$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: mOUuQYyZvQnw5feYUyhUSkczWiKWlX0QQ0e+sZQSkkk= Subject key identifier: 4B:A3:F7:A3:EB:69:83:D7:A2:65:C2:D0:67:5B:0B:E3:DA:BA:EF:C4 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: E0 Signing time: Sun 15 Jun 2025 04:37:29 +0000 Manifest this update: Sun 15 Jun 2025 04:37:28 +0000 Manifest next update: Sun 22 Jun 2025 04:37:28 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: PoVmjVZUou+4tqa3ZiO7a3I+Uul+sVKMZdkHsnj3WTs=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: oRCouiUpGQ/m6gpchET77aGzx6bi1ujY4xCm3A9vvYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Jun 15 04:37:28 2025 GMT Not After : Jun 22 04:37:28 2025 GMT Subject: CN=684e4e08-3f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:8e:a6:9d:a2:e6:dd:c8:92:5a:30:3f:93: e0:c8:8d:fc:67:d9:d1:39:39:36:63:24:45:83:74: da:d5:eb:bf:2a:88:5c:5a:67:07:83:a9:42:ab:78: 9f:f7:71:3a:5a:57:60:a9:49:35:12:ec:1a:31:25: 21:d8:7d:0f:3c:62:9f:bc:4e:71:ba:86:38:7c:8d: c1:54:67:47:6a:c1:f3:88:d6:dc:cc:ba:dc:2c:a2: 50:d0:0a:8d:58:e8:b2:c4:39:8f:a0:ee:b4:f4:68: c6:ca:7c:45:75:c5:a6:f0:c8:9f:df:05:ad:4e:1a: 91:e6:18:b9:9d:4d:fa:16:61:6c:4a:68:56:a5:90: 60:74:17:91:63:3f:3d:6f:a7:4e:27:41:4d:fe:fa: 81:3b:a8:22:42:89:31:74:2d:59:a5:2a:f4:88:a7: a9:14:46:7a:34:ee:33:75:a4:58:44:80:1a:e3:88: 9c:7b:69:79:fd:7a:a2:5b:df:d7:6b:fb:80:4c:35: 64:6f:08:77:2f:9d:ed:53:ca:16:67:d9:06:ff:b5: 04:d5:f5:91:36:a0:7f:d4:6e:1b:32:b6:5f:ff:40: de:25:9a:78:be:c0:09:c5:71:52:47:db:b9:3a:53: 50:ad:0f:6e:65:a9:c6:30:4d:cc:04:18:8e:89:5b: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A3:F7:A3:EB:69:83:D7:A2:65:C2:D0:67:5B:0B:E3:DA:BA:EF:C4 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d6:19:90:a0:ee:2b:fd:36:ca:03:58:7e:46:dc:ce:3e:70: 5b:b9:c8:46:c1:3d:b9:af:ca:fe:2a:d4:d1:d0:02:e3:df:0b: 15:3c:fe:b6:c7:8c:a7:7f:a0:a4:2c:f8:1f:72:e7:3e:e4:46: ce:b4:b5:0c:a1:bc:bd:62:c2:ca:59:93:e4:ea:c9:d0:88:35: 06:f5:83:f5:4d:4c:bc:64:d1:35:4c:a0:b2:97:30:6f:77:13: c3:e0:11:4b:5e:fd:51:70:ec:93:36:b6:d7:a3:c7:f7:34:2e: 7a:b7:7e:a7:1b:8b:76:be:f5:15:c2:e2:e0:ae:aa:f1:fe:91: a2:4f:c0:1a:ab:a2:4e:2a:84:38:58:5d:f5:90:a7:8d:50:0c: 43:9b:78:59:c5:84:3c:40:97:ed:96:4f:97:83:9d:3f:9e:b0: 3b:5f:41:ba:26:cd:fb:e7:84:de:6d:8f:0f:2c:1b:dd:b4:6d: 85:fb:07:15:7d:1b:fa:19:5d:f5:31:ab:13:3d:9a:fd:a2:74: 6c:83:47:b7:bd:7e:2c:c7:45:8d:76:18:a6:9e:13:be:b6:a3: 47:6f:32:79:bd:fe:05:bc:54:56:a0:c5:63:0f:b5:69:53:33: 2a:71:a4:86:3d:93:81:59:25:80:ec:1a:74:4d:f2:02:b0:54: ca:10:00:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjUwNjE1MDQzNzI4WhcNMjUwNjIyMDQzNzI4WjAYMRYwFAYD VQQDEw02ODRlNGUwOC0zZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxniOpp2i5t3IklowP5PgyI38Z9nROTk2YyRFg3Ta1eu/KohcWmcHg6lCq3if 93E6WldgqUk1EuwaMSUh2H0PPGKfvE5xuoY4fI3BVGdHasHziNbczLrcLKJQ0AqN WOiyxDmPoO609GjGynxFdcWm8Mif3wWtThqR5hi5nU36FmFsSmhWpZBgdBeRYz89 b6dOJ0FN/vqBO6giQokxdC1ZpSr0iKepFEZ6NO4zdaRYRIAa44ice2l5/XqiW9/X a/uATDVkbwh3L53tU8oWZ9kG/7UE1fWRNqB/1G4bMrZf/0DeJZp4vsAJxXFSR9u5 OlNQrQ9uZanGME3MBBiOiVuJkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuj96Pr aYPXomXC0GdbC+Pauu/EMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF1hmQoO4r/TbKA1h+RtzOPnBbuchGwT25r8r+KtTR0ALj3wsVPP62 x4ynf6CkLPgfcuc+5EbOtLUMoby9YsLKWZPk6snQiDUG9YP1TUy8ZNE1TKCylzBv dxPD4BFLXv1RcOyTNrbXo8f3NC56t36nG4t2vvUVwuLgrqrx/pGiT8Aaq6JOKoQ4 WF31kKeNUAxDm3hZxYQ8QJftlk+Xg50/nrA7X0G6Js3754TebY8PLBvdtG2F+wcV fRv6GV31MasTPZr9onRsg0e3vX4sx0WNdhimnhO+tqNHbzJ5vf4FvFRWoMVjD7Vp UzMqcaSGPZOBWSWA7Bp0TfICsFTKEABl -----END CERTIFICATE-----Generated at Sun Jun 15 08:51:39 2025 by rpki-client