$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json) Hash identifier: KvgoS8QeedOw3QsuU4M3doWJvhalcPuND7g5ZFRmNLk= Subject key identifier: FC:1C:FB:25:1D:40:1D:6F:84:D8:85:23:5F:C1:47:FB:11:A6:EE:FF Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft Manifest number: 12 Signing time: Thu 03 Jul 2025 08:19:00 +0000 Manifest this update: Thu 03 Jul 2025 08:18:59 +0000 Manifest next update: Thu 10 Jul 2025 08:18:59 +0000 Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: /BDGJpdEYAbGiGHScJ628OBoM+8rkeISd3Ap9Fo6X8U=) 2: 3389804E3EE411F0A90C8C51C4F9AE02.roa (hash: 6OXZgM+3Jd9VusOn+wny8Xr8Eu07epm8MvGSb7UmKEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Jul 3 08:18:59 2025 GMT Not After : Jul 10 08:18:59 2025 GMT Subject: CN=68663cf3-7a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:e7:ca:0b:5a:43:b3:6f:ff:5d:ff:05:8e: 36:be:c6:e4:88:5e:3e:9c:dc:9c:69:b2:c0:f9:72: 6a:da:29:d7:46:26:03:e2:aa:c5:84:04:67:1e:2c: c4:7e:90:ee:e9:17:59:6a:49:0d:bb:cc:31:6d:f6: d3:9d:15:c6:e3:8f:10:ea:f1:a9:b4:08:8c:c7:02: 94:12:ad:e5:5b:27:55:09:bc:c5:a3:72:ca:60:9e: 5b:ae:f2:1f:04:5a:e4:c1:27:f8:85:50:33:38:65: d8:e6:32:c1:28:97:e6:6b:33:e8:72:fe:bc:2c:27: 55:13:21:a9:1c:0d:b7:c1:6c:2f:f2:b6:17:87:c8: c4:e7:55:52:ba:3c:3f:35:bd:01:e8:4b:67:c7:f9: 63:07:1a:87:d9:03:27:a7:64:c3:c2:e6:a3:30:81: 8a:22:e0:cb:40:f4:f3:40:9d:28:b7:8b:de:27:07: 7e:8d:d8:26:f4:dd:f5:20:bb:10:7d:0d:7d:89:04: cc:a4:9c:cd:a9:b3:45:4a:82:b4:1f:61:48:e3:3d: 46:5f:f2:df:1d:25:7a:73:df:6f:30:90:d7:fe:40: 59:1a:5c:7a:db:de:6a:77:f1:1a:37:d1:f9:af:f7: 0b:a0:59:d2:b3:5a:99:54:58:6e:11:47:9f:7b:df: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1C:FB:25:1D:40:1D:6F:84:D8:85:23:5F:C1:47:FB:11:A6:EE:FF X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:92:0f:38:22:09:4d:12:70:59:f5:70:ba:f8:71:c1:f5:ce: 5e:f0:67:25:eb:76:d3:79:0a:c2:81:6f:b1:81:bd:ae:c5:5b: b6:8c:0c:6c:00:c6:a3:00:1e:6c:64:66:c6:f7:d9:a0:9e:ef: cc:ff:66:fc:db:d2:40:7b:7d:fd:1f:fc:9c:cb:a8:1f:02:2b: ad:e1:3c:36:be:d4:d8:50:ff:e5:2b:f6:ae:f4:02:b1:f2:80: d4:0d:8f:66:93:7b:fe:e0:11:3c:26:58:78:ae:09:02:5e:28: 75:b6:a1:96:d9:60:3f:a5:ff:57:f4:f3:c3:1e:6a:62:2b:d8: 8d:ca:3b:d7:98:50:d8:8c:3f:d3:3b:54:0f:14:c8:3f:ad:b8: da:ae:69:02:3f:71:cf:2f:c4:42:af:d3:07:62:64:40:30:74: 3b:16:36:97:ab:4f:2a:ec:21:c0:35:79:c7:54:37:22:34:37: 23:aa:78:bc:e7:31:73:c3:e9:48:75:05:ab:69:c5:e6:ec:55: 21:41:b3:5c:ed:f7:06:93:34:35:60:25:b6:b5:79:44:a7:25: 85:7b:0a:7d:ba:e3:ce:6a:b7:51:56:33:50:7a:8b:eb:48:65: 16:cf:ec:8f:ab:d7:e8:49:1e:8c:89:fb:7e:71:3c:b6:0f:47: 83:53:59:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF NUFERjYzQjAeFw0yNTA3MDMwODE4NTlaFw0yNTA3MTAwODE4NTlaMBgxFjAUBgNV BAMTDTY4NjYzY2YzLTdhMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNw+fKC1pDs2//Xf8Fjja+xuSIXj6c3JxpssD5cmraKddGJgPiqsWEBGceLMR+ kO7pF1lqSQ27zDFt9tOdFcbjjxDq8am0CIzHApQSreVbJ1UJvMWjcspgnluu8h8E WuTBJ/iFUDM4ZdjmMsEol+ZrM+hy/rwsJ1UTIakcDbfBbC/ytheHyMTnVVK6PD81 vQHoS2fH+WMHGofZAyenZMPC5qMwgYoi4MtA9PNAnSi3i94nB36N2Cb03fUguxB9 DX2JBMyknM2ps0VKgrQfYUjjPUZf8t8dJXpz328wkNf+QFkaXHrb3mp38Ro30fmv 9wugWdKzWplUWG4RR59736WBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Bz7JR1A HW+E2IUjX8FH+xGm7v8wHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADaSDzgiCU0ScFn1cLr4ccH1zl7wZyXrdtN5CsKBb7GBva7FW7aMDGwA xqMAHmxkZsb32aCe78z/Zvzb0kB7ff0f/JzLqB8CK63hPDa+1NhQ/+Ur9q70ArHy gNQNj2aTe/7gETwmWHiuCQJeKHW2oZbZYD+l/1f088MeamIr2I3KO9eYUNiMP9M7 VA8UyD+tuNquaQI/cc8vxEKv0wdiZEAwdDsWNperTyrsIcA1ecdUNyI0NyOqeLzn MXPD6Uh1BatpxebsVSFBs1zt9waTNDVgJba1eUSnJYV7Cn26485qt1FWM1B6i+tI ZRbP7I+r1+hJHoyJ+35xPLYPR4NTWRA= -----END CERTIFICATE-----Generated at Thu Jul 3 17:14:24 2025 by rpki-client