$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json) Hash identifier: WgrYhI8/w2bjJnIcw1oqOR2UzzRdS8a2sQ5nSZBThHk= Subject key identifier: 06:3A:58:5C:54:EB:B0:21:ED:83:DE:90:12:52:AB:E9:C6:75:2F:F8 Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft Manifest number: 063B Signing time: Thu 12 Jun 2025 22:18:33 +0000 Manifest this update: Thu 12 Jun 2025 22:18:33 +0000 Manifest next update: Thu 19 Jun 2025 22:18:33 +0000 Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: bkweHIvSCXrOq1yiZE46ygJrF2hANdvLY8SY41nUVmY=) 2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: 4nQWYZbXWSJ3PqE4ZBiXzBzUwOjlbjDx0Oq7v5W8vCQ=) 3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: MzEQJvzOJlRcf4tMcorSrwSuzHCC7BZBlDirsliZQdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Validity Not Before: Jun 12 22:18:33 2025 GMT Not After : Jun 19 22:18:33 2025 GMT Subject: CN=684b5239-f1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:ea:dc:ec:bc:63:38:cc:94:01:73:ae:6f: 88:fb:de:07:be:33:a0:a0:5e:0c:bc:65:ab:8d:15: 8f:e3:01:1b:dd:a9:7b:b9:2c:19:56:19:4e:ce:2d: 3f:5d:12:b3:39:10:5e:6d:ca:83:8b:b4:df:03:5a: 55:70:c6:9b:44:77:b6:67:b0:f4:aa:54:6b:c2:d5: cd:a7:5b:da:5f:12:5f:32:df:6a:b2:d1:d5:20:60: a8:be:db:48:80:8a:30:e5:40:54:cc:a5:c3:28:be: 74:dd:49:c0:1d:ab:92:d4:38:d6:c1:d4:86:77:6e: b1:11:53:d2:4f:72:31:ea:bf:3e:49:a3:b9:bb:59: 93:83:d6:90:14:ab:05:62:6a:21:89:bc:83:69:78: 57:73:23:49:bc:cf:b4:6a:a1:1f:36:e1:c9:8e:24: f6:22:57:c2:51:ea:72:aa:98:37:b9:73:b7:4e:0b: 7a:7b:2c:16:69:62:6b:ff:be:8e:a2:ee:10:43:29: 19:22:80:57:a8:bd:6e:c8:ee:86:d0:10:14:cc:b5: 4a:f6:3a:9a:17:57:65:b3:57:1c:a5:a6:74:7a:33: 77:38:f4:db:96:2d:c3:50:68:32:5f:22:7e:48:0b: 37:a9:7f:6f:b5:d8:b1:4c:ab:62:44:f5:f0:71:54: b9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3A:58:5C:54:EB:B0:21:ED:83:DE:90:12:52:AB:E9:C6:75:2F:F8 X509v3 Authority Key Identifier: keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d9:a0:25:db:8d:ad:3a:03:20:42:50:df:79:b3:df:2f:71: 1b:89:b7:3c:e6:f6:ba:a0:89:e2:af:46:73:3a:73:ec:5b:a0: c9:84:fe:13:42:ae:f3:c5:fe:15:69:af:47:d8:29:de:9e:46: c9:8b:b5:32:44:23:1f:f5:d7:00:b7:51:ac:52:0c:31:5e:97: cd:02:66:35:00:44:51:63:c4:81:c6:05:4d:ab:d3:84:88:3d: 21:68:56:f5:2c:f3:a3:1b:c1:c9:9d:b7:dc:d1:2b:21:c4:cb: 49:13:b9:c4:e1:48:e4:1a:e0:d6:a6:be:56:28:a5:2f:d6:3c: 84:e0:e8:4d:fc:35:f5:fc:c7:00:c8:e7:ba:8d:1a:1d:07:07: b6:0f:94:2f:2b:32:6f:ae:4c:8d:86:a2:2b:30:c4:7a:64:b0: 7f:a6:a6:77:ba:f8:89:67:a7:50:59:3a:4e:20:72:42:0e:34: e5:3c:76:d8:5e:93:b7:a6:27:3f:5c:60:e3:5a:9c:23:d3:3e: 6c:dd:47:cd:86:29:16:a8:be:64:e5:11:e2:3c:f9:43:d0:d7: 45:e6:fe:ce:c1:e9:c9:f1:5a:6f:59:5b:de:46:14:52:36:4d: 9b:a0:39:26:51:bb:0c:ac:d9:12:7f:aa:33:46:9e:0e:4a:ec: 96:e7:fe:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQxM0JEMzRGRjM4 NzhFNEVFRDAwHhcNMjUwNjEyMjIxODMzWhcNMjUwNjE5MjIxODMzWjAYMRYwFAYD VQQDEw02ODRiNTIzOS1mMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwjq3Oy8YzjMlAFzrm+I+94HvjOgoF4MvGWrjRWP4wEb3al7uSwZVhlOzi0/ XRKzORBebcqDi7TfA1pVcMabRHe2Z7D0qlRrwtXNp1vaXxJfMt9qstHVIGCovttI gIow5UBUzKXDKL503UnAHauS1DjWwdSGd26xEVPST3Ix6r8+SaO5u1mTg9aQFKsF YmohibyDaXhXcyNJvM+0aqEfNuHJjiT2IlfCUepyqpg3uXO3Tgt6eywWaWJr/76O ou4QQykZIoBXqL1uyO6G0BAUzLVK9jqaF1dls1ccpaZ0ejN3OPTbli3DUGgyXyJ+ SAs3qX9vtdixTKtiRPXwcVS5vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAY6WFxU 67Ah7YPekBJSq+nGdS/4MB8GA1UdIwQYMBaAFN8R6SaNBq5Tuvt0E700/zh45O7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0RC9CMkVGM0UzNDk1 RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3JsTzYtM1FUdlRUX09Iams3 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4SHBKbzBHcmxPNi0zUVR2VFRfT0hqazd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0RC9CMkVGM0UzNDk1RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3Js TzYtM1FUdlRUX09Iams3dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU2aAl242tOgMgQlDfebPfL3Ebibc85va6oInir0ZzOnPsW6DJhP4T Qq7zxf4Vaa9H2CnenkbJi7UyRCMf9dcAt1GsUgwxXpfNAmY1AERRY8SBxgVNq9OE iD0haFb1LPOjG8HJnbfc0SshxMtJE7nE4UjkGuDWpr5WKKUv1jyE4OhN/DX1/McA yOe6jRodBwe2D5QvKzJvrkyNhqIrMMR6ZLB/pqZ3uviJZ6dQWTpOIHJCDjTlPHbY XpO3pic/XGDjWpwj0z5s3UfNhikWqL5k5RHiPPlD0NdF5v7OwenJ8VpvWVveRhRS Nk2boDkmUbsMrNkSf6ozRp4OSuyW5/7a -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:02 2025 by rpki-client