$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: /NzXIBevYNYZzKJ8/le/x3qTtKWb6k4zsHriuTLZj7U= Subject key identifier: 27:BB:C6:7A:14:8F:1B:CF:16:49:19:B4:7B:C1:39:F3:FB:6D:7C:F8 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 0309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 0305 Signing time: Sun 15 Jun 2025 00:56:19 +0000 Manifest this update: Sun 15 Jun 2025 00:56:18 +0000 Manifest next update: Sun 22 Jun 2025 00:56:18 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: ezA6E/pydfQO7P9DsyyQvOJhueIARzNMBPyBw1YtVAM=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: eVqCt6jrx+C1JB/X7OKow2VBehCM/YMsmg/5OjY9iwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 777 (0x309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Jun 15 00:56:18 2025 GMT Not After : Jun 22 00:56:18 2025 GMT Subject: CN=684e1a32-2f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:a4:ed:2e:78:70:16:90:d5:2f:76:9c:fd: 90:dd:e3:62:86:ba:13:35:35:b0:cc:80:0f:e5:d3: ab:58:95:2e:12:ba:4f:13:d4:92:2f:cc:17:e6:32: 71:d7:fa:2f:a1:54:f0:2d:59:9f:ec:da:7e:91:23: 06:7d:0b:4f:9b:52:38:de:82:c1:ac:a1:f1:27:d4: e2:e5:a9:c0:44:5f:94:e3:38:93:fd:a7:ef:09:3f: 85:92:f1:fa:a9:34:21:67:7e:2b:f7:81:62:cf:80: 23:03:93:b8:d7:7c:da:62:ee:07:0e:87:7b:11:fa: c3:fa:1d:c7:1b:78:3e:e1:74:c8:59:a0:14:5b:8e: bc:f0:7a:f3:2f:16:1b:5c:69:ef:12:b6:8a:92:ea: 39:30:db:df:eb:bd:e7:b3:39:63:ce:99:fc:fb:3b: f4:e2:b8:3f:da:ae:ed:88:7b:14:6b:ba:a3:66:e8: df:46:fd:47:b7:f9:ef:ab:68:73:d1:83:d1:c6:81: 1f:75:79:9f:3b:71:79:fd:d8:19:fc:83:8b:fe:47: 4d:57:be:bd:06:bb:ae:46:9e:41:60:6c:f4:3e:93: b1:16:c0:07:13:a7:ef:cb:b0:cc:9d:26:7c:ee:11: 81:8b:d9:48:67:b0:0b:46:00:9b:91:6f:e4:44:7e: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:C6:7A:14:8F:1B:CF:16:49:19:B4:7B:C1:39:F3:FB:6D:7C:F8 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:d3:d1:20:1f:34:17:bd:c4:e1:71:7b:cf:12:12:b0:d8:70: 1a:70:fc:e7:41:75:c1:70:af:d6:63:c9:23:6a:55:1c:63:d1: 40:21:93:22:c0:19:e1:ca:92:9e:72:c4:63:0f:29:78:b9:5b: 4d:3f:16:4c:93:02:88:ce:03:b3:a5:b5:22:4a:66:66:fd:3f: 07:4f:29:c1:92:86:97:c8:53:0a:78:d2:ad:0b:fa:1b:7a:c1: 08:db:12:7b:8f:dc:9f:3c:5a:e5:00:58:39:9a:fd:6b:16:d7: 34:c6:f1:63:5a:c0:14:77:49:45:f4:f7:c5:13:df:1c:27:46: cb:67:35:0e:77:8f:70:f2:e3:23:65:1c:85:7f:26:89:48:40: 18:d2:3d:e2:0c:a9:9a:98:64:0b:56:54:5e:e0:0d:76:96:46: f3:93:a0:ad:5b:91:0f:e0:83:18:2e:db:98:96:66:05:85:7e: e1:26:65:36:1a:63:fe:bd:02:68:f9:a1:27:f0:e7:e3:7e:62: 05:57:a4:1e:94:6c:39:f7:f5:b9:68:3a:29:18:2b:d0:3f:03: 08:4f:78:bc:6d:31:a4:b9:a5:d0:3b:18:6e:ed:56:f4:19:09: 59:d5:4e:9b:26:6d:39:5f:9f:ec:9d:21:7f:87:50:aa:4e:f1: 41:9f:2b:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjUwNjE1MDA1NjE4WhcNMjUwNjIyMDA1NjE4WjAYMRYwFAYD VQQDEw02ODRlMWEzMi0yZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvOk7S54cBaQ1S92nP2Q3eNihroTNTWwzIAP5dOrWJUuErpPE9SSL8wX5jJx 1/ovoVTwLVmf7Np+kSMGfQtPm1I43oLBrKHxJ9Ti5anARF+U4ziT/afvCT+FkvH6 qTQhZ34r94Fiz4AjA5O413zaYu4HDod7EfrD+h3HG3g+4XTIWaAUW4688HrzLxYb XGnvEraKkuo5MNvf673nszljzpn8+zv04rg/2q7tiHsUa7qjZujfRv1Ht/nvq2hz 0YPRxoEfdXmfO3F5/dgZ/IOL/kdNV769BruuRp5BYGz0PpOxFsAHE6fvy7DMnSZ8 7hGBi9lIZ7ALRgCbkW/kRH5v7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe7xnoU jxvPFkkZtHvBOfP7bXz4MB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDY09EgHzQXvcThcXvPEhKw2HAacPznQXXBcK/WY8kjalUcY9FAIZMi wBnhypKecsRjDyl4uVtNPxZMkwKIzgOzpbUiSmZm/T8HTynBkoaXyFMKeNKtC/ob esEI2xJ7j9yfPFrlAFg5mv1rFtc0xvFjWsAUd0lF9PfFE98cJ0bLZzUOd49w8uMj ZRyFfyaJSEAY0j3iDKmamGQLVlRe4A12lkbzk6CtW5EP4IMYLtuYlmYFhX7hJmU2 GmP+vQJo+aEn8OfjfmIFV6QelGw59/W5aDopGCvQPwMIT3i8bTGkuaXQOxhu7Vb0 GQlZ1U6bJm05X5/snSF/h1CqTvFBnytn -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:35 2025 by rpki-client