$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: y0lGm/nUZyfT8WGU/SgW1sreqvCi1LX1e1CmOkDKdvc= Subject key identifier: 9E:17:00:8A:14:AA:09:85:A8:9F:21:F9:BD:5D:A7:B7:98:D4:7A:16 Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 017E Signing time: Thu 19 Jun 2025 02:23:41 +0000 Manifest this update: Thu 19 Jun 2025 02:23:41 +0000 Manifest next update: Thu 26 Jun 2025 02:23:41 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: +ubW2sj0jGlbjrcUZhpJjPEkQzO4gWuF3sOkEKXdYqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Jun 19 02:23:41 2025 GMT Not After : Jun 26 02:23:41 2025 GMT Subject: CN=685374ad-fc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:37:fd:4e:c7:db:24:86:16:b1:c6:4b:58: 07:43:94:35:24:f8:70:e2:a8:bf:91:1b:d7:ce:46: 89:28:e1:53:32:0c:d6:c5:1e:ba:c3:13:d8:7c:c0: 3c:ba:7b:e9:f1:c6:5e:c4:55:5c:2c:0a:d1:83:07: 4a:e2:b9:15:aa:7e:fa:9c:ff:27:a3:f2:a1:7b:8f: fe:e7:72:0d:c0:0f:d6:6e:9c:8b:4f:49:0a:f4:81: 69:39:09:b3:da:4a:0d:1b:ca:ae:4c:3b:c1:40:c9: 33:c7:24:32:22:91:20:3e:68:56:84:3a:19:0b:32: 4b:d1:23:5b:0f:90:cc:0d:b8:23:74:b4:2b:68:29: c1:bf:bd:cd:8f:8d:ae:c8:de:5d:1a:49:36:06:dc: 52:55:1f:30:0a:4b:bf:8c:72:59:94:5a:d9:f5:cd: 13:5e:98:4b:69:e0:9d:b3:ad:9a:eb:86:77:db:89: f2:f0:b7:df:56:e0:bb:4c:fa:d0:0e:b3:06:2f:42: 6c:aa:57:7d:a0:c2:c8:a5:0e:1b:af:73:04:04:fc: 24:d7:c8:ec:95:cf:5c:66:ca:f3:29:88:e1:86:9c: 03:3f:a7:c6:a1:6e:23:7c:ca:5a:54:1e:86:62:dd: fb:2e:4b:e1:92:d4:6d:b9:ed:89:2a:5b:da:58:a5: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:17:00:8A:14:AA:09:85:A8:9F:21:F9:BD:5D:A7:B7:98:D4:7A:16 X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:e9:a0:aa:38:91:7a:54:38:99:13:e3:57:68:d1:48:72:1f: 28:0a:b4:bc:a8:1d:7d:05:e3:e4:39:56:5a:e9:4a:e8:c8:a8: 2e:91:ee:e2:72:11:b1:83:1a:aa:1e:e7:48:3b:1d:4f:0a:87: 7f:5d:0d:a7:57:a8:09:79:33:08:42:e3:ae:7c:20:4a:9e:8c: fe:6f:d7:96:b3:e6:5c:a3:f4:3d:80:f0:f5:54:7f:20:d2:75: 07:d8:42:48:46:78:8e:00:d9:53:8e:f0:05:99:46:a8:d4:e4: 1a:87:45:89:f5:a1:b6:f9:85:2b:88:02:91:b2:63:cc:85:a9: f4:21:9c:01:70:a9:05:60:ba:52:da:d5:7f:d7:3d:79:f9:29: 46:ca:40:4b:67:e7:1e:23:27:88:99:b1:b2:c4:ba:a5:38:81: b6:2c:83:04:bb:b9:06:d9:45:d5:a8:22:c7:94:ac:ba:9b:c8: 19:e8:21:13:84:a6:88:b9:36:dd:e3:b7:49:db:d1:18:6e:5b: 85:f0:8c:0e:08:15:2f:55:e9:7d:13:af:84:bf:92:64:ce:ce: 3d:0d:54:bd:f5:a6:4a:a2:23:3d:b1:4c:27:5a:e5:b5:56:d7: 09:9e:0a:88:b1:af:c9:33:21:f4:96:12:fd:28:c1:86:2d:86: ae:4e:93:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjUwNjE5MDIyMzQxWhcNMjUwNjI2MDIyMzQxWjAYMRYwFAYD VQQDEw02ODUzNzRhZC1mYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ac3/U7H2ySGFrHGS1gHQ5Q1JPhw4qi/kRvXzkaJKOFTMgzWxR66wxPYfMA8 unvp8cZexFVcLArRgwdK4rkVqn76nP8no/Khe4/+53INwA/WbpyLT0kK9IFpOQmz 2koNG8quTDvBQMkzxyQyIpEgPmhWhDoZCzJL0SNbD5DMDbgjdLQraCnBv73Nj42u yN5dGkk2BtxSVR8wCku/jHJZlFrZ9c0TXphLaeCds62a64Z324ny8LffVuC7TPrQ DrMGL0Jsqld9oMLIpQ4br3MEBPwk18jslc9cZsrzKYjhhpwDP6fGoW4jfMpaVB6G Yt37LkvhktRtue2JKlvaWKVAxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4XAIoU qgmFqJ8h+b1dp7eY1HoWMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF6aCqOJF6VDiZE+NXaNFIch8oCrS8qB19BePkOVZa6UroyKguke7i chGxgxqqHudIOx1PCod/XQ2nV6gJeTMIQuOufCBKnoz+b9eWs+Zco/Q9gPD1VH8g 0nUH2EJIRniOANlTjvAFmUao1OQah0WJ9aG2+YUriAKRsmPMhan0IZwBcKkFYLpS 2tV/1z15+SlGykBLZ+ceIyeImbGyxLqlOIG2LIMEu7kG2UXVqCLHlKy6m8gZ6CET hKaIuTbd47dJ29EYbluF8IwOCBUvVel9E6+Ev5Jkzs49DVS99aZKoiM9sUwnWuW1 VtcJngqIsa/JMyH0lhL9KMGGLYauTpM/ -----END CERTIFICATE-----Generated at Thu Jun 19 09:43:40 2025 by rpki-client