$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: anFbIYD8uOydPNaTAfyv5fhicdOgaWaXNg4OfhuYgzY= Subject key identifier: 7D:AB:6D:43:E1:8C:C5:D7:CC:79:E5:44:1E:63:7B:26:7D:B7:02:95 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0C51 Signing time: Mon 16 Jun 2025 18:18:42 +0000 Manifest this update: Mon 16 Jun 2025 18:18:42 +0000 Manifest next update: Mon 23 Jun 2025 18:18:42 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: 1XqgU47h7iDQ8ikTu1AhGIIFFGEPGPCD4Ir8BZHKNNU=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Jun 16 18:18:42 2025 GMT Not After : Jun 23 18:18:42 2025 GMT Subject: CN=68506002-6e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:53:0e:a8:d3:82:62:46:71:69:30:46:b6: 71:7f:d5:8b:9c:d7:c7:8f:2d:d7:7b:2f:26:23:26: 43:98:14:9a:a7:b7:ae:7c:36:9c:c7:82:a3:8e:13: a5:5d:10:1f:7a:4f:60:27:e1:56:10:9e:ec:5f:31: b3:52:80:cc:55:f1:ee:2f:76:d6:c7:1c:e7:96:78: ca:1f:01:37:e1:57:49:c4:4f:06:2a:fd:00:f1:c1: d6:78:5c:f8:a1:75:a8:9b:78:7c:b2:85:5d:9d:4f: 2f:ad:c7:2c:24:56:4a:4c:a2:85:e2:c2:e6:76:0b: 83:2f:9c:76:6e:47:63:12:6a:1c:7f:70:99:26:53: 98:10:08:85:3a:44:24:f6:04:ea:22:8f:fa:01:96: 2e:d7:33:f7:b2:e4:55:f0:e7:11:70:5d:d4:39:86: a0:f1:e1:f9:4d:eb:57:f6:8c:d8:e6:8b:0b:37:c2: 42:f2:7b:9e:e7:4b:7c:51:04:58:f0:eb:5a:09:32: b5:88:ec:58:c0:c4:bf:40:ea:c9:d3:0a:7c:e6:31: e4:01:b1:fc:b1:fe:b0:09:f1:c1:1d:f8:f4:94:b9: 73:82:e6:7c:d6:b7:33:cf:68:7a:d7:ca:0c:f0:a3: 71:7e:2b:b5:50:b0:55:9a:17:8a:f1:7a:3f:30:7f: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AB:6D:43:E1:8C:C5:D7:CC:79:E5:44:1E:63:7B:26:7D:B7:02:95 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:0a:3e:f8:36:cf:90:fc:2a:be:b9:ed:8d:21:2d:f7:94:dd: 82:ab:ff:ae:a7:d1:12:f4:4d:e7:4c:dc:0e:bb:56:f9:36:7d: 2c:b4:df:7f:ea:2b:87:56:1a:b5:a6:94:3b:74:5a:fc:ce:90: 64:fe:fa:1e:f7:c7:d6:1c:c5:e9:84:67:60:3c:1a:e3:6f:da: ad:0b:67:f1:f5:3a:68:70:cc:dc:ee:0d:c2:85:be:00:36:81: ee:66:eb:7a:3a:47:25:ca:39:1a:e0:b2:2a:84:66:93:5d:79: e6:27:4b:61:44:57:2a:6d:11:c6:91:3e:ca:c7:98:3f:58:ad: 7b:6f:16:e2:41:25:51:3f:00:95:ed:2a:de:8c:7c:fa:22:de: 29:40:8a:26:15:3b:cb:40:25:ef:00:33:bf:43:17:3e:79:83: ed:cd:69:be:e0:ad:67:17:9c:9d:58:56:7e:e1:67:2b:12:fe: 3a:ac:32:42:86:19:4b:75:3a:d0:af:85:dc:85:a4:1f:c1:f9: af:6e:e1:b4:1d:32:8a:2b:5b:27:35:1c:3e:cb:80:99:83:88: 6c:16:c0:82:fc:b3:c9:54:b4:40:fb:3e:79:74:ee:8f:f7:66: 53:1a:de:85:ca:fe:a8:43:2d:d7:a1:67:a6:c4:e1:cd:be:f7: ec:4d:f1:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUwNjE2MTgxODQyWhcNMjUwNjIzMTgxODQyWjAYMRYwFAYD VQQDEw02ODUwNjAwMi02ZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBJTDqjTgmJGcWkwRrZxf9WLnNfHjy3Xey8mIyZDmBSap7eufDacx4KjjhOl XRAfek9gJ+FWEJ7sXzGzUoDMVfHuL3bWxxznlnjKHwE34VdJxE8GKv0A8cHWeFz4 oXWom3h8soVdnU8vrccsJFZKTKKF4sLmdguDL5x2bkdjEmocf3CZJlOYEAiFOkQk 9gTqIo/6AZYu1zP3suRV8OcRcF3UOYag8eH5TetX9ozY5osLN8JC8nue50t8UQRY 8OtaCTK1iOxYwMS/QOrJ0wp85jHkAbH8sf6wCfHBHfj0lLlzguZ81rczz2h618oM 8KNxfiu1ULBVmheK8Xo/MH9t3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2rbUPh jMXXzHnlRB5jeyZ9twKVMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1Cj74Ns+Q/Cq+ue2NIS33lN2Cq/+up9ES9E3nTNwOu1b5Nn0stN9/ 6iuHVhq1ppQ7dFr8zpBk/voe98fWHMXphGdgPBrjb9qtC2fx9TpocMzc7g3Chb4A NoHuZut6Okclyjka4LIqhGaTXXnmJ0thRFcqbRHGkT7Kx5g/WK17bxbiQSVRPwCV 7SrejHz6It4pQIomFTvLQCXvADO/Qxc+eYPtzWm+4K1nF5ydWFZ+4WcrEv46rDJC hhlLdTrQr4XchaQfwfmvbuG0HTKKK1snNRw+y4CZg4hsFsCC/LPJVLRA+z55dO6P 92ZTGt6Fyv6oQy3XoWemxOHNvvfsTfF9 -----END CERTIFICATE-----Generated at Wed Jun 18 06:32:46 2025 by rpki-client