tRDGsq3NopvCmALlQUc /ZPNFvlCIThV5t9abVvovvxSkEla+voIZwtX2M0etIZoc+p/DrNRaLgIzijx9/Em NKzH0xPzjbQWXeSrjDOO92X74FWepZIjOK/ijPSzDA7V3Lc9GO1G4WgIT1mPRVil W3J0awuw85Z1yaP/OSpsxCnPp9JkJaClJVVsoSZdlJLDqjj1TVBD1WT93jiHyc8G Ko3uj3WO6jP0lbL5jSMci1PvbEEQT/Szv4dIfWRj2mn6A4ZhWtbYKhLLbezGrRwZ tRb9SuK57B5MdfijkwmqFpU4swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGznLUtK xMyooVPjDxk187okA3CiMB8GA1UdIwQYMBaAFJnNwOq+GAQSYRmh1RqYzIcZE/Op MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0Y3Ri9FMzdFNUIzMjE1 MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJCSmhHYUhWR3BqTWh4a1Q4 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jM0E2cjRZQkJKaEdhSFZHcGpNaHhrVDg2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0Y3Ri9FMzdFNUIzMjE1MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJC SmhHYUhWR3BqTWh4a1Q4NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+6PaaUPs+zvPwWxyHwV1ZneL6/KhmVchz42JTgUPGLq3o1PytF3uz PJ6qsDEVTWKcfxMtYNirLwMRLXTkksybpw5Hhdvi5sgvlhtW1hf3fbnESq56YD2B 9vmpAuahluzS5yh167LcBsGa38mbIDhcSEvMVPHF7VJBihb/0q9TdeRCXZRXmEFY irYE3ovZDTGW/5eDyLylfEnfczxnA0ppdCbpjBbUSpfJD5YDOS8WcfGprkTnglYr q2qkHqi0H9kez94TpHR+7qvSl4WQ8ZShsjkdc7KqNbbc1Zgh29es8ilWnqCUcVJY ZJF8mXM7rH12X3vjHPqrzfnrj/NjNPEZ -----END CERTIFICATE-----Generated at Tue Jun 17 10:43:25 2025 by rpki-client