$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft File: 38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json) Hash identifier: F3jmCvJ+vbr23Ns/Rq6HP2Oyd1qb9nBgVOdZnBS5co0= Subject key identifier: A3:24:3B:EC:79:BF:6B:4A:22:33:D9:1C:B9:7F:B5:DD:8B:10:8C:22 Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft Manifest number: 7A Signing time: Sun 15 Jun 2025 05:50:20 +0000 Manifest this update: Sun 15 Jun 2025 05:50:19 +0000 Manifest next update: Sun 22 Jun 2025 05:50:19 +0000 Files and hashes: 1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: PrYZnkQ8vBXd6HTHd2JGMV9yUWUZKbicXSZUUuFXZF8=) 2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: kYva9N1B9q6x51z8ic6e8oPHZgI7EM6Un1P8CXMlwJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D Validity Not Before: Jun 15 05:50:19 2025 GMT Not After : Jun 22 05:50:19 2025 GMT Subject: CN=684e5f1c-776d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:30:d7:dc:38:42:58:b5:07:e2:e0:3d:5f: 0e:f5:ed:41:bd:38:23:2b:ac:e6:6d:73:28:24:9a: 1c:5b:db:ee:b7:47:36:4a:20:07:45:c5:7d:a3:a4: ad:ef:ca:fe:70:28:2b:8f:00:7e:7c:cd:40:56:f9: d9:93:c3:e2:66:0d:79:e3:b9:80:09:27:c1:c8:09: 05:ee:b7:83:29:3c:a4:7b:ef:82:b2:14:d0:2d:d4: 9d:65:64:68:65:92:87:71:54:0c:82:32:3f:79:32: c5:58:f7:51:5e:5b:60:cb:31:64:76:74:f0:83:39: 3e:f5:a3:77:dd:55:25:49:29:71:30:bc:f4:3c:2d: 37:4e:aa:f6:b7:aa:41:d3:1f:c9:35:e6:aa:f2:bd: d3:fb:52:60:8c:47:8f:0e:a3:d9:e5:40:2b:da:82: 3d:bf:19:73:f6:fc:b4:2c:f5:f8:58:fc:f6:18:9e: a3:dc:79:67:2a:d0:ca:d0:3c:eb:c0:22:7d:64:7a: aa:68:ec:a8:cd:33:42:34:98:4b:ab:17:ff:c7:5a: b8:57:78:ac:3b:2b:4f:40:18:4c:15:d4:b4:56:a9: 27:6e:ca:45:b5:d9:c9:8c:70:4a:39:fc:f6:c2:0e: 66:89:dd:b0:a0:9d:ee:87:95:2b:97:52:7b:9d:39: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:24:3B:EC:79:BF:6B:4A:22:33:D9:1C:B9:7F:B5:DD:8B:10:8C:22 X509v3 Authority Key Identifier: keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:46:fe:ba:ff:68:c9:1d:78:2f:8d:19:f1:49:1d:34:56:ed: 56:e3:5a:e9:8c:f9:9d:8b:f3:4c:01:72:5d:61:9f:0b:8e:bf: 8d:83:60:ab:be:ea:68:cd:cb:5d:cb:d5:64:5f:7e:b5:e1:31: 30:93:36:d0:e7:6f:49:97:e5:09:81:f8:a7:50:90:e1:ad:52: e8:6b:85:a4:f6:29:e7:19:e0:1b:d2:2e:88:98:35:99:d6:f8: 79:79:86:78:52:37:fd:74:25:3f:ec:cd:f4:2a:eb:b9:78:c1: da:67:ee:f0:1b:f6:cd:77:8d:38:da:ff:2f:a7:b4:f5:85:89: 9e:3f:02:26:da:5e:fe:ea:f8:a0:1e:df:86:fc:23:6e:f7:e3: 39:28:e6:d6:41:fe:d9:15:8e:e2:82:c6:74:a7:51:c6:be:58: 4c:2e:55:50:2f:c6:9e:24:c6:88:ec:1d:34:2a:bb:9e:df:2e: 57:a7:ca:f6:7f:5b:2a:13:da:ae:e5:27:cb:21:eb:72:81:19: 50:01:c5:57:29:7c:a3:08:a2:c6:f0:70:5b:44:7f:37:b6:2a: ee:43:7c:eb:c5:3c:be:10:5e:90:16:c1:5d:4e:6c:f2:7f:68: 9c:45:c5:dc:5c:63:8e:85:89:32:69:d1:62:93:53:d5:24:56: 1f:5c:40:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUEzQjExMC8GA1UEBRMoREZDNTI4Q0YwMDA2RTM0MTRBRkI3RkU4NkQxRkRFQUY2 NDhCNUM5RDAeFw0yNTA2MTUwNTUwMTlaFw0yNTA2MjIwNTUwMTlaMBgxFjAUBgNV BAMTDTY4NGU1ZjFjLTc3NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsnjDX3DhCWLUH4uA9Xw717UG9OCMrrOZtcygkmhxb2+63RzZKIAdFxX2jpK3v yv5wKCuPAH58zUBW+dmTw+JmDXnjuYAJJ8HICQXut4MpPKR774KyFNAt1J1lZGhl kodxVAyCMj95MsVY91FeW2DLMWR2dPCDOT71o3fdVSVJKXEwvPQ8LTdOqva3qkHT H8k15qryvdP7UmCMR48Oo9nlQCvagj2/GXP2/LQs9fhY/PYYnqPceWcq0MrQPOvA In1keqpo7KjNM0I0mEurF//HWrhXeKw7K09AGEwV1LRWqSduykW12cmMcEo5/PbC DmaJ3bCgne6HlSuXUnudOaQtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoyQ77Hm/ a0oiM9kcuX+13YsQjCIwHwYDVR0jBBgwFoAU38UozwAG40FK+3/obR/er2SLXJ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxQTNCLzIyNzAxOURBOTAx MTExRUY5Qjg1Qzk2QUM0RjlBRTAyLzM4VW96d0FHNDBGSy0zX29iUl9lcjJTTFhK MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzhVb3p3QUc0MEZLLTNfb2JSX2VyMlNMWEowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx QTNCLzIyNzAxOURBOTAxMTExRUY5Qjg1Qzk2QUM0RjlBRTAyLzM4VW96d0FHNDBG Sy0zX29iUl9lcjJTTFhKMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI5G/rr/aMkdeC+NGfFJHTRW7VbjWumM+Z2L80wBcl1hnwuOv42DYKu+ 6mjNy13L1WRffrXhMTCTNtDnb0mX5QmB+KdQkOGtUuhrhaT2KecZ4BvSLoiYNZnW +Hl5hnhSN/10JT/szfQq67l4wdpn7vAb9s13jTja/y+ntPWFiZ4/AibaXv7q+KAe 34b8I2734zko5tZB/tkVjuKCxnSnUca+WEwuVVAvxp4kxojsHTQqu57fLlenyvZ/ WyoT2q7lJ8sh63KBGVABxVcpfKMIosbwcFtEfze2Ku5DfOvFPL4QXpAWwV1ObPJ/ aJxFxdxcY46FiTJp0WKTU9UkVh9cQII= -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:42 2025 by rpki-client