$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: MCQ91pKP9ag9gH7ttVbRxa/2SVkPQWe4bWOH9oK+aeI= Subject key identifier: 1D:21:71:CF:98:CA:1A:59:60:D3:20:FF:7B:6E:62:E8:F3:69:79:97 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 1066 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 1058 Signing time: Fri 20 Jun 2025 17:23:55 +0000 Manifest this update: Fri 20 Jun 2025 17:23:55 +0000 Manifest next update: Fri 27 Jun 2025 17:23:55 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: dy7ufBdG5ZMqK3PQpmFjCnf11zuCAFJCbUyepyWYCA0=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: 0OKa5D8R5tqflMwj5WNvymkXFrzQXgwFV3RUnRL3aD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 17:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4198 (0x1066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Jun 20 17:23:55 2025 GMT Not After : Jun 27 17:23:55 2025 GMT Subject: CN=6855992b-f72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:87:91:4c:d9:14:cf:86:79:85:26:fc:40: b1:14:07:1c:8c:af:5b:bc:b1:4f:ee:2e:68:ce:33: 39:77:fb:93:70:66:0d:a4:f5:3b:3d:59:42:7f:27: 3c:a2:1c:1e:73:50:cb:81:d4:5e:95:3a:af:72:d8: 3a:f0:a5:e4:49:78:7b:c5:56:29:af:90:0f:79:cb: db:59:ca:ee:cb:4b:4a:9b:52:3c:a4:87:e0:87:17: 61:4e:24:29:b3:2e:92:be:80:53:5e:3e:bc:47:63: 47:2e:ce:2e:ad:35:f2:df:d9:c2:f5:fa:de:ab:4d: fc:71:3d:7c:d1:11:66:45:56:ce:4c:e4:1b:d8:ec: b3:f6:79:62:d1:4a:6d:e9:cc:fb:41:0a:e2:8a:89: ee:1e:3c:f0:69:a1:b8:25:15:59:65:45:5e:0b:e3: 1e:3d:78:97:bf:a8:e5:dc:69:77:ca:64:c0:7e:62: 46:88:d6:4d:49:1c:66:4f:4c:0a:be:e2:99:d9:78: 1c:0d:21:18:f5:c4:62:76:95:b9:be:ab:af:d7:3e: 71:58:ed:99:df:46:1c:f1:d1:d9:06:40:c5:19:2f: bf:95:f4:67:f1:44:d7:76:b6:ec:f5:3d:85:a7:3e: 4e:04:7f:c2:b4:1b:6d:1b:a2:0d:61:17:f4:0c:71: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:21:71:CF:98:CA:1A:59:60:D3:20:FF:7B:6E:62:E8:F3:69:79:97 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3b:94:95:9d:21:11:6f:16:c9:34:7f:b6:65:29:4a:4d:83: 81:17:76:cc:a1:72:1d:de:10:05:6b:52:12:4c:76:12:d5:51: 41:53:8a:3f:54:47:8f:0d:e9:0c:e9:e4:05:4e:ea:24:8b:1a: 00:24:98:b1:e2:d0:17:ef:d3:ce:2f:43:c5:6b:ed:5b:9a:4b: 56:d8:08:ae:ef:ae:fa:63:b2:4f:97:4d:79:4a:67:0c:7e:9f: af:02:e3:44:ed:3f:27:0f:ed:23:63:3a:4f:61:d3:5d:0c:9b: 97:84:a0:38:31:56:fc:a7:cc:98:f2:a6:55:2a:82:30:fc:06: 22:0f:7f:5f:b0:8a:4c:b4:86:a4:d7:36:85:23:be:36:03:29: ba:91:5b:0d:43:c5:d9:88:8e:c0:14:8c:5f:d2:cb:43:67:0f: ff:7b:c1:42:9f:cf:2b:7e:7f:bc:9e:a9:2e:20:44:24:af:8f: ce:67:14:b0:b1:ac:7c:7e:b3:d2:6b:2a:ee:bb:ab:09:05:f3: 5d:f1:bb:16:13:72:fb:97:65:50:64:dd:4e:c5:96:5e:0c:32: 81:99:ce:5a:39:f5:e8:3d:ee:46:34:c2:61:7a:2a:c5:d3:a8: d6:48:2d:b5:37:32:3e:ba:f5:0b:34:fb:f8:c5:6d:57:24:6e: c3:f8:c4:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUwNjIwMTcyMzU1WhcNMjUwNjI3MTcyMzU1WjAYMRYwFAYD VQQDEw02ODU1OTkyYi1mNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykWHkUzZFM+GeYUm/ECxFAccjK9bvLFP7i5ozjM5d/uTcGYNpPU7PVlCfyc8 ohwec1DLgdRelTqvctg68KXkSXh7xVYpr5APecvbWcruy0tKm1I8pIfghxdhTiQp sy6SvoBTXj68R2NHLs4urTXy39nC9freq038cT180RFmRVbOTOQb2Oyz9nli0Upt 6cz7QQriionuHjzwaaG4JRVZZUVeC+MePXiXv6jl3Gl3ymTAfmJGiNZNSRxmT0wK vuKZ2XgcDSEY9cRidpW5vquv1z5xWO2Z30Yc8dHZBkDFGS+/lfRn8UTXdrbs9T2F pz5OBH/CtBttG6INYRf0DHGDoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0hcc+Y yhpZYNMg/3tuYujzaXmXMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAO5SVnSERbxbJNH+2ZSlKTYOBF3bMoXId3hAFa1ISTHYS1VFBU4o/ VEePDekM6eQFTuokixoAJJix4tAX79POL0PFa+1bmktW2Aiu7676Y7JPl015SmcM fp+vAuNE7T8nD+0jYzpPYdNdDJuXhKA4MVb8p8yY8qZVKoIw/AYiD39fsIpMtIak 1zaFI742Aym6kVsNQ8XZiI7AFIxf0stDZw//e8FCn88rfn+8nqkuIEQkr4/OZxSw sax8frPSayruu6sJBfNd8bsWE3L7l2VQZN1OxZZeDDKBmc5aOfXoPe5GNMJheirF 06jWSC21NzI+uvULNPv4xW1XJG7D+MQT -----END CERTIFICATE-----Generated at Sat Jun 21 18:12:21 2025 by rpki-client