$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: RPFDx825QS9JtxE/TTBPOVToIi4a9wgvXO0QZzCNs9A= Subject key identifier: BE:CE:8B:67:83:A8:97:EA:B9:4F:C2:29:39:5E:55:76:46:5F:D8:8E Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 04D3 Signing time: Thu 03 Jul 2025 00:07:41 +0000 Manifest this update: Thu 03 Jul 2025 00:07:40 +0000 Manifest next update: Thu 10 Jul 2025 00:07:40 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: N39igsbT/MYi78+2bfRYYA/5elrPLGZ6ba7yc46ohJU=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: wh1NM+NSrXNgk+dMjusznA6q+s8v+UAafuQbIX3k9wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: Jul 3 00:07:40 2025 GMT Not After : Jul 10 00:07:40 2025 GMT Subject: CN=6865c9cd-37f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:60:4d:c2:6b:d7:30:7b:0d:f0:02:d3:d5: e5:9b:fa:a9:7e:e5:ea:b4:5f:6c:93:21:64:68:84: f6:3f:e0:3d:9c:18:e0:50:18:18:e5:2f:b3:70:0b: a4:a2:89:32:70:f9:5a:47:da:31:6e:56:6e:9c:2f: 12:dd:5e:9c:d0:36:36:b3:57:1c:8a:a8:2f:c7:63: cd:e9:15:a9:5b:5c:66:1f:c5:79:f6:9d:e9:03:db: cc:9c:88:15:49:99:ab:79:b3:e0:a2:11:4c:52:3a: a0:f9:8b:40:23:9a:9c:32:ea:a3:7c:a5:02:e3:4c: b9:fd:00:3b:0c:db:a6:ac:d4:b0:1f:0a:ee:66:12: 44:59:fd:5b:14:0c:73:8b:ea:6a:84:ce:ca:5e:d2: 00:9f:b7:15:a4:cb:d7:f1:9d:bd:73:20:14:a3:af: 87:f9:68:cf:23:01:4a:ac:88:ad:ec:fe:b0:bc:26: 0c:6c:d5:4a:4b:87:74:36:77:1a:f9:98:be:27:31: ea:ed:65:3f:60:8f:7d:9c:0b:06:e8:96:a9:81:c7: 21:39:de:13:ba:53:6c:8c:53:fe:f1:85:69:f6:07: b8:c5:c0:b3:27:69:7f:86:ec:ae:4e:0c:68:65:b5: e6:ac:fd:2c:aa:7c:12:82:f6:85:e4:64:2d:47:ea: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CE:8B:67:83:A8:97:EA:B9:4F:C2:29:39:5E:55:76:46:5F:D8:8E X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:20:ae:15:94:26:89:06:41:55:7f:b8:fd:1b:34:3a:6b:a4: 09:95:db:19:31:89:33:fd:9f:30:85:ea:f6:3d:26:4b:9b:a6: 4b:58:ab:dd:7c:dd:f1:98:00:48:1e:e6:14:9a:f2:02:b1:89: 62:cc:4a:96:13:e0:81:24:0b:af:08:79:a3:ce:13:ba:e8:ed: 4c:58:91:77:da:0f:6d:0d:5d:ed:a1:71:f3:1a:c3:af:f9:63: 06:20:bd:6b:3f:f8:3a:24:1f:d7:b9:27:4b:d5:b4:d0:80:71: 53:12:1d:09:1e:44:3b:4c:63:9a:89:33:df:50:0b:d5:11:d0: a9:2a:09:37:03:6c:e3:f0:24:da:78:9f:21:0a:e1:38:26:27: 78:ac:3c:4f:e0:0d:35:24:85:2b:1e:97:6a:de:68:67:96:0d: 9e:1d:07:44:bd:6c:99:2d:88:82:7f:5a:40:4b:6d:18:9b:d4: fc:4e:93:c9:88:f5:df:93:f4:a6:f1:fa:2e:2f:ec:ff:97:a8: 81:98:41:36:f4:e8:50:3b:2a:4f:59:41:c9:27:8e:b0:b5:c9: 93:58:aa:2f:dc:eb:a4:33:d1:27:c4:42:95:ff:ae:fa:17:01: 9c:40:1e:35:3f:d4:5d:68:5e:06:41:12:85:e3:4a:b9:4a:ad: 84:a3:69:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjUwNzAzMDAwNzQwWhcNMjUwNzEwMDAwNzQwWjAYMRYwFAYD VQQDEw02ODY1YzljZC0zN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWRgTcJr1zB7DfAC09Xlm/qpfuXqtF9skyFkaIT2P+A9nBjgUBgY5S+zcAuk ookycPlaR9oxblZunC8S3V6c0DY2s1cciqgvx2PN6RWpW1xmH8V59p3pA9vMnIgV SZmrebPgohFMUjqg+YtAI5qcMuqjfKUC40y5/QA7DNumrNSwHwruZhJEWf1bFAxz i+pqhM7KXtIAn7cVpMvX8Z29cyAUo6+H+WjPIwFKrIit7P6wvCYMbNVKS4d0Nnca +Zi+JzHq7WU/YI99nAsG6JapgcchOd4TulNsjFP+8YVp9ge4xcCzJ2l/huyuTgxo ZbXmrP0sqnwSgvaF5GQtR+q5GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7Oi2eD qJfquU/CKTleVXZGX9iOMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByIK4VlCaJBkFVf7j9GzQ6a6QJldsZMYkz/Z8wher2PSZLm6ZLWKvd fN3xmABIHuYUmvICsYlizEqWE+CBJAuvCHmjzhO66O1MWJF32g9tDV3toXHzGsOv +WMGIL1rP/g6JB/XuSdL1bTQgHFTEh0JHkQ7TGOaiTPfUAvVEdCpKgk3A2zj8CTa eJ8hCuE4Jid4rDxP4A01JIUrHpdq3mhnlg2eHQdEvWyZLYiCf1pAS20Ym9T8TpPJ iPXfk/Sm8fouL+z/l6iBmEE29OhQOypPWUHJJ46wtcmTWKov3OukM9EnxEKV/676 FwGcQB41P9RdaF4GQRKF40q5Sq2Eo2l5 -----END CERTIFICATE-----Generated at Thu Jul 3 21:43:29 2025 by rpki-client