$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: +9tjYJKVhlEFOD5Zz1ovaFcYnSKjM5ZH9DKJi5gem4U= Subject key identifier: 7C:C2:93:55:67:70:8F:01:74:57:97:7B:37:44:32:C5:0B:B5:65:3A Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 016E Signing time: Fri 13 Jun 2025 02:48:35 +0000 Manifest this update: Fri 13 Jun 2025 02:48:35 +0000 Manifest next update: Fri 20 Jun 2025 02:48:35 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: kW4fPshqqVOJLzjLYF7Is/hUmc81sB97IS6AAWspvB8=) 2: F287261014C311EE89C2C021C4F9AE02.roa (hash: h2JTkH5cDdzaWjiM7lCs6Ni3E0awofcV4Wu5xaJdDqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Jun 13 02:48:35 2025 GMT Not After : Jun 20 02:48:35 2025 GMT Subject: CN=684b9183-c8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:76:67:ab:de:71:26:cf:b1:0e:2e:f8:97: 97:29:7a:c3:c0:2c:56:bd:3e:b2:af:24:e5:7d:e8: 16:a6:21:b5:5d:76:60:09:82:b8:2c:dd:a0:ff:37: 58:85:9e:ef:c7:90:9c:77:a5:ef:50:18:cd:32:ee: 03:1a:f4:79:67:1f:5d:24:30:1f:b7:b3:1d:97:94: f9:f7:69:0d:82:41:f0:83:f4:fc:5f:af:90:9c:bf: c1:fd:20:ca:30:05:cf:d0:7d:4e:77:d5:3f:b9:60: c6:53:7d:3f:81:fd:80:f8:d9:3d:ec:7d:89:70:09: bf:66:e7:09:50:64:fc:2d:8f:1b:1b:01:5f:2f:2c: 21:a0:be:7f:e2:7a:1c:32:f8:20:ab:f1:4b:ce:86: da:24:b5:98:3e:13:b9:5b:9a:32:4f:5e:c3:d1:ab: b0:64:d1:d5:cc:dd:e2:1d:e9:c5:c5:2d:08:75:d1: c0:63:17:02:0b:a0:32:be:b3:e4:f4:cc:25:f7:ec: 20:61:a1:79:70:1d:d7:eb:5d:47:36:10:1f:54:78: 12:10:7d:e2:1a:8a:80:5f:94:7b:1e:a4:8f:c8:f7: c2:90:6d:bc:b2:47:bb:e4:ce:93:02:3e:c0:ce:ea: 70:fb:e5:cd:d9:0d:e2:97:0a:2e:40:ad:61:a5:78: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C2:93:55:67:70:8F:01:74:57:97:7B:37:44:32:C5:0B:B5:65:3A X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2b:ec:7a:1c:12:83:fa:d6:55:be:55:d5:03:3d:45:b8:01: 04:28:fe:b7:d6:2a:cb:df:f7:e9:eb:40:95:e5:ff:c6:3d:e2: 9a:d6:d7:b1:35:7a:19:be:07:a6:66:9a:94:ad:b4:ee:a0:00: ab:fe:0e:40:42:fb:7b:27:bb:81:8f:dd:4b:18:6a:1c:61:60: 03:9d:32:07:9a:0a:cd:0f:bd:8f:44:16:87:57:d6:ce:cc:4b: 27:9b:4d:b0:47:d1:a3:e7:c4:06:10:e7:bc:75:a7:22:d8:87: f2:df:76:5a:9e:78:2b:62:60:be:c5:43:93:fe:6c:a8:b6:7c: 3b:b2:8a:cf:15:f7:a0:dd:bb:e6:b0:3e:2c:42:41:cf:c3:a1: 2e:78:a0:08:e2:fa:4c:1c:f3:d0:07:43:ec:9a:07:be:ed:b7: 2a:d4:81:16:14:34:85:08:48:b0:d3:60:c4:cf:69:6f:13:41: db:23:04:93:3a:dd:c3:37:e9:c7:67:76:ea:ae:5c:9d:12:0e: 3a:3d:da:31:01:45:70:93:aa:c3:22:60:88:24:98:82:e0:f2: 70:6e:93:08:8e:de:d4:e8:b9:7b:38:7d:33:38:0b:5b:e2:3d: 2f:cd:c4:3f:18:0d:98:1d:14:53:f2:58:81:a4:fe:93:75:9b: 42:2e:fd:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjUwNjEzMDI0ODM1WhcNMjUwNjIwMDI0ODM1WjAYMRYwFAYD VQQDEw02ODRiOTE4My1jOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpF2Z6vecSbPsQ4u+JeXKXrDwCxWvT6yryTlfegWpiG1XXZgCYK4LN2g/zdY hZ7vx5Ccd6XvUBjNMu4DGvR5Zx9dJDAft7Mdl5T592kNgkHwg/T8X6+QnL/B/SDK MAXP0H1Od9U/uWDGU30/gf2A+Nk97H2JcAm/ZucJUGT8LY8bGwFfLywhoL5/4noc Mvggq/FLzobaJLWYPhO5W5oyT17D0auwZNHVzN3iHenFxS0IddHAYxcCC6AyvrPk 9Mwl9+wgYaF5cB3X611HNhAfVHgSEH3iGoqAX5R7HqSPyPfCkG28ske75M6TAj7A zupw++XN2Q3ilwouQK1hpXhJfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzCk1Vn cI8BdFeXezdEMsULtWU6MB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2K+x6HBKD+tZVvlXVAz1FuAEEKP631irL3/fp60CV5f/GPeKa1tex NXoZvgemZpqUrbTuoACr/g5AQvt7J7uBj91LGGocYWADnTIHmgrND72PRBaHV9bO zEsnm02wR9Gj58QGEOe8daci2Ify33ZanngrYmC+xUOT/myotnw7sorPFfeg3bvm sD4sQkHPw6EueKAI4vpMHPPQB0Psmge+7bcq1IEWFDSFCEiw02DEz2lvE0HbIwST Ot3DN+nHZ3bqrlydEg46PdoxAUVwk6rDImCIJJiC4PJwbpMIjt7U6Ll7OH0zOAtb 4j0vzcQ/GA2YHRRT8liBpP6TdZtCLv31 -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:55 2025 by rpki-client