$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json) Hash identifier: o9JR6kX5k1kgqOzGjQWEZzmMp8S8D02QNg8uvaiIOJw= Subject key identifier: D1:B6:31:7B:A3:E2:7C:73:91:0E:69:D1:5C:2E:F2:28:C6:A0:28:26 Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Certificate serial: 1B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft Manifest number: 1B44 Signing time: Mon 16 Jun 2025 16:21:40 +0000 Manifest this update: Mon 16 Jun 2025 16:21:40 +0000 Manifest next update: Mon 23 Jun 2025 16:21:40 +0000 Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: cDtgwjRAUHgLvdJOtSXwgEepBGFtRsJBLNseT6AM0YM=) 2: D129428E25DF11E7AC03C03EC4F9AE02.roa (hash: 26Hx4AkbPRTYM9L9rQHlirDpC55IRFhPxlOYhEhXmNA=) 3: 20772F82207611E7AD8F8459C4F9AE02.roa (hash: ItkNWWq8nRtDa6uB2Q8iwUXsM5xJRUOh/lTQOL6uROM=) 4: 920126A625F011E7AB40BB69C4F9AE02.roa (hash: VGx79HjfctMAH3951trK9IBgyFBPVt62lhijc0hOVt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7014 (0x1b66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Validity Not Before: Jun 16 16:21:40 2025 GMT Not After : Jun 23 16:21:40 2025 GMT Subject: CN=68504494-3227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:68:90:83:6f:93:33:df:87:53:ac:a8:c5: 1b:f3:17:09:b1:24:98:eb:60:df:45:0a:c4:7e:fe: db:2e:90:96:b8:75:90:61:c0:71:27:54:1d:ed:86: 58:46:71:f1:db:9e:32:75:a2:19:ff:80:40:56:6a: e3:4e:cd:70:fb:ca:d4:12:aa:88:6f:e9:34:cd:c5: 4c:3e:04:a2:28:d3:48:de:34:8a:09:36:7e:d6:c2: 66:00:d6:16:d4:e7:93:92:0f:8c:e4:2b:58:ff:dc: 39:1c:05:b9:a4:a5:14:b7:5c:d1:ff:b1:ac:46:ca: 25:3b:9c:db:b4:02:ed:26:57:8b:8e:8a:bd:fb:30: 37:ae:fc:f4:6c:07:06:27:1a:13:96:04:7e:f2:35: 5c:48:e7:2f:34:b2:63:92:d2:69:58:c8:2d:da:ad: 72:75:39:7f:46:88:61:72:6f:9b:aa:2f:99:3b:59: da:f9:bc:84:8e:75:9a:af:95:87:46:d7:ff:43:45: 3e:d0:45:32:ba:7e:ed:8e:6f:a0:4b:ea:6d:3f:b4: 49:5a:8d:cb:72:b3:b7:91:7c:d7:22:67:2b:28:dc: 62:33:a0:01:64:19:e6:58:2e:57:32:df:a7:20:36: 60:54:79:11:d6:78:9b:54:98:fd:eb:46:99:f9:a6: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B6:31:7B:A3:E2:7C:73:91:0E:69:D1:5C:2E:F2:28:C6:A0:28:26 X509v3 Authority Key Identifier: keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:53:b9:66:88:e9:ad:39:e6:ca:c6:fc:92:1b:9c:f7:94:97: e6:ba:92:a1:e0:ff:3a:93:5c:43:73:d3:eb:cd:fb:59:f2:e0: 59:20:24:ff:f9:fa:98:f2:19:cb:e3:55:4f:98:42:a2:65:6b: 1b:b1:11:7c:3e:8e:84:f3:fe:c6:aa:4c:15:7e:73:2a:89:0c: c0:5c:1a:25:16:18:aa:98:ba:54:b5:46:44:f3:a7:23:1d:ce: 50:d5:39:40:be:ba:92:68:15:5e:85:c5:92:77:64:89:1d:c1: 31:26:4e:ff:4f:9f:82:b1:40:e5:f6:1f:b8:ec:97:96:fb:53: 31:02:a9:8c:83:54:17:36:2c:9a:bb:e5:86:fe:c3:35:ea:5e: c2:b2:87:28:d6:51:4e:b6:fa:dd:76:59:f4:98:2c:5b:8d:a8: 03:ed:c0:c1:f1:47:79:8b:5a:40:a3:b3:8b:61:43:a4:0c:33: f8:3d:ae:c4:33:d3:db:ac:30:9e:93:c9:e1:ff:0e:8f:18:ff: d1:6f:ac:c4:ee:d5:8a:10:e3:ef:af:61:5c:6f:ad:f1:70:73: ba:71:99:e2:f4:14:1e:b1:35:48:a5:8e:85:19:2c:c1:d5:bd: 43:c9:d4:26:e2:be:e7:21:82:8e:49:0b:13:03:b8:f8:89:5a: 43:1b:9d:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0RTExMTAvBgNVBAUTKERDMUIzOUI1NEY2MDg5MUFDNzc4QTkzMTZENzFCMEJF ODAwNjM5NkUwHhcNMjUwNjE2MTYyMTQwWhcNMjUwNjIzMTYyMTQwWjAYMRYwFAYD VQQDEw02ODUwNDQ5NC0zMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22BokINvkzPfh1OsqMUb8xcJsSSY62DfRQrEfv7bLpCWuHWQYcBxJ1Qd7YZY RnHx254ydaIZ/4BAVmrjTs1w+8rUEqqIb+k0zcVMPgSiKNNI3jSKCTZ+1sJmANYW 1OeTkg+M5CtY/9w5HAW5pKUUt1zR/7GsRsolO5zbtALtJleLjoq9+zA3rvz0bAcG JxoTlgR+8jVcSOcvNLJjktJpWMgt2q1ydTl/Rohhcm+bqi+ZO1na+byEjnWar5WH Rtf/Q0U+0EUyun7tjm+gS+ptP7RJWo3LcrO3kXzXImcrKNxiM6ABZBnmWC5XMt+n IDZgVHkR1nibVJj960aZ+aZXTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG2MXuj 4nxzkQ5p0Vwu8ijGoCgmMB8GA1UdIwQYMBaAFNwbObVPYIkax3ipMW1xsL6ABjlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzRFMS8yMDA0RjE0NDE2 MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lSckhlS2t4YlhHd3ZvQUdP VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCczV0VTlnaVJySGVLa3hiWEd3dm9BR09XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzRFMS8yMDA0RjE0NDE2MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lS ckhlS2t4YlhHd3ZvQUdPVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWU7lmiOmtOebKxvySG5z3lJfmupKh4P86k1xDc9PrzftZ8uBZICT/ +fqY8hnL41VPmEKiZWsbsRF8Po6E8/7GqkwVfnMqiQzAXBolFhiqmLpUtUZE86cj Hc5Q1TlAvrqSaBVehcWSd2SJHcExJk7/T5+CsUDl9h+47JeW+1MxAqmMg1QXNiya u+WG/sM16l7Csoco1lFOtvrddln0mCxbjagD7cDB8Ud5i1pAo7OLYUOkDDP4Pa7E M9PbrDCek8nh/w6PGP/Rb6zE7tWKEOPvr2Fcb63xcHO6cZni9BQesTVIpY6FGSzB 1b1DydQm4r7nIYKOSQsTA7j4iVpDG52b -----END CERTIFICATE-----Generated at Wed Jun 18 10:08:10 2025 by rpki-client