$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: 6JAPj+JbXjLnmUJAVI3cSMX/ZYcdgRyeFEnBZF1oNAA= Subject key identifier: 57:66:10:8E:0E:A2:92:85:7C:29:B3:6C:3D:74:90:F6:D2:63:53:9F Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 8A Signing time: Thu 19 Jun 2025 05:50:53 +0000 Manifest this update: Thu 19 Jun 2025 05:50:52 +0000 Manifest next update: Thu 26 Jun 2025 05:50:52 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: A5jyLB+UuAycNCeVPWAvTlhD6nuKFZJrYAhsagb/DKE=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Jun 19 05:50:52 2025 GMT Not After : Jun 26 05:50:52 2025 GMT Subject: CN=6853a53c-42da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:50:49:c5:07:83:53:ca:84:36:3a:2f:30: 95:36:fe:a3:e0:74:85:6b:51:f3:4e:96:f8:2b:34: cb:56:61:dc:93:11:1e:63:89:94:fa:0d:9c:b4:18: 8d:19:3f:f8:02:e7:dd:d2:16:e0:7a:82:50:08:c5: 8b:51:ce:38:07:aa:27:f2:5d:f0:86:6d:65:ef:18: a9:4f:52:c9:61:f6:a9:ad:64:b4:71:bb:ec:a2:5a: 03:69:ca:8b:17:40:2f:ec:03:bf:55:26:2e:83:71: e3:62:e3:ba:d4:d3:d6:14:e1:ca:c6:d3:15:fe:7a: 6e:2f:61:3a:91:32:b3:01:23:6f:c1:af:2b:6e:13: b8:e0:00:4b:4d:99:2e:a3:f0:6f:31:cd:34:f4:92: 54:38:c3:14:9e:4f:e4:0f:fa:c9:a7:3c:18:b6:16: 4c:21:fb:20:c3:ab:f9:1f:dd:21:83:5b:23:82:be: a4:2f:56:0f:03:4d:f4:4c:56:9f:b0:51:e5:d5:5c: 8b:e7:5d:89:9e:68:4f:0f:09:4c:0c:fe:df:9f:c6: 90:7f:ee:6e:f3:b2:77:57:61:9d:31:4f:37:c2:3f: 06:f4:65:69:54:12:73:e2:81:ed:0f:5c:4d:60:b8: 76:60:ff:45:6e:4d:9d:cb:de:fd:16:30:90:cb:44: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:66:10:8E:0E:A2:92:85:7C:29:B3:6C:3D:74:90:F6:D2:63:53:9F X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:11:2e:71:ff:6a:fe:c7:2d:cb:f0:69:6e:a4:42:2f:37:c9: 6b:09:5b:84:57:3a:bc:57:7e:12:ab:ab:ce:b0:a9:e6:61:21: f3:9b:36:24:19:2c:b4:3b:b6:78:14:83:1c:7e:b9:ae:e2:15: 1a:45:1f:6a:f7:1f:b2:52:3e:93:f0:1a:bf:cf:39:8b:be:d7: 80:96:3d:0c:72:51:78:ed:88:2c:93:4a:dd:08:07:9b:a9:8d: 77:aa:69:63:36:f1:73:51:50:8b:dd:74:c7:6f:f1:00:5b:30: 8f:be:ec:8b:ce:58:45:55:19:f0:7d:e7:2d:e5:44:f8:f4:c5: 10:52:28:8f:cd:d6:e4:fa:8f:2f:db:4a:8c:64:f0:b4:e8:c9: c3:a0:0a:75:46:ac:06:37:c4:b8:82:3e:f8:d4:ea:09:45:c7: 6e:07:6b:94:41:10:4e:fd:f7:a6:2a:60:ee:82:66:a7:27:96: 42:94:a7:df:64:8b:82:10:0c:9e:7b:32:83:de:b0:2e:97:43: 47:09:1c:78:f4:f3:95:12:0c:b2:d3:ce:df:05:cb:82:3e:f0: d3:00:10:72:6b:b8:f7:11:56:0e:99:49:e4:02:2a:5a:ef:f6: 7d:51:05:f3:4d:df:94:7e:9a:ef:67:99:5c:ab:45:b4:98:53: 6a:3e:60:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjUwNjE5MDU1MDUyWhcNMjUwNjI2MDU1MDUyWjAYMRYwFAYD VQQDEw02ODUzYTUzYy00MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwdQScUHg1PKhDY6LzCVNv6j4HSFa1HzTpb4KzTLVmHckxEeY4mU+g2ctBiN GT/4Aufd0hbgeoJQCMWLUc44B6on8l3whm1l7xipT1LJYfaprWS0cbvsoloDacqL F0Av7AO/VSYug3HjYuO61NPWFOHKxtMV/npuL2E6kTKzASNvwa8rbhO44ABLTZku o/BvMc009JJUOMMUnk/kD/rJpzwYthZMIfsgw6v5H90hg1sjgr6kL1YPA030TFaf sFHl1VyL512JnmhPDwlMDP7fn8aQf+5u87J3V2GdMU83wj8G9GVpVBJz4oHtD1xN YLh2YP9Fbk2dy979FjCQy0TokQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdmEI4O opKFfCmzbD10kPbSY1OfMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUES5x/2r+xy3L8GlupEIvN8lrCVuEVzq8V34Sq6vOsKnmYSHzmzYk GSy0O7Z4FIMcfrmu4hUaRR9q9x+yUj6T8Bq/zzmLvteAlj0MclF47Ygsk0rdCAeb qY13qmljNvFzUVCL3XTHb/EAWzCPvuyLzlhFVRnwfect5UT49MUQUiiPzdbk+o8v 20qMZPC06MnDoAp1RqwGN8S4gj741OoJRcduB2uUQRBO/femKmDugmanJ5ZClKff ZIuCEAyeezKD3rAul0NHCRx49POVEgyy087fBcuCPvDTABBya7j3EVYOmUnkAipa 7/Z9UQXzTd+UfprvZ5lcq0W0mFNqPmCa -----END CERTIFICATE-----Generated at Fri Jun 20 20:49:39 2025 by rpki-client