$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json) Hash identifier: qwk36wTZAGRYhSmgVGBl7sebkeeq6VjTtU++i3rbnoE= Subject key identifier: 49:0A:F2:9C:5A:48:E1:51:BF:D5:5B:8F:60:F8:84:9A:6C:04:59:5A Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft Manifest number: 14 Signing time: Thu 19 Jun 2025 07:27:47 +0000 Manifest this update: Thu 19 Jun 2025 07:27:46 +0000 Manifest next update: Thu 26 Jun 2025 07:27:46 +0000 Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: zvlDi8rMtsBTYQX66aljYXZcfY6AyQUmWQ6bxG2QnZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Validity Not Before: Jun 19 07:27:46 2025 GMT Not After : Jun 26 07:27:46 2025 GMT Subject: CN=6853bbf3-dd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:72:49:5f:11:fe:ac:a1:03:9b:5d:6b:52: f5:9c:57:1b:78:bd:f6:46:45:2d:11:6d:c3:4a:5e: fe:c8:31:4a:5f:76:f6:7a:fd:1c:39:41:cb:08:76: 6e:71:7c:30:50:62:80:13:76:61:06:64:1f:af:17: 7a:ac:f9:35:62:64:9d:8d:c2:78:4d:de:73:ff:04: ba:58:46:de:1e:5e:75:a4:e2:19:03:ab:e1:6a:bb: 97:d4:c9:83:c4:02:3e:53:58:08:47:cd:87:6f:18: c9:2d:de:12:bd:2f:43:23:eb:e2:b2:a7:1a:6f:63: 05:5a:a5:7b:24:ee:bf:22:95:be:a2:03:13:e8:16: ed:2c:2f:ce:60:d4:32:ab:dd:73:0c:f7:20:11:94: b8:de:a3:d7:16:d6:3f:98:92:fc:fb:32:fc:04:f0: 62:ba:3f:b1:80:06:da:07:b1:73:a3:2a:40:8b:5b: f5:d4:d6:f0:6a:89:e0:e1:c8:59:3b:62:a5:f0:b3: 61:fa:d1:47:b0:8a:cf:62:a5:d9:66:39:48:c5:90: 25:67:8e:cb:08:ef:a7:e4:68:9b:39:66:79:c3:6f: 9b:33:3c:48:9c:7a:5a:50:ca:dc:17:f9:0f:2b:3e: 21:0c:63:3a:c9:91:ba:55:06:d5:97:81:cb:32:f0: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0A:F2:9C:5A:48:E1:51:BF:D5:5B:8F:60:F8:84:9A:6C:04:59:5A X509v3 Authority Key Identifier: keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e0:1b:5d:66:b8:44:af:9a:d6:98:68:47:5f:23:30:4a:d9: e5:f7:2f:72:3a:b2:57:3c:6e:8c:d8:53:c1:63:82:1a:0a:91: 6c:e2:20:ad:9f:c2:b4:c3:0f:61:c5:bf:be:76:d7:d8:48:a1: 56:0e:2e:e8:34:00:77:e7:c3:56:fc:4b:c5:eb:c3:a9:30:fa: 9f:3d:dd:3d:ed:7f:72:d3:37:be:38:a9:46:b4:92:a8:df:34: 31:d9:13:7d:2b:72:52:8e:2a:53:d1:28:9f:eb:1d:26:5a:d7: 11:e4:62:cf:a0:cc:85:36:bb:2e:1c:e7:08:b7:76:c8:65:7c: 50:d9:ed:92:d1:81:35:e0:d8:5d:0a:ea:7a:c0:fe:0c:ef:0b: 58:09:1f:9e:d9:e0:bb:bb:d8:9a:a1:cd:e3:a2:bb:6a:ee:5b: ca:4d:5d:2e:7d:03:66:05:48:cf:5f:ea:63:2d:7e:45:97:74: 77:ec:99:3b:2e:f3:23:c1:e2:9d:b2:e4:3d:4c:11:13:41:af: 6f:ee:31:8b:fb:04:32:a8:3f:b7:1c:cc:af:6d:5b:28:6d:61: 1a:5a:14:b6:eb:d1:32:b6:1a:fb:2b:75:56:6f:08:1b:1e:16: 5a:f2:c6:a5:e0:5a:d5:9c:32:ec:42:c9:6e:2b:4a:bb:ee:36: 73:33:57:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTgyRDExMC8GA1UEBRMoRENDQjQ2RUFBRERDRDczRjVBQUZBRTBCM0YwMDJFRDky MEMwRTg3RTAeFw0yNTA2MTkwNzI3NDZaFw0yNTA2MjYwNzI3NDZaMBgxFjAUBgNV BAMTDTY4NTNiYmYzLWRkODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4zHJJXxH+rKEDm11rUvWcVxt4vfZGRS0RbcNKXv7IMUpfdvZ6/Rw5QcsIdm5x fDBQYoATdmEGZB+vF3qs+TViZJ2NwnhN3nP/BLpYRt4eXnWk4hkDq+Fqu5fUyYPE Aj5TWAhHzYdvGMkt3hK9L0Mj6+KypxpvYwVapXsk7r8ilb6iAxPoFu0sL85g1DKr 3XMM9yARlLjeo9cW1j+Ykvz7MvwE8GK6P7GABtoHsXOjKkCLW/XU1vBqieDhyFk7 YqXws2H60Uewis9ipdlmOUjFkCVnjssI76fkaJs5ZnnDb5szPEicelpQytwX+Q8r PiEMYzrJkbpVBtWXgcsy8A3dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSQrynFpI 4VG/1VuPYPiEmmwEWVowHwYDVR0jBBgwFoAU3MtG6q3c1z9ar64LPwAu2SDA6H4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxODJELzQwNzQ0OEJBM0I4 NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5YXI2NExQd0F1MlNEQTZI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM010RzZxM2MxejlhcjY0TFB3QXUyU0RBNkg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx ODJELzQwNzQ0OEJBM0I4NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5 YXI2NExQd0F1MlNEQTZINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGjgG11muESvmtaYaEdfIzBK2eX3L3I6slc8bozYU8FjghoKkWziIK2f wrTDD2HFv75219hIoVYOLug0AHfnw1b8S8Xrw6kw+p893T3tf3LTN744qUa0kqjf NDHZE30rclKOKlPRKJ/rHSZa1xHkYs+gzIU2uy4c5wi3dshlfFDZ7ZLRgTXg2F0K 6nrA/gzvC1gJH57Z4Lu72JqhzeOiu2ruW8pNXS59A2YFSM9f6mMtfkWXdHfsmTsu 8yPB4p2y5D1MERNBr2/uMYv7BDKoP7cczK9tWyhtYRpaFLbr0TK2GvsrdVZvCBse FlryxqXgWtWcMuxCyW4rSrvuNnMzVxU= -----END CERTIFICATE-----Generated at Fri Jun 20 06:09:24 2025 by rpki-client