$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: KYBETqzADwYhekbNNT+QLj9L1ltFKstD3ZUwiVOgOyk= Subject key identifier: 28:5F:BF:6A:EC:1C:BA:CF:45:B3:1C:4D:84:5F:C1:8B:C6:37:04:D5 Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 0402 Signing time: Thu 12 Jun 2025 23:59:38 +0000 Manifest this update: Thu 12 Jun 2025 23:59:38 +0000 Manifest next update: Thu 19 Jun 2025 23:59:38 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: MoNPTxMtQzMqf7m23DAsCG9+9SNnT4G9BVlZeQNGdB4=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2+LI0FBQeI2/dX1G7Td9+baIQ/+USHCLEosOYsTW+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Jun 12 23:59:38 2025 GMT Not After : Jun 19 23:59:38 2025 GMT Subject: CN=684b69ea-1bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1b:29:3c:df:56:f4:c4:48:2c:c8:c8:46:c4: 0e:0e:42:eb:25:a3:3f:1d:ee:92:9b:ad:7d:97:e6: c9:9a:cc:dc:d4:3c:7b:b6:d4:5e:1a:c3:12:47:db: 6f:ae:ab:ba:17:04:69:d2:3c:e2:c0:15:d3:b1:14: 09:1f:83:79:3d:4b:29:61:14:78:d3:98:42:7e:5c: 3b:4a:bb:37:4d:25:d0:ff:95:7b:e9:66:ea:1b:f0: eb:95:c6:92:f9:51:27:30:e6:2f:a1:1d:0e:86:b6: 95:87:bd:c3:b2:e9:22:77:c5:a8:ac:88:3f:0f:ca: 14:c1:38:04:c5:33:65:57:a7:0f:91:bd:26:c8:bf: 12:f8:ca:44:8d:97:ba:43:95:7e:22:73:1d:b4:57: fa:90:46:38:aa:d5:46:8a:e3:53:d5:88:46:61:6e: 4a:d5:6e:2b:5a:30:fb:80:d1:25:f8:51:e9:bb:1b: 6e:a8:5b:7a:6a:38:81:5b:43:92:f6:8a:1a:39:d0: 91:c7:8d:d2:0f:f0:98:34:f5:2c:d7:8b:ee:ef:70: f6:0d:18:02:f0:a7:bd:f2:50:3d:8a:db:7e:27:48: eb:ef:bb:a8:70:1f:6b:8f:01:2c:67:f8:75:ec:aa: 46:3b:3b:1c:dc:c0:58:8a:3f:95:c2:ef:3d:5b:97: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:BF:6A:EC:1C:BA:CF:45:B3:1C:4D:84:5F:C1:8B:C6:37:04:D5 X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:53:e9:08:7d:92:59:4d:1b:dd:05:db:9c:06:ac:68:50:09: 8a:82:df:7e:74:f5:23:3d:45:11:6a:4f:10:8c:26:29:54:4c: 26:50:a8:d0:b7:28:9d:65:89:70:09:33:b5:2b:37:25:88:2e: 84:c3:33:83:4a:e3:7a:c0:c1:c4:f8:b6:8d:a5:92:11:5c:23: 81:56:57:00:4f:0f:f7:d8:06:2f:ae:6e:ac:49:db:42:46:c4: 74:ca:90:4c:ec:bd:31:89:3e:2e:40:e3:06:72:56:ed:53:0a: b3:a6:b9:08:da:58:dc:61:18:0d:c5:07:ca:2a:da:a4:f6:ea: cf:91:3c:54:f1:46:c1:9f:b9:9f:47:20:d3:fb:9f:41:96:c6: 61:17:7b:ff:f9:63:2a:8f:30:65:a0:d2:c5:4e:77:e6:3f:c4: 52:bc:00:c1:ac:20:9b:91:f4:17:18:5a:81:e7:44:1d:c9:09: 85:c8:40:37:08:d8:60:7a:e4:74:d9:7d:36:84:55:7d:37:f7: 32:eb:49:aa:45:69:4e:df:a1:a0:ce:1f:22:7c:c6:a4:84:a5: 22:b2:63:9b:c8:e2:fb:39:cd:ec:0b:84:74:08:9a:dd:84:d6: 0b:07:e2:77:39:82:07:79:70:37:9c:a0:62:91:9e:3c:b1:02: 00:f5:3d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjUwNjEyMjM1OTM4WhcNMjUwNjE5MjM1OTM4WjAYMRYwFAYD VQQDEw02ODRiNjllYS0xYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BspPN9W9MRILMjIRsQODkLrJaM/He6Sm619l+bJmszc1Dx7ttReGsMSR9tv rqu6FwRp0jziwBXTsRQJH4N5PUspYRR405hCflw7Srs3TSXQ/5V76WbqG/DrlcaS +VEnMOYvoR0OhraVh73Dsukid8WorIg/D8oUwTgExTNlV6cPkb0myL8S+MpEjZe6 Q5V+InMdtFf6kEY4qtVGiuNT1YhGYW5K1W4rWjD7gNEl+FHpuxtuqFt6ajiBW0OS 9ooaOdCRx43SD/CYNPUs14vu73D2DRgC8Ke98lA9itt+J0jr77uocB9rjwEsZ/h1 7KpGOzsc3MBYij+Vwu89W5e6dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChfv2rs HLrPRbMcTYRfwYvGNwTVMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOU+kIfZJZTRvdBducBqxoUAmKgt9+dPUjPUURak8QjCYpVEwmUKjQ tyidZYlwCTO1KzcliC6EwzODSuN6wMHE+LaNpZIRXCOBVlcATw/32AYvrm6sSdtC RsR0ypBM7L0xiT4uQOMGclbtUwqzprkI2ljcYRgNxQfKKtqk9urPkTxU8UbBn7mf RyDT+59BlsZhF3v/+WMqjzBloNLFTnfmP8RSvADBrCCbkfQXGFqB50QdyQmFyEA3 CNhgeuR02X02hFV9N/cy60mqRWlO36Ggzh8ifMakhKUismObyOL7Oc3sC4R0CJrd hNYLB+J3OYIHeXA3nKBikZ48sQIA9T10 -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:15 2025 by rpki-client