$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: 1iMBxenfWgKTeR2X1cf8r9dvJPysd24CGVUDpjAx+tw= Subject key identifier: BC:68:45:AC:F4:E0:34:67:0F:7F:27:A6:E5:A5:8C:CB:45:5C:22:BF Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 9D Signing time: Fri 13 Jun 2025 05:10:54 +0000 Manifest this update: Fri 13 Jun 2025 05:10:53 +0000 Manifest next update: Fri 20 Jun 2025 05:10:53 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: gpp9mh/EzciejfVJZ4zHZckPgdiSHYcJHp2am9WfbWg=) 2: 7DAE5EB25AE011EFBA58F07FC4F9AE02.roa (hash: Wp/6wyEXkRXlx5jv/S/ukoLxXoe3Zkz5HAA1XVAZayI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Jun 13 05:10:53 2025 GMT Not After : Jun 20 05:10:53 2025 GMT Subject: CN=684bb2dd-a8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:3c:13:28:6e:8b:ec:82:13:2d:7b:3f:1d: bb:68:f0:8b:b6:ca:6d:78:d6:1b:32:34:77:5a:03: 08:47:7b:65:fc:5e:b0:53:4a:c1:c0:b7:02:4d:44: de:3b:7b:12:2c:7a:b7:39:75:72:a9:53:a5:b4:45: b2:5f:e1:ab:94:64:8b:0d:3a:59:28:29:03:47:04: 5f:22:77:18:79:b5:2b:93:71:2e:db:8e:e8:a9:a6: 69:b2:2b:08:28:8b:c6:13:c1:ca:c4:b5:83:a9:d7: 33:a2:ae:3f:64:19:40:19:7c:17:13:29:8b:4d:e4: dc:23:60:dc:74:54:e1:6c:76:72:d9:af:d0:5f:fe: 8f:d5:bb:95:e4:3b:0a:90:33:48:5f:35:88:28:04: 76:b2:9d:06:bd:ad:f9:24:1d:12:dd:29:97:e3:f9: c9:54:72:15:f0:e8:aa:f7:2b:bc:da:13:10:f7:9b: df:bb:db:66:b2:07:18:0d:b7:67:5c:5e:7a:0d:70: 7d:87:f8:a9:d3:c8:35:8a:0d:aa:a2:d5:fc:f2:44: 19:18:41:9e:ba:6e:b9:8c:24:ee:dc:1d:65:87:5d: 99:af:8c:8e:87:aa:2a:9b:6e:76:3e:bc:0d:ed:59: aa:71:f6:c6:7c:2b:6d:8d:3b:01:f0:08:0c:7b:b6: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:68:45:AC:F4:E0:34:67:0F:7F:27:A6:E5:A5:8C:CB:45:5C:22:BF X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ab:1c:73:89:b8:4f:fd:fd:8f:c8:38:87:e7:43:60:24:26: ab:02:cf:c1:f3:f8:16:a4:69:db:50:50:9c:2c:b3:e6:f8:c4: 9a:75:58:6a:bf:40:e1:42:09:29:fe:4f:68:04:0d:9e:17:dc: cb:94:24:f3:0a:5d:75:e8:f7:59:fc:59:cc:8d:47:c5:a9:7e: 80:3f:81:1a:bf:74:f1:df:ef:f1:eb:c0:63:3d:4d:5f:6c:22: f3:33:5b:db:fa:9d:75:71:63:3e:01:c3:e6:f6:ac:fe:43:1f: 53:db:93:0d:0b:43:2d:20:b0:66:3a:60:c8:b2:b2:aa:f4:4c: db:8e:50:57:10:62:00:ff:86:f5:c9:3a:31:f6:6d:8d:d2:a8: c2:d3:a5:10:44:04:a0:05:0c:36:78:1f:d4:f2:53:8c:95:37: 55:4c:4b:e5:a8:48:20:6f:96:ab:c3:34:69:ec:e3:f1:db:7c: a4:33:56:ef:f0:27:be:bc:99:20:74:8f:40:92:f8:f9:5c:a5: 08:da:78:51:13:c2:fd:ef:5c:6b:bd:7c:60:f8:fd:fd:e3:39: bd:a2:cd:61:09:23:83:b5:ac:c7:ff:34:30:4f:4b:1b:2c:e0: a0:01:d7:f5:c2:60:1d:ba:8e:1d:65:be:e9:1d:ce:f2:b8:f4: 96:25:36:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUwNjEzMDUxMDUzWhcNMjUwNjIwMDUxMDUzWjAYMRYwFAYD VQQDEw02ODRiYjJkZC1hOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmlU8Eyhui+yCEy17Px27aPCLtspteNYbMjR3WgMIR3tl/F6wU0rBwLcCTUTe O3sSLHq3OXVyqVOltEWyX+GrlGSLDTpZKCkDRwRfIncYebUrk3Eu247oqaZpsisI KIvGE8HKxLWDqdczoq4/ZBlAGXwXEymLTeTcI2DcdFThbHZy2a/QX/6P1buV5DsK kDNIXzWIKAR2sp0Gva35JB0S3SmX4/nJVHIV8Oiq9yu82hMQ95vfu9tmsgcYDbdn XF56DXB9h/ip08g1ig2qotX88kQZGEGeum65jCTu3B1lh12Zr4yOh6oqm252PrwN 7VmqcfbGfCttjTsB8AgMe7aPswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxoRaz0 4DRnD38npuWljMtFXCK/MB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOqxxzibhP/f2PyDiH50NgJCarAs/B8/gWpGnbUFCcLLPm+MSadVhq v0DhQgkp/k9oBA2eF9zLlCTzCl116PdZ/FnMjUfFqX6AP4Eav3Tx3+/x68BjPU1f bCLzM1vb+p11cWM+AcPm9qz+Qx9T25MNC0MtILBmOmDIsrKq9EzbjlBXEGIA/4b1 yTox9m2N0qjC06UQRASgBQw2eB/U8lOMlTdVTEvlqEggb5arwzRp7OPx23ykM1bv 8Ce+vJkgdI9Akvj5XKUI2nhRE8L971xrvXxg+P394zm9os1hCSODtazH/zQwT0sb LOCgAdf1wmAduo4dZb7pHc7yuPSWJTZh -----END CERTIFICATE-----Generated at Sat Jun 14 18:19:09 2025 by rpki-client