$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: jI9ly8eKI4arJTVFuK8oM9PNYRopmMd8Ljl7FcElno0= Subject key identifier: 88:8D:78:B0:47:3A:48:86:C5:48:65:22:51:D1:87:61:7E:1C:A7:3B Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0B45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 3FD0 Signing time: Mon 16 Jun 2025 14:51:12 +0000 Manifest this update: Mon 16 Jun 2025 14:51:11 +0000 Manifest next update: Mon 23 Jun 2025 14:51:11 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: IKYlAaLyMDnQQ6KyJ51ldgz+J3t6Hb0FgJ6aB++MN38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2885 (0xb45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: Jun 16 14:51:11 2025 GMT Not After : Jun 23 14:51:11 2025 GMT Subject: CN=68502f5f-98e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:01:d7:a3:63:60:13:a7:30:68:96:ad:3f: a3:62:6c:e9:8c:a9:d0:c5:48:37:af:ee:0d:ca:db: 20:39:88:c3:d2:23:48:4c:72:36:a8:58:db:78:a2: 6d:75:5f:d4:ce:e6:64:13:be:a2:5e:bf:dd:e7:6b: d2:33:09:85:ed:45:2d:e2:c1:b1:ff:97:00:bd:4a: 65:58:2a:d9:01:ac:6d:69:2e:da:d5:5b:77:58:c1: d4:34:55:25:c6:e3:be:00:39:18:dc:ae:0e:8d:f5: 94:55:bd:33:44:94:2d:42:ab:af:94:8f:21:fe:01: cc:46:0d:04:25:be:0b:61:bd:15:5e:b3:74:47:a5: 40:d2:80:14:69:b1:93:ca:c9:70:14:23:ea:74:3f: 7b:88:f1:83:11:7f:9f:05:09:20:50:89:c8:43:bb: 90:af:5a:bd:f9:54:8a:01:35:a8:b0:82:93:fe:ac: eb:a2:4d:60:0e:fe:f8:d0:8c:ef:2f:e5:82:20:1b: d0:8c:89:4f:94:eb:3a:78:57:72:7e:ae:7c:da:e9: e4:e3:d4:07:d3:4e:1b:ed:0a:6f:28:89:61:d4:83: b6:a2:0d:70:04:3d:a8:c0:a7:d2:b3:40:13:57:a7: 9a:f0:5a:d3:8a:97:5b:ef:b0:ff:bf:96:d1:e2:6e: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8D:78:B0:47:3A:48:86:C5:48:65:22:51:D1:87:61:7E:1C:A7:3B X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:51:3c:c1:1a:e5:4c:b0:11:41:f8:c8:52:00:3c:4b:7f:9b: 44:39:b6:d2:7d:d3:48:e7:c3:0b:0a:0d:31:5b:44:01:a4:58: e7:7e:d9:2e:88:02:20:8e:6d:19:d5:93:5c:3c:04:e3:4b:e3: 81:75:31:96:dc:ee:1e:cf:a1:60:39:83:da:31:79:e4:00:57: d8:0b:0f:43:51:77:f4:39:66:43:00:50:fb:fa:e4:e8:e1:da: 5c:b6:21:e7:28:13:d4:fe:f5:e3:db:c6:96:09:b1:03:5d:f3: f0:89:ca:fd:7a:22:57:9d:00:17:5c:12:6b:47:38:22:22:f0: 30:8e:ed:7b:ff:8b:0d:02:fd:4e:09:ad:6c:50:85:c8:b3:d1: 7d:02:b1:8e:a9:3d:b0:7c:ac:5b:da:d5:da:d9:95:b6:73:e2: 26:82:f5:4e:56:97:1d:33:e3:d2:b4:a6:6d:7d:0b:98:88:39: f3:a1:ab:d5:5a:22:7b:43:dd:0f:db:3b:84:17:74:d5:7f:19: eb:f9:c4:6a:1b:69:58:8d:b0:a1:aa:5d:3a:06:62:d1:47:59: 20:88:cb:cf:7b:f6:f0:25:7d:b9:fb:44:7f:5f:54:13:d1:7c: 98:b5:96:3b:12:1b:bd:8a:77:dc:67:c1:b6:6e:20:3f:83:fe: 46:48:5e:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjUwNjE2MTQ1MTExWhcNMjUwNjIzMTQ1MTExWjAYMRYwFAYD VQQDEw02ODUwMmY1Zi05OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHIB16NjYBOnMGiWrT+jYmzpjKnQxUg3r+4NytsgOYjD0iNITHI2qFjbeKJt dV/UzuZkE76iXr/d52vSMwmF7UUt4sGx/5cAvUplWCrZAaxtaS7a1Vt3WMHUNFUl xuO+ADkY3K4OjfWUVb0zRJQtQquvlI8h/gHMRg0EJb4LYb0VXrN0R6VA0oAUabGT yslwFCPqdD97iPGDEX+fBQkgUInIQ7uQr1q9+VSKATWosIKT/qzrok1gDv740Izv L+WCIBvQjIlPlOs6eFdyfq582unk49QH004b7QpvKIlh1IO2og1wBD2owKfSs0AT V6ea8FrTipdb77D/v5bR4m651wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiNeLBH OkiGxUhlIlHRh2F+HKc7MB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJUTzBGuVMsBFB+MhSADxLf5tEObbSfdNI58MLCg0xW0QBpFjnftku iAIgjm0Z1ZNcPATjS+OBdTGW3O4ez6FgOYPaMXnkAFfYCw9DUXf0OWZDAFD7+uTo 4dpctiHnKBPU/vXj28aWCbEDXfPwicr9eiJXnQAXXBJrRzgiIvAwju17/4sNAv1O Ca1sUIXIs9F9ArGOqT2wfKxb2tXa2ZW2c+ImgvVOVpcdM+PStKZtfQuYiDnzoavV WiJ7Q90P2zuEF3TVfxnr+cRqG2lYjbChql06BmLRR1kgiMvPe/bwJX25+0R/X1QT 0XyYtZY7Ehu9infcZ8G2biA/g/5GSF6y -----END CERTIFICATE-----Generated at Tue Jun 17 06:28:17 2025 by rpki-client