$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: +UvEqSxYboljpMSyyf03oiUXJ2/X5lujTHThsOggUTE= Subject key identifier: 2C:C0:F4:BF:0B:E1:7D:CF:27:56:F9:0D:3B:CA:78:42:7A:88:0D:8F Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: 9A Signing time: Tue 17 Jun 2025 05:17:41 +0000 Manifest this update: Tue 17 Jun 2025 05:17:41 +0000 Manifest next update: Tue 24 Jun 2025 05:17:41 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: Jw+1XaTSyhilKVEc+98Y4ImwOB01xgOS/CdAEGlnUgc=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Jun 17 05:17:41 2025 GMT Not After : Jun 24 05:17:41 2025 GMT Subject: CN=6850fa75-cc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:fb:fe:c2:9d:de:e0:89:03:4e:9f:db:13: ba:4e:19:5f:2a:10:69:94:ac:5c:38:90:38:9b:e3: 89:29:05:ac:98:21:01:be:d6:4f:d9:17:44:7f:bb: 65:d2:d7:56:6d:77:fb:b8:73:a6:eb:b8:05:98:bd: e1:3d:63:40:eb:21:88:b9:cd:5f:eb:f0:f5:0e:33: fc:ca:4c:5e:c1:1a:7e:b6:30:c4:42:12:22:1a:89: 41:67:9c:11:4f:93:d5:bd:1e:c3:f8:ce:73:47:b5: 2f:db:8e:77:bc:7b:b6:a3:d6:cf:4d:e3:3c:ca:d1: fc:69:17:28:6f:e8:35:88:e7:47:13:41:fe:d1:af: 84:f7:41:db:2b:d5:c6:85:6a:5d:5f:2b:b8:4d:e1: a3:78:7a:58:51:fb:27:55:64:11:00:5b:c3:b7:cc: 53:8f:dd:c7:3c:8b:11:14:5a:6e:ab:a1:b8:1c:0e: f0:9f:7b:b0:86:a5:cd:b5:0b:3e:65:28:44:96:b2: 12:6c:2f:72:e5:f7:f2:22:f9:40:8e:a9:7b:e6:b0: 12:34:19:14:ee:83:eb:ca:58:ca:61:74:17:2d:c2: d4:e3:62:72:99:e9:e7:0b:65:c2:69:3d:d4:67:ef: 7b:15:c0:a6:17:77:f5:ac:9a:90:ff:c2:8f:08:7f: dd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C0:F4:BF:0B:E1:7D:CF:27:56:F9:0D:3B:CA:78:42:7A:88:0D:8F X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:bf:07:dd:ad:d6:3d:34:c7:ad:85:e4:d4:8f:d6:bc:0e:bc: 7a:f8:17:36:5d:05:29:8a:2b:52:65:fe:1f:5c:d6:bd:e9:d8: 20:fb:1e:7f:c9:68:5a:f8:9d:46:0b:fe:f9:b8:2a:68:e6:8f: cd:f8:18:0c:61:83:fa:5d:b1:63:cd:a3:ca:fa:5b:cc:f1:87: ee:69:e1:e6:1d:9a:16:16:48:8d:a6:1a:6a:f7:f3:5f:d8:42: 4d:16:09:db:f7:46:dc:b2:57:78:4e:3c:30:69:70:86:99:32: 6d:6d:69:84:ac:5e:4a:4e:82:72:ab:0a:33:8b:8f:12:e3:3b: bb:f4:09:fe:07:ed:4b:61:c7:38:76:79:d8:36:14:09:88:97: aa:bc:60:d1:30:60:ad:fd:e8:45:bb:29:f6:d5:15:27:79:81: 56:13:65:c0:d8:46:5d:65:de:0f:e4:2e:67:12:bc:ca:e6:79: eb:07:03:1f:da:a1:69:ac:8d:3f:eb:18:89:1d:2d:d3:d2:ae: 8c:f5:10:92:54:fb:9f:79:01:b0:48:61:07:28:08:41:f9:bb: 77:dd:ce:42:e1:44:8c:3d:ce:08:36:81:6c:93:d8:b7:f2:c9: ba:0f:8c:f2:cd:78:2d:a0:b4:b3:3f:c8:01:28:68:b4:5f:b2: 9f:ea:c0:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjUwNjE3MDUxNzQxWhcNMjUwNjI0MDUxNzQxWjAYMRYwFAYD VQQDEw02ODUwZmE3NS1jYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zj7/sKd3uCJA06f2xO6ThlfKhBplKxcOJA4m+OJKQWsmCEBvtZP2RdEf7tl 0tdWbXf7uHOm67gFmL3hPWNA6yGIuc1f6/D1DjP8ykxewRp+tjDEQhIiGolBZ5wR T5PVvR7D+M5zR7Uv2453vHu2o9bPTeM8ytH8aRcob+g1iOdHE0H+0a+E90HbK9XG hWpdXyu4TeGjeHpYUfsnVWQRAFvDt8xTj93HPIsRFFpuq6G4HA7wn3uwhqXNtQs+ ZShElrISbC9y5ffyIvlAjql75rASNBkU7oPryljKYXQXLcLU42JymennC2XCaT3U Z+97FcCmF3f1rJqQ/8KPCH/d/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzA9L8L 4X3PJ1b5DTvKeEJ6iA2PMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvvwfdrdY9NMetheTUj9a8Drx6+Bc2XQUpiitSZf4fXNa96dgg+x5/ yWha+J1GC/75uCpo5o/N+BgMYYP6XbFjzaPK+lvM8YfuaeHmHZoWFkiNphpq9/Nf 2EJNFgnb90bcsld4TjwwaXCGmTJtbWmErF5KToJyqwozi48S4zu79An+B+1LYcc4 dnnYNhQJiJeqvGDRMGCt/ehFuyn21RUneYFWE2XA2EZdZd4P5C5nErzK5nnrBwMf 2qFprI0/6xiJHS3T0q6M9RCSVPufeQGwSGEHKAhB+bt33c5C4USMPc4INoFsk9i3 8sm6D4zyzXgtoLSzP8gBKGi0X7Kf6sAt -----END CERTIFICATE-----Generated at Tue Jun 17 12:19:39 2025 by rpki-client