$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: 4txWqJmDgKUTYWEGmJEtupvO9uuyM8Pyd2Kgoxj2X9U= Subject key identifier: D8:94:FF:45:02:82:8A:C3:3A:E2:FE:38:BA:F0:78:FC:E8:65:27:C7 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 0103 Signing time: Thu 03 Jul 2025 05:16:32 +0000 Manifest this update: Thu 03 Jul 2025 05:16:31 +0000 Manifest next update: Thu 10 Jul 2025 05:16:31 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: QVbm+T+oroMBPJhtTZfqQmKI91vli2VJGpNyi5BLZY8=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 1uxD9+JBsmHAELgtODtowZ9H7bGY5PrdUNrrDTftS4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Jul 3 05:16:31 2025 GMT Not After : Jul 10 05:16:31 2025 GMT Subject: CN=6866122f-bd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:6b:a3:d2:0f:69:23:84:4d:bf:23:8b:4a: 0b:3d:15:b2:fb:f3:20:e9:5e:ce:16:7b:c0:f4:04: f9:02:29:fc:48:14:c9:2a:5c:c4:a7:37:ae:fd:fd: 11:ce:ca:93:0e:8c:7f:6d:9d:0c:75:43:7e:d5:b0: 11:11:d3:9f:6e:07:42:69:4b:3f:a7:23:26:68:fc: 57:b3:6b:41:a1:d0:78:2b:94:bc:d6:3f:02:75:be: 0b:a8:47:dc:64:ae:1d:f1:13:b4:30:0a:a6:0d:b6: 85:9a:bf:29:dc:4f:33:eb:42:04:ac:79:e3:f5:c0: c0:aa:a6:5d:13:c8:39:90:58:8f:92:49:06:6e:fc: ea:10:b8:89:2d:5c:03:55:bf:dd:8b:1c:50:b9:cb: b1:81:e8:b2:75:40:30:d4:dc:f8:99:39:62:01:eb: 63:24:bd:22:b1:12:bf:22:85:d5:59:78:eb:3f:99: ac:71:09:53:f3:ce:c0:3f:2e:cc:86:05:67:bf:9a: af:78:ac:c0:28:e7:fc:41:b5:f4:95:63:cc:4f:6c: 9f:22:91:08:1b:33:7c:a7:37:a1:1e:b7:2f:c6:59: 1d:13:5d:95:f8:40:f3:91:54:49:f4:e8:6a:53:2d: db:d3:01:b3:6e:77:1d:be:a0:d1:57:dd:3a:28:4a: d5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:94:FF:45:02:82:8A:C3:3A:E2:FE:38:BA:F0:78:FC:E8:65:27:C7 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:34:14:54:ca:b5:ad:37:4f:cf:e6:df:d7:00:72:df:fd:ca: fb:d7:f7:aa:bc:99:ac:13:d5:9f:72:e5:5d:b8:da:73:b0:c5: e4:47:64:b8:0b:90:e9:ac:ca:b6:99:21:81:f1:ad:f7:f2:ee: 67:47:1d:ae:35:8a:54:4e:36:42:05:cc:72:b9:f3:29:5b:83: 74:ab:2a:12:79:c9:17:c8:93:14:ca:06:43:f0:df:69:97:fc: fe:73:64:62:09:ec:88:7a:2e:f7:5d:8b:4c:d0:65:37:d0:84: ae:7d:08:b2:24:ef:6b:fd:4f:1f:89:52:e7:ee:71:85:48:82: b7:36:f3:01:74:69:4e:40:1f:27:f3:ef:52:b2:a1:86:27:59: 70:51:20:55:0d:ab:69:7a:9d:66:58:3f:85:29:4f:ad:6b:6f: 12:38:c4:65:be:e5:b2:0b:c4:9a:99:b7:2a:88:92:44:a5:31: 64:ef:49:68:54:c2:80:ec:6c:be:ba:d6:bf:92:3f:93:bc:ac: 8c:ee:3b:9c:d8:37:26:dd:29:69:f2:05:75:3f:a8:ba:95:7f: eb:ed:7a:c3:24:ac:01:d2:3b:0d:97:d3:5e:ba:ac:c6:3e:52: 78:58:18:0d:cc:22:bb:2a:22:39:40:90:80:19:de:e9:de:cd: af:fd:aa:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUwNzAzMDUxNjMxWhcNMjUwNzEwMDUxNjMxWjAYMRYwFAYD VQQDEw02ODY2MTIyZi1iZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Kxro9IPaSOETb8ji0oLPRWy+/Mg6V7OFnvA9AT5Ain8SBTJKlzEpzeu/f0R zsqTDox/bZ0MdUN+1bAREdOfbgdCaUs/pyMmaPxXs2tBodB4K5S81j8Cdb4LqEfc ZK4d8RO0MAqmDbaFmr8p3E8z60IErHnj9cDAqqZdE8g5kFiPkkkGbvzqELiJLVwD Vb/dixxQucuxgeiydUAw1Nz4mTliAetjJL0isRK/IoXVWXjrP5mscQlT887APy7M hgVnv5qveKzAKOf8QbX0lWPMT2yfIpEIGzN8pzehHrcvxlkdE12V+EDzkVRJ9Ohq Uy3b0wGzbncdvqDRV906KErVcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiU/0UC gorDOuL+OLrwePzoZSfHMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsNBRUyrWtN0/P5t/XAHLf/cr71/eqvJmsE9WfcuVduNpzsMXkR2S4 C5DprMq2mSGB8a338u5nRx2uNYpUTjZCBcxyufMpW4N0qyoSeckXyJMUygZD8N9p l/z+c2RiCeyIei73XYtM0GU30ISufQiyJO9r/U8fiVLn7nGFSIK3NvMBdGlOQB8n 8+9SsqGGJ1lwUSBVDatpep1mWD+FKU+ta28SOMRlvuWyC8SambcqiJJEpTFk70lo VMKA7Gy+uta/kj+TvKyM7juc2Dcm3Slp8gV1P6i6lX/r7XrDJKwB0jsNl9NeuqzG PlJ4WBgNzCK7KiI5QJCAGd7p3s2v/apo -----END CERTIFICATE-----Generated at Thu Jul 3 08:52:30 2025 by rpki-client