$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json) Hash identifier: ky3dIUvhhCN9sR4QbcBbEs2rAvbq5/iHdprDzEgW+eg= Subject key identifier: 16:98:BC:BE:97:EA:1A:2E:78:9B:48:2A:90:62:A0:DE:BC:53:8D:88 Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft Manifest number: 07CE Signing time: Thu 12 Jun 2025 20:48:21 +0000 Manifest this update: Thu 12 Jun 2025 20:48:21 +0000 Manifest next update: Thu 19 Jun 2025 20:48:21 +0000 Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: rGzndAZtZTcUI29NNCpOPKYpCU6+CQrCsCLIH43udFM=) 2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: AWPlkT/VPOlTrND3SaqX87pYECk2GQcIiP0u70mzoFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Validity Not Before: Jun 12 20:48:21 2025 GMT Not After : Jun 19 20:48:21 2025 GMT Subject: CN=684b3d15-e0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:55:1b:99:97:e4:9c:0f:3b:9c:55:f1:f4: f7:42:f0:03:34:e3:92:2b:f3:21:a4:37:6f:5a:18: 73:90:28:68:70:d8:54:b8:f9:bb:a8:bb:d2:04:7e: eb:17:69:6d:a6:79:4a:7c:dc:b5:76:25:1f:b6:ab: 77:22:ac:07:8c:c7:91:4d:f7:4b:de:dc:2b:84:ff: ad:ac:f2:48:31:07:78:88:61:d0:62:5b:4d:ea:19: 30:d4:1a:50:ad:af:fb:d3:d3:30:e2:bf:90:64:b9: 22:70:76:5c:ea:2c:4e:ad:88:f2:73:aa:c9:63:d9: 45:35:73:40:19:5a:70:2e:fe:79:b7:36:a3:e5:44: 4c:45:b2:a7:0b:77:2f:71:7e:c9:e4:89:7f:5a:92: c1:4a:c3:ec:5e:32:10:0e:a6:ef:fd:b9:f9:fc:48: 0c:b9:7f:9f:d7:b6:27:2e:ac:ee:85:cc:dc:bd:80: 5d:c0:7f:39:9b:c7:31:8c:34:aa:68:a3:df:5b:02: 59:e4:d9:5d:7d:9b:91:f3:36:00:f4:95:8e:d2:67: 2e:e7:79:23:20:60:dc:d2:93:cd:30:2a:90:10:bb: 14:5a:01:52:09:7a:fb:18:9e:4f:29:f0:ca:01:ea: ea:df:14:d8:dd:9c:2f:73:94:9e:77:c1:65:1a:fd: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:98:BC:BE:97:EA:1A:2E:78:9B:48:2A:90:62:A0:DE:BC:53:8D:88 X509v3 Authority Key Identifier: keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:68:42:d2:f2:37:ec:25:99:f9:0f:10:31:e2:df:3b:55:82: e6:a2:f0:4a:be:97:8b:53:2f:55:0e:50:66:e4:cd:0a:4e:42: 07:89:73:e4:25:d2:1d:cf:c4:50:c5:02:37:bb:fc:c0:37:1a: 9c:62:ed:ba:61:6e:91:8f:3d:62:23:86:9e:eb:85:8a:a9:87: 6a:c6:dc:13:72:e5:34:d1:70:ee:77:a3:4a:42:33:6d:0d:d6: 1c:15:d2:38:e2:e0:45:50:10:03:6d:bc:f3:a5:39:3c:61:b7: 33:6e:e3:f4:eb:5d:72:dd:71:9d:f7:12:b0:38:43:a8:22:50: 43:6d:db:b5:a6:22:35:f3:34:17:38:11:cc:76:20:6f:0f:e6: f4:33:94:7a:36:49:c3:f4:86:cc:04:36:94:0a:99:9a:b3:6e: ee:bc:3b:21:da:b7:ce:20:85:09:ca:bd:fe:4e:6f:f5:d5:e9: 30:0e:69:a9:de:2f:1a:e6:f6:20:cc:3b:86:26:f1:98:c3:aa: 81:6c:ae:32:f1:1a:b9:00:8c:b8:82:c0:ab:8e:4c:98:5a:be: 40:fa:e5:cf:4c:47:be:a9:bc:4e:4c:ee:a0:6d:45:91:00:4b: 56:b7:e7:19:85:02:df:ae:c8:8c:5f:03:5a:ce:3a:4e:45:81: 66:fb:74:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0NTgxMTAvBgNVBAUTKERENkYwMTRGOEFENDVEQTg1RDBFMTZGMkIzNzY4NzY3 OTQ0NDg1QjMwHhcNMjUwNjEyMjA0ODIxWhcNMjUwNjE5MjA0ODIxWjAYMRYwFAYD VQQDEw02ODRiM2QxNS1lMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9ZVG5mX5JwPO5xV8fT3QvADNOOSK/MhpDdvWhhzkChocNhUuPm7qLvSBH7r F2ltpnlKfNy1diUftqt3IqwHjMeRTfdL3twrhP+trPJIMQd4iGHQYltN6hkw1BpQ ra/709Mw4r+QZLkicHZc6ixOrYjyc6rJY9lFNXNAGVpwLv55tzaj5URMRbKnC3cv cX7J5Il/WpLBSsPsXjIQDqbv/bn5/EgMuX+f17YnLqzuhczcvYBdwH85m8cxjDSq aKPfWwJZ5NldfZuR8zYA9JWO0mcu53kjIGDc0pPNMCqQELsUWgFSCXr7GJ5PKfDK Aerq3xTY3Zwvc5Sed8FlGv1eowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaYvL6X 6houeJtIKpBioN68U42IMB8GA1UdIwQYMBaAFN1vAU+K1F2oXQ4W8rN2h2eURIWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQ1OC9GOEFGMTIwMkY2 MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhhaGREaGJ5czNhSFo1UkVo Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXOEJUNHJVWGFoZERoYnlzM2FIWjVSRWhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQ1OC9GOEFGMTIwMkY2MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhh aGREaGJ5czNhSFo1UkVoYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbaELS8jfsJZn5DxAx4t87VYLmovBKvpeLUy9VDlBm5M0KTkIHiXPk JdIdz8RQxQI3u/zANxqcYu26YW6Rjz1iI4ae64WKqYdqxtwTcuU00XDud6NKQjNt DdYcFdI44uBFUBADbbzzpTk8YbczbuP0611y3XGd9xKwOEOoIlBDbdu1piI18zQX OBHMdiBvD+b0M5R6NknD9IbMBDaUCpmas27uvDsh2rfOIIUJyr3+Tm/11ekwDmmp 3i8a5vYgzDuGJvGYw6qBbK4y8Rq5AIy4gsCrjkyYWr5A+uXPTEe+qbxOTO6gbUWR AEtWt+cZhQLfrsiMXwNazjpORYFm+3T4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:57 2025 by rpki-client