$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: 5CMH2YJdeZ1KSkBfvf1d4usa07AJMFJi1iQo1DbihzY= Subject key identifier: 19:9E:CF:BA:83:54:74:1A:83:20:92:8D:C3:7A:BA:51:5B:B5:40:86 Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 0147 Signing time: Sun 15 Jun 2025 03:25:45 +0000 Manifest this update: Sun 15 Jun 2025 03:25:44 +0000 Manifest next update: Sun 22 Jun 2025 03:25:44 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: K4Lcv50qY97nxzrrnxyj3oVZ0+4wjVppdIMH5KbaAkA=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: Jun 15 03:25:44 2025 GMT Not After : Jun 22 03:25:44 2025 GMT Subject: CN=684e3d39-8119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:11:23:ec:40:d4:88:5f:1a:c4:4e:5f:b0: 17:58:1a:6d:69:8d:c8:3d:61:dd:a4:6e:34:ea:46: 42:10:3a:64:89:cd:ba:c9:c1:be:2e:f3:72:7d:c6: 7c:86:01:c9:30:fd:8d:fc:67:d5:76:02:46:9f:7e: bf:29:2a:d6:35:eb:12:c4:90:c2:20:25:7e:0e:8a: 73:2b:fb:f7:67:af:24:1c:63:3d:74:fa:26:a8:8a: 7b:0d:36:76:28:d2:25:b7:c9:49:9a:f7:bf:d3:de: 33:74:79:e8:eb:48:58:19:7e:d9:cb:0d:00:c2:3c: 22:2a:e6:23:08:a0:52:71:45:34:d5:6f:23:1c:f1: 15:ba:fa:de:fc:0f:7c:c2:77:f9:5e:e8:fc:ca:a6: ca:3b:43:df:32:c1:51:17:42:f5:08:e0:26:e5:c6: 57:41:ce:cf:07:8b:93:b6:ba:ea:31:47:2c:b9:4e: 27:38:7c:f2:bb:9c:cd:e9:a4:4e:c8:ab:09:5d:a1: be:3b:a1:87:0f:cb:0f:d7:22:ef:e1:06:ac:5b:f7: 69:53:0e:be:b3:d3:c7:49:05:71:72:52:42:b7:80: 79:82:0f:aa:a3:5c:c4:e4:e7:a6:e7:49:eb:0b:3b: 39:25:94:f2:d1:00:fb:88:45:79:ce:15:5d:5c:79: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9E:CF:BA:83:54:74:1A:83:20:92:8D:C3:7A:BA:51:5B:B5:40:86 X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:7d:9d:b7:2d:9b:59:64:39:32:cc:65:6b:6f:e2:18:d5:b3: 4c:b9:ae:ad:90:8b:db:0b:c4:1c:8f:79:64:92:34:28:e9:93: 4e:8d:bf:55:ba:4c:f1:08:08:03:d4:46:5a:93:52:79:87:4b: 1e:d1:90:09:3c:c1:ae:ad:be:44:ca:41:e1:30:00:27:2c:9c: c5:c0:32:5d:8a:19:37:b2:e3:46:4e:ab:40:d5:fb:59:da:22: a3:4c:06:04:ac:b2:cb:d2:f1:5f:9b:54:eb:f0:d8:d3:2a:65: 87:d2:ad:0e:53:55:ce:07:45:ee:c9:19:1c:2a:a4:d0:86:a7: 37:26:e1:d2:3f:ca:f8:17:51:b6:81:fe:b3:27:24:4b:95:32: 53:8c:3b:56:8d:05:53:fa:1b:6a:4c:af:35:20:11:84:05:99: c3:1c:a7:ca:84:20:c4:44:a3:27:f4:5e:0b:03:6d:20:77:be: f7:d7:a8:4a:79:3f:fd:dd:f5:bd:ac:47:9d:aa:6a:fc:79:3b: da:a4:c7:70:71:47:51:f6:a0:21:6c:ee:1a:c1:1d:fb:96:cc: 7a:91:57:c9:a0:ea:b8:45:b0:49:e3:8d:16:ce:d1:21:99:61: d9:73:b5:54:b8:15:92:5d:ab:8c:6e:b4:8f:52:2c:17:52:f3: 69:49:0e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUwNjE1MDMyNTQ0WhcNMjUwNjIyMDMyNTQ0WjAYMRYwFAYD VQQDEw02ODRlM2QzOS04MTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPwRI+xA1IhfGsROX7AXWBptaY3IPWHdpG406kZCEDpkic26ycG+LvNyfcZ8 hgHJMP2N/GfVdgJGn36/KSrWNesSxJDCICV+DopzK/v3Z68kHGM9dPomqIp7DTZ2 KNIlt8lJmve/094zdHno60hYGX7Zyw0AwjwiKuYjCKBScUU01W8jHPEVuvre/A98 wnf5Xuj8yqbKO0PfMsFRF0L1COAm5cZXQc7PB4uTtrrqMUcsuU4nOHzyu5zN6aRO yKsJXaG+O6GHD8sP1yLv4QasW/dpUw6+s9PHSQVxclJCt4B5gg+qo1zE5Oem50nr Czs5JZTy0QD7iEV5zhVdXHn0TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmez7qD VHQagyCSjcN6ulFbtUCGMB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmfZ23LZtZZDkyzGVrb+IY1bNMua6tkIvbC8Qcj3lkkjQo6ZNOjb9V ukzxCAgD1EZak1J5h0se0ZAJPMGurb5EykHhMAAnLJzFwDJdihk3suNGTqtA1ftZ 2iKjTAYErLLL0vFfm1Tr8NjTKmWH0q0OU1XOB0XuyRkcKqTQhqc3JuHSP8r4F1G2 gf6zJyRLlTJTjDtWjQVT+htqTK81IBGEBZnDHKfKhCDERKMn9F4LA20gd77316hK eT/93fW9rEedqmr8eTvapMdwcUdR9qAhbO4awR37lsx6kVfJoOq4RbBJ440WztEh mWHZc7VUuBWSXauMbrSPUiwXUvNpSQ4h -----END CERTIFICATE-----Generated at Sun Jun 15 05:52:30 2025 by rpki-client