$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: OB1VoXP9Wjd7rsFSJW6sZAT5I1bVSewi8/iARrWQFRs= Subject key identifier: 19:26:22:AE:B2:39:C2:C3:5B:07:61:B7:48:69:95:EC:57:BE:35:50 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 0170 Signing time: Sun 29 Jun 2025 02:57:44 +0000 Manifest this update: Sun 29 Jun 2025 02:57:44 +0000 Manifest next update: Sun 06 Jul 2025 02:57:44 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: vfXgTnfaV8aM/9Hi6x4+14BByF74gn9eKNQZfimlm5o=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: 9qj5nS2jHu6HnjeglTS9hUbn0VPzT6niooBC/rePBvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Jun 29 02:57:44 2025 GMT Not After : Jul 6 02:57:44 2025 GMT Subject: CN=6860aba8-f544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:bb:67:51:cd:c7:95:9e:05:f4:b0:d2:0c: a1:bb:6d:54:5f:ee:e1:c3:4e:73:c7:bf:e3:2d:a9: 62:59:0d:31:08:86:d3:c5:c4:22:54:7c:43:96:fa: ca:4d:5e:23:68:6a:12:60:0a:23:bc:b0:d5:ab:ae: 7f:73:83:99:17:92:14:b8:aa:e9:b7:92:9a:0a:e6: 7e:1a:e0:c9:11:ee:60:70:1f:26:98:c3:fc:a4:0a: 86:70:74:4f:90:c3:23:81:b4:00:31:ce:96:39:f3: e0:17:c9:e0:d8:cf:a9:12:4a:20:d0:4f:13:d1:13: 81:18:98:b9:69:c2:77:25:8e:70:18:94:28:bd:72: 3a:1f:1a:8f:9c:bd:04:38:ad:f8:b0:cf:4f:d2:3f: 1f:f1:45:91:42:82:44:5b:3b:7e:30:57:14:10:6e: ea:76:ce:67:38:e3:53:93:a9:b1:71:c7:23:53:df: 24:15:ec:63:57:6d:8f:85:86:d4:65:91:11:be:05: a4:9c:a1:17:8e:83:99:e2:63:b4:86:8a:8f:11:0f: 78:c4:c1:5b:ff:f7:46:91:02:62:e3:5a:da:57:8b: e5:1d:a9:f7:cf:c9:0d:d4:8a:9d:50:d6:45:21:dc: cf:b3:dd:2d:e5:98:74:09:63:ae:7d:7f:85:d6:f3: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:26:22:AE:B2:39:C2:C3:5B:07:61:B7:48:69:95:EC:57:BE:35:50 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3e:c8:e9:c9:ee:41:ef:c4:57:b6:b9:3f:a9:e2:59:72:53: d8:02:4f:d3:05:76:44:0d:33:b9:f9:94:6b:5f:b3:dd:c1:d6: 66:5b:ed:23:86:5a:6f:1e:e7:ca:38:62:65:7e:32:79:4d:f8: 2b:72:64:b4:66:72:29:fd:9c:00:c0:3c:39:b4:d8:65:8b:a2: 03:a4:f3:7f:35:31:eb:55:8b:eb:fb:31:c8:cd:38:b4:98:4e: 4d:6e:1e:04:b5:06:99:c5:e9:88:ac:ce:1c:b1:7e:50:58:9f: 53:d1:88:c1:b2:ed:8f:3b:86:9a:32:a8:d1:9c:99:2d:4a:c2: 64:43:63:71:b4:a5:f7:c8:f0:db:19:62:42:ca:a9:b2:79:c0: dc:fa:54:d4:d3:43:91:46:fd:72:85:5b:be:82:f3:57:2a:e8: f1:9e:7a:74:5d:47:07:87:d3:27:38:5a:cb:db:70:bf:90:1c: 83:bf:e0:c1:99:d0:c2:69:b3:ca:81:59:eb:28:a7:96:ff:db: fd:99:b6:85:9d:81:05:44:ae:08:87:9b:c8:55:f2:57:23:a2: 82:52:16:46:9f:ec:9b:60:19:6e:04:16:38:b1:51:71:df:03: e2:06:1a:18:d4:a6:58:58:c9:f3:14:fb:e4:59:fc:4f:1e:15: f2:9d:c4:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUwNjI5MDI1NzQ0WhcNMjUwNzA2MDI1NzQ0WjAYMRYwFAYD VQQDEw02ODYwYWJhOC1mNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ea7Z1HNx5WeBfSw0gyhu21UX+7hw05zx7/jLaliWQ0xCIbTxcQiVHxDlvrK TV4jaGoSYAojvLDVq65/c4OZF5IUuKrpt5KaCuZ+GuDJEe5gcB8mmMP8pAqGcHRP kMMjgbQAMc6WOfPgF8ng2M+pEkog0E8T0ROBGJi5acJ3JY5wGJQovXI6HxqPnL0E OK34sM9P0j8f8UWRQoJEWzt+MFcUEG7qds5nOONTk6mxcccjU98kFexjV22PhYbU ZZERvgWknKEXjoOZ4mO0hoqPEQ94xMFb//dGkQJi41raV4vlHan3z8kN1IqdUNZF IdzPs90t5Zh0CWOufX+F1vML2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkmIq6y OcLDWwdht0hplexXvjVQMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrPsjpye5B78RXtrk/qeJZclPYAk/TBXZEDTO5+ZRrX7PdwdZmW+0j hlpvHufKOGJlfjJ5TfgrcmS0ZnIp/ZwAwDw5tNhli6IDpPN/NTHrVYvr+zHIzTi0 mE5Nbh4EtQaZxemIrM4csX5QWJ9T0YjBsu2PO4aaMqjRnJktSsJkQ2NxtKX3yPDb GWJCyqmyecDc+lTU00ORRv1yhVu+gvNXKujxnnp0XUcHh9MnOFrL23C/kByDv+DB mdDCabPKgVnrKKeW/9v9mbaFnYEFRK4Ih5vIVfJXI6KCUhZGn+ybYBluBBY4sVFx 3wPiBhoY1KZYWMnzFPvkWfxPHhXyncSI -----END CERTIFICATE-----Generated at Mon Jun 30 22:25:38 2025 by rpki-client