$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: cYf6hYgQKmhwFjgXDhkDcvidWiNFUoTYGvzCpj/c78Q= Subject key identifier: A4:D5:D9:22:0E:A6:16:D7:2B:89:81:BE:14:28:03:E3:7A:2B:84:4C Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: 60 Signing time: Fri 13 Jun 2025 05:59:56 +0000 Manifest this update: Fri 13 Jun 2025 05:59:56 +0000 Manifest next update: Fri 20 Jun 2025 05:59:56 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: n4t983TpoUZBV2D3zg/16ishBmphS4Sm8yg7JqCvVmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: Jun 13 05:59:56 2025 GMT Not After : Jun 20 05:59:56 2025 GMT Subject: CN=684bbe5c-fbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:26:13:eb:f7:99:f4:ab:5e:fc:e7:77:80:8c: 57:11:78:e8:a3:e3:ca:f7:0a:e9:3c:cb:2c:0b:d7: 8e:3d:bd:8c:71:a7:76:3f:52:26:77:50:23:46:a4: 1a:47:ae:2d:a1:76:06:4d:92:97:b9:3f:c2:77:c8: 56:39:63:b9:b7:07:fb:f0:8c:3d:80:ca:68:05:38: 9c:50:80:8b:a9:bc:99:f5:88:01:e2:89:70:98:3b: 65:75:95:29:90:a1:c3:4f:69:ac:3d:98:84:09:60: ec:f6:56:dd:6a:d2:46:cb:56:da:22:b8:e6:33:23: b3:c1:47:bf:a1:4e:16:91:3f:59:2b:c1:d4:9e:a7: 6e:64:83:90:e7:82:8e:61:19:27:35:17:38:c7:27: 3a:e9:af:6c:ec:ab:00:c5:7e:88:77:1b:80:5f:3c: f3:43:9f:76:b2:85:f4:18:fc:94:60:ad:81:b4:5e: 84:6b:c7:75:08:3a:49:68:a2:bf:70:b2:49:e5:41: d3:c4:2f:0c:ab:41:68:a5:57:43:57:a5:b0:12:ee: df:36:45:8f:ec:ca:93:05:c0:26:be:56:5c:1e:6b: 8a:75:2b:9a:43:a1:6f:cd:de:ac:b6:e7:b0:f9:24: 0d:c3:2d:63:3f:89:ad:d0:0d:af:71:ff:ac:7e:af: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D5:D9:22:0E:A6:16:D7:2B:89:81:BE:14:28:03:E3:7A:2B:84:4C X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:53:bd:7e:35:a7:a6:de:88:0a:bd:ca:d5:bf:aa:4f:5a:8d: 48:aa:c8:b6:77:4f:91:98:bf:89:11:4f:de:7c:58:3d:30:7f: 69:f0:a5:f1:0d:64:b8:3c:aa:40:5c:b7:c4:3a:6b:0e:b7:81: 6a:92:40:8c:7e:86:4e:16:f1:48:83:4a:f1:a7:e0:9c:e3:88: b8:b9:56:86:58:5b:44:c9:e9:81:c9:d4:bd:8c:4e:50:5d:a4: e7:ba:6c:f3:54:18:7e:56:b8:f4:59:32:5b:22:96:cd:5c:eb: eb:6c:7b:ec:1e:c0:37:92:e3:83:0e:5e:1a:09:e0:45:2f:a4: 9f:54:dd:9e:df:7c:c3:6f:e3:a0:10:3a:e6:e4:fd:57:ac:96: ac:e2:b2:cf:7a:52:f1:2c:1d:26:69:92:63:60:f1:54:85:58: 98:46:ae:51:29:19:51:dc:6d:a7:f2:cb:22:b4:55:0a:04:32: f0:ad:30:db:f5:d1:a2:9e:a8:d9:75:6a:7c:b6:e5:fa:26:15: cc:96:eb:34:d4:9f:05:51:ef:22:36:c2:04:bc:8c:6c:cf:a1: a0:b4:2d:c7:df:ff:73:13:9b:6b:ad:71:32:9e:22:8f:0b:01: 0a:2c:3a:86:ca:2d:22:be:61:e6:98:2c:87:31:48:0b:50:88: fe:6a:30:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzMyQTExMC8GA1UEBRMoREMxMTMwRDg2MTZCQUJDNkNFMDg4RjVGMjBFNjk3MTlB OTlDMzJCQjAeFw0yNTA2MTMwNTU5NTZaFw0yNTA2MjAwNTU5NTZaMBgxFjAUBgNV BAMTDTY4NGJiZTVjLWZiZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsJhPr95n0q17853eAjFcReOij48r3Cuk8yywL1449vYxxp3Y/UiZ3UCNGpBpH ri2hdgZNkpe5P8J3yFY5Y7m3B/vwjD2AymgFOJxQgIupvJn1iAHiiXCYO2V1lSmQ ocNPaaw9mIQJYOz2Vt1q0kbLVtoiuOYzI7PBR7+hThaRP1krwdSep25kg5Dngo5h GSc1FzjHJzrpr2zsqwDFfoh3G4BfPPNDn3ayhfQY/JRgrYG0XoRrx3UIOkloor9w sknlQdPELwyrQWilV0NXpbAS7t82RY/sypMFwCa+Vlwea4p1K5pDoW/N3qy257D5 JA3DLWM/ia3QDa9x/6x+r08LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpNXZIg6m FtcriYG+FCgD43orhEwwHwYDVR0jBBgwFoAU3BEw2GFrq8bOCI9fIOaXGamcMrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MzJBLzA4OUJDNEU2QjYz MTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01y cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0JFdzJHRnJxOGJPQ0k5ZklPYVhHYW1jTXJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MzJBLzA4OUJDNEU2QjYzMTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThi T0NJOWZJT2FYR2FtY01ycy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKRTvX41p6beiAq9ytW/qk9ajUiqyLZ3T5GYv4kRT958WD0wf2nwpfEN ZLg8qkBct8Q6aw63gWqSQIx+hk4W8UiDSvGn4JzjiLi5VoZYW0TJ6YHJ1L2MTlBd pOe6bPNUGH5WuPRZMlsils1c6+tse+wewDeS44MOXhoJ4EUvpJ9U3Z7ffMNv46AQ Oubk/Veslqziss96UvEsHSZpkmNg8VSFWJhGrlEpGVHcbafyyyK0VQoEMvCtMNv1 0aKeqNl1any25fomFcyW6zTUnwVR7yI2wgS8jGzPoaC0Lcff/3MTm2utcTKeIo8L AQosOobKLSK+YeaYLIcxSAtQiP5qMAM= -----END CERTIFICATE-----Generated at Sun Jun 15 04:56:07 2025 by rpki-client