$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: 7AfGgIFHctb9JhEXtOP2+5A7bj+3p2XDNz6vTvBBraI= Subject key identifier: 33:19:22:4F:4C:B1:83:7E:24:5E:3E:36:32:60:0D:76:07:35:A4:47 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 07B9 Signing time: Thu 12 Jun 2025 20:58:46 +0000 Manifest this update: Thu 12 Jun 2025 20:58:46 +0000 Manifest next update: Thu 19 Jun 2025 20:58:46 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: SFy87QAlM3P07bReXchCUWx+nXQeCt5psav3tk/9X0Q=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: uenMBzygNtm8pOViOrVCvIQk55vDxQTLDfSdNpW+OjU=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: pC04v+mNv7zR9Y+4n59q7qozKs19qd8Pl1ty97dV8dI=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: 4189wGj0EPbmCiBfwKVkbJETVgwnkFWeQOcnoateYoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Jun 12 20:58:46 2025 GMT Not After : Jun 19 20:58:46 2025 GMT Subject: CN=684b3f86-9c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:0c:d9:16:45:e6:81:38:48:3d:06:50:7a: 1d:db:8d:ee:06:4b:37:82:6d:07:f2:4f:2b:10:0b: ff:11:70:03:c7:16:49:76:3b:59:9d:1d:d3:33:e0: 58:eb:2a:2d:34:b4:0d:20:5c:c2:2d:b9:30:2b:c0: b7:0d:43:18:9b:f4:ac:0f:21:ef:7f:a0:00:3d:f3: b6:99:58:e5:50:7a:de:77:05:ed:0a:e0:c4:f6:ae: 8a:46:07:31:9b:ac:07:ff:ab:a6:d7:73:37:53:5e: 33:97:6c:bf:da:da:54:2f:80:ae:62:a6:6a:71:92: 73:ee:3f:f7:02:7e:86:22:b0:34:6c:ba:7e:9e:cc: d0:40:64:98:80:e4:3e:85:a2:de:96:49:ba:fc:be: fd:be:12:cc:52:07:b3:2b:85:bc:99:c1:0c:d3:fc: cb:d2:ce:b0:e5:b4:0a:ec:df:72:ed:53:2f:3d:b8: db:92:cb:8f:26:0b:1e:7a:5f:66:6a:6a:9e:06:c2: 3c:24:fc:c6:6b:8b:b3:4f:72:37:de:3f:26:9d:55: 68:1c:2f:be:84:8c:4c:20:bc:51:bc:d5:69:6c:5a: 90:c0:a4:71:58:db:a0:5c:2b:87:14:6d:8b:df:0b: 67:a9:35:78:ef:48:5d:4f:ba:53:08:ed:2d:63:25: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:19:22:4F:4C:B1:83:7E:24:5E:3E:36:32:60:0D:76:07:35:A4:47 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a7:3c:b1:e9:f1:61:34:47:52:36:c8:0c:2e:2a:fd:82:e5: eb:ee:50:4f:e9:f8:0b:19:1b:61:34:50:7b:3d:2b:16:ec:88: 8f:c8:47:b5:a7:aa:46:6f:cb:14:19:35:2c:db:a6:24:3e:26: 2b:72:f5:40:fd:80:c8:6c:81:ed:b1:eb:6e:39:51:be:72:71: 3c:57:79:82:dd:49:f1:2a:19:26:9b:25:1c:f3:82:1c:cd:ea: 29:7f:f8:c5:5f:ee:84:77:fe:a8:76:19:b5:aa:ad:ae:e8:b6: ed:2c:c4:13:e4:53:96:b5:cb:fb:82:c6:9d:c7:1c:c5:a5:11: aa:fd:fd:22:a4:ee:89:3c:86:d8:3e:22:6d:8d:f7:9b:46:b3: 23:06:4e:4a:bf:ee:01:11:5e:06:5d:ab:0a:c8:eb:e9:42:c8: 41:8c:cb:66:8b:2c:b2:eb:94:f0:ea:4d:45:c2:af:56:42:0c: cf:f7:14:26:8e:3d:a0:ae:d3:ae:a8:a7:fc:b8:a1:ee:15:38: 66:32:ed:35:13:1c:40:2e:d5:4d:f8:37:ec:41:dc:96:67:d2: 3e:67:e2:27:9f:a4:c0:ab:da:96:9f:d3:09:fe:93:e2:f6:ac: 71:c7:83:4e:fb:a5:cb:36:0a:b7:41:7a:6c:31:5b:05:52:02: ae:3b:ab:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUwNjEyMjA1ODQ2WhcNMjUwNjE5MjA1ODQ2WjAYMRYwFAYD VQQDEw02ODRiM2Y4Ni05YzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5QM2RZF5oE4SD0GUHod243uBks3gm0H8k8rEAv/EXADxxZJdjtZnR3TM+BY 6yotNLQNIFzCLbkwK8C3DUMYm/SsDyHvf6AAPfO2mVjlUHredwXtCuDE9q6KRgcx m6wH/6um13M3U14zl2y/2tpUL4CuYqZqcZJz7j/3An6GIrA0bLp+nszQQGSYgOQ+ haLelkm6/L79vhLMUgezK4W8mcEM0/zL0s6w5bQK7N9y7VMvPbjbksuPJgseel9m amqeBsI8JPzGa4uzT3I33j8mnVVoHC++hIxMILxRvNVpbFqQwKRxWNugXCuHFG2L 3wtnqTV470hdT7pTCO0tYyU7NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMZIk9M sYN+JF4+NjJgDXYHNaRHMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7pzyx6fFhNEdSNsgMLir9guXr7lBP6fgLGRthNFB7PSsW7IiPyEe1 p6pGb8sUGTUs26YkPiYrcvVA/YDIbIHtsetuOVG+cnE8V3mC3UnxKhkmmyUc84Ic zeopf/jFX+6Ed/6odhm1qq2u6LbtLMQT5FOWtcv7gsadxxzFpRGq/f0ipO6JPIbY PiJtjfebRrMjBk5Kv+4BEV4GXasKyOvpQshBjMtmiyyy65Tw6k1Fwq9WQgzP9xQm jj2grtOuqKf8uKHuFThmMu01ExxALtVN+DfsQdyWZ9I+Z+Inn6TAq9qWn9MJ/pPi 9qxxx4NO+6XLNgq3QXpsMVsFUgKuO6tE -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:07 2025 by rpki-client