$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: wNdOLNtZ2DE8De0vyMMaxs+75ouyHcNhZodTWc5xB+k= Subject key identifier: 45:9E:BA:11:AE:20:2E:C4:03:2A:8E:13:DC:C3:1C:3D:8D:CA:7C:EB Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0C09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0BFD Signing time: Sun 06 Jul 2025 18:49:11 +0000 Manifest this update: Sun 06 Jul 2025 18:49:11 +0000 Manifest next update: Sun 13 Jul 2025 18:49:11 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: vTDSTws9aiRVv85UL+W8EGQHSn0hHp4QvUezmXDF+mg=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: QTmQ+b0TWigH3ktAvPS5L4JGC6TmpCstJJc/am/VnB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: Jul 6 18:49:11 2025 GMT Not After : Jul 13 18:49:11 2025 GMT Subject: CN=686ac527-5771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:bc:eb:09:2d:09:dd:a8:d0:d2:28:8d:ea: 01:7e:be:37:05:26:11:c3:37:7f:6b:de:4a:66:1a: 0b:77:69:d1:35:c6:c7:cc:df:59:67:ee:cb:49:2a: 0f:6d:e7:9d:43:f4:c1:91:79:41:63:b5:6e:0a:d2: b2:86:2b:e2:b2:9e:bd:37:26:46:8f:dc:9d:22:01: 06:37:80:23:70:af:d6:a7:90:51:12:94:c4:1a:cb: 5f:63:70:b9:5c:2f:4d:65:86:c2:a3:29:de:1d:81: c1:0c:2e:e5:ac:61:43:80:0b:80:87:12:79:ac:b0: 10:2f:a3:27:da:84:49:b4:ff:31:f4:33:9b:b3:9b: c9:10:34:8d:98:2d:b0:b8:6e:62:ae:7b:19:00:81: f1:f1:3b:d4:f3:b9:b8:9b:4d:4c:74:a7:31:4c:a2: 99:49:f7:e4:c6:93:58:52:a8:8f:70:e4:33:61:73: 75:97:50:b0:1e:0a:3a:3f:eb:34:31:98:52:0f:c4: a4:a7:89:32:ae:39:19:d7:a2:b4:22:a2:7a:a0:ff: d8:75:3e:e4:ea:a5:7b:ad:14:8c:70:3f:ec:56:dc: 91:5a:17:49:63:dd:bf:d3:93:72:e2:79:c5:11:0e: c1:1e:77:4f:cd:93:cd:71:c9:ee:61:26:af:15:8f: ef:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9E:BA:11:AE:20:2E:C4:03:2A:8E:13:DC:C3:1C:3D:8D:CA:7C:EB X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:79:0f:10:8c:43:92:24:6b:9d:d1:0f:2c:d7:b6:ac:f6:22: b4:45:7a:c9:48:5d:95:ca:94:3b:b7:a4:51:f8:5b:54:2f:16: f9:27:6a:50:ab:fa:3b:07:82:ad:bc:39:e6:3e:c6:53:33:fd: 0a:2b:84:21:60:0b:09:c5:87:9f:1e:f1:f1:50:6c:ad:2b:85: 0e:c2:49:17:ec:f2:2e:47:03:14:8f:a5:d8:82:67:0e:10:49: 22:41:fe:7f:90:75:7e:8a:14:03:41:74:59:0d:41:42:e0:71: 7d:1d:d1:4f:f4:74:f1:9c:c9:5c:90:07:95:24:cb:28:f6:d1: 29:af:58:84:4a:bb:fc:7e:ab:0c:8b:bd:71:da:e6:64:db:37: 90:5a:c3:b3:2f:d9:ea:31:39:0c:25:fa:d3:0b:2b:a4:2f:ea: b8:cf:8b:e3:53:f9:f6:3e:28:8f:1c:71:8c:ac:e0:a3:41:b3: 0b:ab:e9:54:ee:3c:53:1d:1e:39:01:d5:7d:3c:1b:61:02:b2: ba:5b:4e:79:0b:b3:ab:2d:4f:aa:e2:fd:3c:c0:0f:26:e6:ca: bd:37:91:db:e0:58:d3:aa:13:24:1f:8c:03:04:71:87:65:87: 28:af:ff:56:b8:be:35:f4:e8:b1:7b:c8:a5:c6:eb:23:b7:68: a6:aa:27:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjUwNzA2MTg0OTExWhcNMjUwNzEzMTg0OTExWjAYMRYwFAYD VQQDEw02ODZhYzUyNy01NzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApL286wktCd2o0NIojeoBfr43BSYRwzd/a95KZhoLd2nRNcbHzN9ZZ+7LSSoP beedQ/TBkXlBY7VuCtKyhivisp69NyZGj9ydIgEGN4AjcK/Wp5BREpTEGstfY3C5 XC9NZYbCoyneHYHBDC7lrGFDgAuAhxJ5rLAQL6Mn2oRJtP8x9DObs5vJEDSNmC2w uG5irnsZAIHx8TvU87m4m01MdKcxTKKZSffkxpNYUqiPcOQzYXN1l1CwHgo6P+s0 MZhSD8Skp4kyrjkZ16K0IqJ6oP/YdT7k6qV7rRSMcD/sVtyRWhdJY92/05Ny4nnF EQ7BHndPzZPNccnuYSavFY/vVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWeuhGu IC7EAyqOE9zDHD2NynzrMB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaeQ8QjEOSJGud0Q8s17as9iK0RXrJSF2VypQ7t6RR+FtULxb5J2pQ q/o7B4KtvDnmPsZTM/0KK4QhYAsJxYefHvHxUGytK4UOwkkX7PIuRwMUj6XYgmcO EEkiQf5/kHV+ihQDQXRZDUFC4HF9HdFP9HTxnMlckAeVJMso9tEpr1iESrv8fqsM i71x2uZk2zeQWsOzL9nqMTkMJfrTCyukL+q4z4vjU/n2PiiPHHGMrOCjQbMLq+lU 7jxTHR45AdV9PBthArK6W055C7OrLU+q4v08wA8m5sq9N5Hb4FjTqhMkH4wDBHGH ZYcor/9WuL419Oixe8ilxusjt2imqifk -----END CERTIFICATE-----Generated at Mon Jul 7 03:47:45 2025 by rpki-client