$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: DBaW33EHRAhCxAyvbdlJnAiheDu3aHj2zHNsyj3HN/A= Subject key identifier: EB:83:B7:80:6B:03:3E:2B:F1:A3:47:E8:89:02:3B:D3:DE:B5:3D:37 Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: 010D Signing time: Sun 15 Jun 2025 04:10:38 +0000 Manifest this update: Sun 15 Jun 2025 04:10:38 +0000 Manifest next update: Sun 22 Jun 2025 04:10:38 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: yVZi00yuFMz6vXMeQtkqbZFoa1kIFDxpMRW/mC7HR24=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: Jun 15 04:10:38 2025 GMT Not After : Jun 22 04:10:38 2025 GMT Subject: CN=684e47be-d940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:75:de:5a:ab:71:d7:b0:a2:20:8c:cd:67: 45:b8:17:a8:c9:97:48:3b:d4:0b:2f:61:d4:34:65: 8a:72:68:b5:15:88:72:9c:94:6a:63:1f:5f:25:3f: 88:4a:a5:ee:1b:a2:c2:96:c8:87:58:d7:cf:13:58: 40:ef:22:24:23:16:6f:db:90:5e:ea:74:e3:bf:e2: 77:29:da:2a:a4:a5:c5:29:27:fb:3d:f0:90:cd:71: 4c:23:c2:6e:87:e3:84:c7:b8:82:eb:11:bd:dd:b4: 9d:c8:85:80:89:0b:3a:19:e6:34:36:8a:80:3a:c8: f2:09:ba:46:7b:06:fd:7f:00:6d:a0:3d:e4:9f:3f: 28:74:58:b4:3f:dc:56:b8:f4:44:74:b2:4d:79:94: e6:99:57:f1:c2:8e:73:95:67:2b:d2:ed:4f:b0:c9: 92:5a:7f:91:c6:e6:8a:22:e7:b4:96:e7:f7:f6:64: 54:db:7c:62:28:8b:4a:36:e0:06:51:9c:33:3b:3b: e6:70:f4:e5:2d:6b:15:f6:9f:91:c0:bd:ca:b0:21: e1:2f:d2:d5:95:34:b6:56:b7:6e:ac:87:55:58:90: ee:c9:20:a6:9e:52:83:94:cd:ec:87:32:10:49:63: de:4a:49:82:09:0a:ca:ca:a0:5e:af:87:fc:82:24: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:83:B7:80:6B:03:3E:2B:F1:A3:47:E8:89:02:3B:D3:DE:B5:3D:37 X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ee:60:fc:11:df:e1:00:c4:35:85:81:6e:a6:13:7d:f8:2e: fa:9f:91:97:03:43:81:ad:58:37:06:67:04:0b:de:53:87:71: d1:fe:4c:a1:03:50:18:59:0e:74:95:4e:07:72:31:ca:66:2a: 2c:9f:a8:f9:9f:88:ed:fa:91:e6:8d:bd:23:5b:8a:2f:e2:99: 9d:12:43:28:2f:48:81:be:03:ab:ad:1a:8f:bf:18:de:1e:4f: ed:8e:d1:af:32:74:0c:eb:2f:62:6b:c8:87:45:a4:0c:da:36: 13:a5:43:af:27:10:77:fe:27:fc:22:45:84:c7:bb:88:49:d1: b2:71:34:66:f9:40:90:28:e5:a2:2b:5d:c7:57:47:d7:d4:36: 3c:86:1c:4e:6a:50:91:72:2c:bc:74:3e:4d:b4:4e:72:82:96: 26:c6:6a:99:4a:b2:63:1b:de:c0:50:d6:24:64:31:fa:21:0a: c4:93:e6:1e:50:e7:b6:f1:31:b4:ec:0b:ab:b9:54:cc:2a:47: 94:c8:20:98:73:27:6f:74:81:37:86:f7:71:e2:09:90:6b:4a: d0:4b:dd:5a:a6:d4:09:21:46:92:e0:dc:d0:69:d8:2b:c1:c8: e4:94:79:08:93:ba:51:44:55:b8:ee:19:5c:8b:ba:37:cb:8a: 3e:96:ca:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUwNjE1MDQxMDM4WhcNMjUwNjIyMDQxMDM4WjAYMRYwFAYD VQQDEw02ODRlNDdiZS1kOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ex13lqrcdewoiCMzWdFuBeoyZdIO9QLL2HUNGWKcmi1FYhynJRqYx9fJT+I SqXuG6LClsiHWNfPE1hA7yIkIxZv25Be6nTjv+J3KdoqpKXFKSf7PfCQzXFMI8Ju h+OEx7iC6xG93bSdyIWAiQs6GeY0NoqAOsjyCbpGewb9fwBtoD3knz8odFi0P9xW uPREdLJNeZTmmVfxwo5zlWcr0u1PsMmSWn+RxuaKIue0luf39mRU23xiKItKNuAG UZwzOzvmcPTlLWsV9p+RwL3KsCHhL9LVlTS2VrdurIdVWJDuySCmnlKDlM3shzIQ SWPeSkmCCQrKyqBer4f8giRJPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuDt4Br Az4r8aNH6IkCO9PetT03MB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp7mD8Ed/hAMQ1hYFuphN9+C76n5GXA0OBrVg3BmcEC95Th3HR/kyh A1AYWQ50lU4HcjHKZiosn6j5n4jt+pHmjb0jW4ov4pmdEkMoL0iBvgOrrRqPvxje Hk/tjtGvMnQM6y9ia8iHRaQM2jYTpUOvJxB3/if8IkWEx7uISdGycTRm+UCQKOWi K13HV0fX1DY8hhxOalCRciy8dD5NtE5ygpYmxmqZSrJjG97AUNYkZDH6IQrEk+Ye UOe28TG07AuruVTMKkeUyCCYcydvdIE3hvdx4gmQa0rQS91aptQJIUaS4NzQadgr wcjklHkIk7pRRFW47hlci7o3y4o+lspw -----END CERTIFICATE-----Generated at Sun Jun 15 16:40:22 2025 by rpki-client