$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json) Hash identifier: Er5huBXouupxz609LI1kjHxTDMF0kqp/OHsOx1AhFWI= Subject key identifier: B3:EC:8E:AC:72:CA:DD:B4:BF:3D:38:EA:DA:0C:DA:31:AE:E1:87:0B Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft Manifest number: 5D Signing time: Tue 01 Jul 2025 07:58:11 +0000 Manifest this update: Tue 01 Jul 2025 07:58:11 +0000 Manifest next update: Tue 08 Jul 2025 07:58:11 +0000 Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: Womo8bWtZgf+Mtspd/Xlnho8FHq+QUuYSDIIPaOtW6o=) 2: 5E2D7894562911F0A243A66DC4F9AE02.roa (hash: w0THdO9T6h078pEq3+Lht0f7Z/7SLZrFg+11EWkOMY4=) 3: 5EDC5882D3BB11EF80C3AF80C4F9AE02.roa (hash: PJbzNrEkpbuhikAan3mFGxS/ZJai+blTb1hTbzhhLXc=) 4: 5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa (hash: QSPivy5RJK48HHT2SlrvrCH9DPiTCFPajDEwNKBnEww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: Jul 1 07:58:11 2025 GMT Not After : Jul 8 07:58:11 2025 GMT Subject: CN=68639513-3d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:78:1b:99:d4:08:37:c9:96:8e:ab:40:63: 8a:3f:7f:a2:43:26:16:51:56:4b:1d:13:1d:54:9b: fc:03:cb:d3:08:96:af:a5:aa:70:5a:29:53:92:5c: 7b:50:d3:a2:50:fd:78:9c:57:59:c3:e6:40:ee:af: b1:ad:58:70:91:9e:66:09:cb:8d:60:1c:87:40:54: 85:27:1f:a2:7c:b2:ff:a0:73:68:bc:67:2e:48:b6: 85:c3:a2:01:f2:de:fa:00:94:6e:fc:3d:2d:05:a6: 8b:05:f8:6a:fd:b1:8c:10:f7:0a:2d:52:5a:69:80: e5:2c:fe:f2:8d:69:ae:f3:bd:97:be:c0:ff:b9:ad: 33:38:86:2a:14:2b:42:55:5a:ec:db:99:fe:aa:bf: 96:fc:14:64:52:f1:a2:45:8a:b4:04:49:b0:fc:ce: aa:50:f0:68:11:27:6b:48:ad:de:03:42:74:54:bb: 7c:31:ee:68:ab:13:2f:47:7c:dc:40:f5:f7:74:c9: 89:60:c4:6a:a1:99:33:d2:7b:3b:46:0f:ba:d0:3e: ce:b1:3d:4d:fd:f9:52:f2:37:8b:6e:9a:51:4d:a0: 0e:41:f4:57:da:fc:ef:bb:c3:bd:0f:ee:e0:3f:42: 5c:2d:0b:db:96:a3:d9:f0:7c:31:9d:1c:a7:3e:dc: 43:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EC:8E:AC:72:CA:DD:B4:BF:3D:38:EA:DA:0C:DA:31:AE:E1:87:0B X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e8:5c:85:47:8e:70:85:7f:76:fe:1c:e0:4a:56:37:22:a5: 49:1b:fd:47:1f:c0:ab:20:e4:72:23:fc:18:77:6f:4c:cf:85: 3a:43:b3:a7:89:2c:ea:07:fd:46:7f:fd:4d:37:b3:bc:b2:ea: 26:1b:d7:07:89:80:ec:72:f8:c4:40:ee:c7:7c:ce:f8:91:f2: 98:d8:8c:39:06:2b:1c:2c:98:7a:cd:f6:bc:b4:f1:cc:47:bd: e5:3d:c9:e9:db:86:b2:b9:5a:4e:a2:92:ad:4e:38:b8:c7:51: 62:62:99:48:6c:6c:b3:99:04:52:90:f2:2a:2a:56:ec:25:42: 0e:b8:27:b2:c2:50:bf:ae:4a:33:50:2e:5b:cd:6e:36:92:77: 3f:23:e4:18:55:75:df:d9:7c:c3:4b:10:22:7f:53:93:db:ea: 0d:4d:e6:5b:9f:b4:15:f4:20:e1:42:8f:4f:3e:22:a5:fb:b2: 26:74:1e:0c:38:66:be:64:9f:fd:6c:6e:01:29:d1:20:9b:65: 8d:32:0e:5a:d5:bd:3b:83:ee:69:70:01:68:00:21:31:6c:5a: 1f:01:3b:c0:f9:16:6b:73:6e:4a:2f:a6:62:69:34:31:23:9b: f7:bd:74:01:d0:b6:6b:0a:09:66:c1:92:f8:b6:4d:33:6f:19: 4b:da:57:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0VFQjExMC8GA1UEBRMoREVGMzMxN0NCRDE0RDdEQkFBMjdCRkZFM0ZFNUE3QjhB NkVEQ0ZCOTAeFw0yNTA3MDEwNzU4MTFaFw0yNTA3MDgwNzU4MTFaMBgxFjAUBgNV BAMTDTY4NjM5NTEzLTNkMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrNngbmdQIN8mWjqtAY4o/f6JDJhZRVksdEx1Um/wDy9MIlq+lqnBaKVOSXHtQ 06JQ/XicV1nD5kDur7GtWHCRnmYJy41gHIdAVIUnH6J8sv+gc2i8Zy5ItoXDogHy 3voAlG78PS0FposF+Gr9sYwQ9wotUlppgOUs/vKNaa7zvZe+wP+5rTM4hioUK0JV Wuzbmf6qv5b8FGRS8aJFirQESbD8zqpQ8GgRJ2tIrd4DQnRUu3wx7mirEy9HfNxA 9fd0yYlgxGqhmTPSeztGD7rQPs6xPU39+VLyN4tumlFNoA5B9Ffa/O+7w70P7uA/ QlwtC9uWo9nwfDGdHKc+3ENnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs+yOrHLK 3bS/PTjq2gzaMa7hhwswHwYDVR0jBBgwFoAU3vMxfL0U19uqJ7/+P+WnuKbtz7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RUVCL0Y1N0M5NEIwRDNC QTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3ZNeGZMMFUxOXVxSjdfLVAtV251S2J0ejdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RUVCL0Y1N0M5NEIwRDNCQTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1 cUo3Xy1QLVdudUtidHo3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3oXIVHjnCFf3b+HOBKVjcipUkb/UcfwKsg5HIj/Bh3b0zPhTpDs6eJ LOoH/UZ//U03s7yy6iYb1weJgOxy+MRA7sd8zviR8pjYjDkGKxwsmHrN9ry08cxH veU9yenbhrK5Wk6ikq1OOLjHUWJimUhsbLOZBFKQ8ioqVuwlQg64J7LCUL+uSjNQ LlvNbjaSdz8j5BhVdd/ZfMNLECJ/U5Pb6g1N5luftBX0IOFCj08+IqX7siZ0Hgw4 Zr5kn/1sbgEp0SCbZY0yDlrVvTuD7mlwAWgAITFsWh8BO8D5FmtzbkovpmJpNDEj m/e9dAHQtmsKCWbBkvi2TTNvGUvaV4M= -----END CERTIFICATE-----Generated at Thu Jul 3 05:48:21 2025 by rpki-client