$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: n8mv9PpC1NIJQ/vNnwnRI7j2Fm1HB+ZdKxYsbKZGWBk= Subject key identifier: 9F:93:1A:B8:84:F0:7D:42:B4:86:9F:9A:36:B8:6A:EA:C4:98:FC:3B Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 0338 Signing time: Sun 15 Jun 2025 00:47:53 +0000 Manifest this update: Sun 15 Jun 2025 00:47:52 +0000 Manifest next update: Sun 22 Jun 2025 00:47:52 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: 0gLRYZhzp9MNa8Fy8IKWfsVRt7Z8/UoBu6GfF594stg=) 2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6JpjDff62wDTfk1naPEndRnRsudFZskUVlbVd/hGOl8=) 3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: +vJahyBsj/iwD6Uf+V5LVvoqUetqk1SrdYTgQvG1J8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: Jun 15 00:47:52 2025 GMT Not After : Jun 22 00:47:52 2025 GMT Subject: CN=684e1838-7761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:5c:2b:7b:d6:ca:31:32:44:b5:83:bb:a0: 71:5f:42:b6:75:18:59:8d:9c:07:92:bd:89:43:31: 3c:3b:1e:f2:69:72:1d:c2:9a:7a:d2:5f:7a:18:ba: 27:a7:73:a6:62:97:67:f8:c1:5c:78:58:a8:3d:db: 55:82:6c:bc:be:4b:89:74:3c:74:15:0e:de:c2:44: b9:d1:ff:2c:f3:94:e3:80:33:2b:83:f5:4d:23:81: e9:86:f1:e8:49:04:44:39:96:6b:e9:e8:11:d7:49: 96:8b:5d:dd:59:86:8b:9e:41:86:54:26:1e:67:8e: f3:06:86:60:d4:dc:6f:33:08:79:e7:db:23:6b:8e: fd:bd:e8:1c:d4:0b:68:a7:30:70:a3:40:47:6f:91: 76:46:ef:bd:73:fd:82:10:0f:e1:6e:d2:3b:3c:eb: d4:1b:35:88:11:68:6f:43:c0:80:3a:fe:66:b6:49: 47:9f:0a:0f:c2:7f:ec:2e:7a:fe:b0:ac:27:bb:5a: 00:4b:89:75:23:30:91:60:3d:ea:d4:10:53:d5:16: ea:6d:7e:11:41:8e:c3:81:f4:36:80:95:3f:88:f1: 75:4a:66:82:c5:34:af:f9:e0:0a:dd:62:88:ac:01: fb:d9:60:92:84:a0:bb:43:8d:d0:41:df:f4:b6:3a: 48:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:93:1A:B8:84:F0:7D:42:B4:86:9F:9A:36:B8:6A:EA:C4:98:FC:3B X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d4:58:27:d5:87:fc:4e:47:5d:ad:ef:d0:94:2d:9c:a1:90: ff:f4:2a:42:07:5e:93:0f:0a:ff:f3:af:4f:c0:8a:ac:31:8a: 0d:47:53:cb:3c:18:a1:dc:27:57:d0:7c:c9:ae:7a:5d:a7:62: 33:73:b7:1a:07:16:a5:96:01:31:65:42:b5:38:e6:0c:2d:bc: 84:f5:c3:4e:5a:1e:5a:97:4e:76:7a:68:48:10:ec:7c:d8:62: 4c:bf:ad:38:01:bf:26:e2:5a:16:e6:65:68:ce:6e:f6:d3:d7: 36:12:65:23:ca:22:25:27:65:d4:c5:1f:e5:60:9d:f4:a5:88: a8:23:7f:9d:8e:6a:ea:fe:a2:46:32:7a:25:58:f9:f7:56:7b: e5:b2:de:a6:c5:98:21:d7:f6:ab:9c:3a:c9:97:e6:6d:cb:2c: b4:3b:3c:0a:08:f3:33:37:fd:d6:25:ac:d2:a8:d2:b1:b6:56: dd:a8:fe:30:e6:3d:18:48:fe:97:cb:43:56:1b:c1:82:79:fc: a7:69:91:50:ea:56:74:d4:ea:00:2f:78:ba:05:5b:70:79:cf: 0a:55:db:79:d8:88:be:87:87:38:04:15:eb:50:ed:54:fc:52: 64:65:5e:09:15:0f:00:7c:f1:7f:98:c6:b8:43:77:46:01:3e: 85:6f:2d:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjUwNjE1MDA0NzUyWhcNMjUwNjIyMDA0NzUyWjAYMRYwFAYD VQQDEw02ODRlMTgzOC03NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRVcK3vWyjEyRLWDu6BxX0K2dRhZjZwHkr2JQzE8Ox7yaXIdwpp60l96GLon p3OmYpdn+MFceFioPdtVgmy8vkuJdDx0FQ7ewkS50f8s85TjgDMrg/VNI4HphvHo SQREOZZr6egR10mWi13dWYaLnkGGVCYeZ47zBoZg1NxvMwh559sja479vegc1Ato pzBwo0BHb5F2Ru+9c/2CEA/hbtI7POvUGzWIEWhvQ8CAOv5mtklHnwoPwn/sLnr+ sKwnu1oAS4l1IzCRYD3q1BBT1RbqbX4RQY7DgfQ2gJU/iPF1SmaCxTSv+eAK3WKI rAH72WCShKC7Q43QQd/0tjpIDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+TGriE 8H1CtIafmja4aurEmPw7MB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD1Fgn1Yf8Tkddre/QlC2coZD/9CpCB16TDwr/869PwIqsMYoNR1PL PBih3CdX0HzJrnpdp2Izc7caBxallgExZUK1OOYMLbyE9cNOWh5al052emhIEOx8 2GJMv604Ab8m4loW5mVozm7209c2EmUjyiIlJ2XUxR/lYJ30pYioI3+djmrq/qJG MnolWPn3Vnvlst6mxZgh1/arnDrJl+Ztyyy0OzwKCPMzN/3WJazSqNKxtlbdqP4w 5j0YSP6Xy0NWG8GCefynaZFQ6lZ01OoAL3i6BVtwec8KVdt52Ii+h4c4BBXrUO1U /FJkZV4JFQ8AfPF/mMa4Q3dGAT6Fby2s -----END CERTIFICATE-----Generated at Sun Jun 15 08:18:03 2025 by rpki-client