$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json) Hash identifier: 1FFxTEfDt7v8KG2nosUSNnO4w1xTaJExZtsMRbD84mk= Subject key identifier: 74:DD:07:D1:E1:7E:5E:B1:04:83:02:CF:E1:E0:59:F7:ED:1D:EA:44 Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft Manifest number: 5E Signing time: Thu 03 Jul 2025 07:20:43 +0000 Manifest this update: Thu 03 Jul 2025 07:20:42 +0000 Manifest next update: Thu 10 Jul 2025 07:20:42 +0000 Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: nPhO3O4rUqVqD8b2ZseyqxXU2x/Sh0aIveADbYJuJS0=) 2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Validity Not Before: Jul 3 07:20:42 2025 GMT Not After : Jul 10 07:20:42 2025 GMT Subject: CN=68662f4b-5329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:92:4e:0c:30:b8:04:f2:a1:43:00:02:37:40: 9f:4c:f6:34:19:fd:b3:db:5d:41:e5:4e:4d:42:68: ac:eb:02:e0:6d:ca:0e:f6:db:31:5d:65:40:68:13: 77:35:74:4a:a1:a5:90:f3:00:70:12:d2:02:ed:6a: 26:ed:52:54:69:95:a5:11:88:1f:15:0d:93:a3:40: 99:61:49:f6:22:bf:84:22:fc:59:13:5b:43:f9:1c: f0:8f:e5:26:9a:08:59:66:44:c9:da:f8:85:65:75: b0:14:63:04:9b:05:8f:30:75:cf:92:0c:36:38:df: 23:f9:4c:c0:2a:dd:e5:24:02:96:db:e6:66:8f:77: 65:74:60:92:7f:56:82:13:33:ab:48:0e:8a:ba:3b: 6e:13:72:da:a8:c8:60:ba:d3:53:04:9b:84:96:d5: f7:ec:cc:e1:a0:de:88:aa:1c:60:2a:da:0f:0d:31: 24:53:39:64:e6:fb:63:5d:f6:04:0f:ea:04:ab:c3: ff:81:ba:e0:c4:04:95:e1:52:98:e9:5e:40:81:4c: 52:b5:3e:5e:12:de:cb:28:a6:d8:57:91:9c:65:f9: d9:43:62:cb:ae:78:74:79:cb:6d:7b:63:61:34:9c: 05:39:9f:e0:97:3f:28:10:e0:23:a9:36:cb:e7:d4: f1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DD:07:D1:E1:7E:5E:B1:04:83:02:CF:E1:E0:59:F7:ED:1D:EA:44 X509v3 Authority Key Identifier: keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8a:01:5a:46:f9:57:12:ad:c8:84:f9:2b:8c:34:fc:93:8e: 3f:92:98:8a:0c:37:f5:98:ad:9f:a7:c6:2d:a7:aa:f5:dc:00: fb:be:52:b2:08:fa:36:63:d2:20:51:46:61:39:2f:ca:d7:93: f8:f7:45:eb:8f:06:0d:df:b6:6a:15:be:67:a7:2d:88:74:69: c4:ec:9b:ea:55:ab:d7:76:84:ed:43:6e:7d:5c:d0:6b:6f:8a: e4:72:2a:b3:fb:fe:ab:40:73:a0:42:57:41:9b:af:f0:6b:95: b6:cc:a5:9d:75:87:c6:45:9f:e6:6a:85:6b:a6:48:1d:d9:d4: 69:97:df:58:e4:2f:0a:3b:61:ca:c0:52:46:db:95:e6:9c:ff: f6:42:c1:c6:4f:0d:17:67:9b:a8:1a:90:56:ca:0c:08:3f:da: 77:da:d8:de:99:22:2d:71:52:2c:a8:48:40:0e:6e:19:b7:d5: 4b:88:11:2e:89:e0:4c:1d:8a:f3:8e:72:20:a4:77:b4:fc:96: 13:a2:47:d2:73:6d:58:e8:27:cf:f6:f2:3a:8b:73:f7:35:01: 8e:1a:7b:07:24:69:52:15:53:84:80:97:3d:1f:10:41:6b:fe: d1:10:dc:af:48:5e:a7:4e:bc:7d:b4:5d:cd:10:de:9a:0e:2d: 1d:c9:93:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDEyNTExMC8GA1UEBRMoNkY3N0MxOUYxMUQzMkFBQUE0MkUyNjkxNkY3NDgyRUZC OEY5N0ExQzAeFw0yNTA3MDMwNzIwNDJaFw0yNTA3MTAwNzIwNDJaMBgxFjAUBgNV BAMTDTY4NjYyZjRiLTUzMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpkk4MMLgE8qFDAAI3QJ9M9jQZ/bPbXUHlTk1CaKzrAuBtyg722zFdZUBoE3c1 dEqhpZDzAHAS0gLtaibtUlRplaURiB8VDZOjQJlhSfYiv4Qi/FkTW0P5HPCP5Saa CFlmRMna+IVldbAUYwSbBY8wdc+SDDY43yP5TMAq3eUkApbb5maPd2V0YJJ/VoIT M6tIDoq6O24TctqoyGC601MEm4SW1ffszOGg3oiqHGAq2g8NMSRTOWTm+2Nd9gQP 6gSrw/+BuuDEBJXhUpjpXkCBTFK1Pl4S3ssopthXkZxl+dlDYsuueHR5y217Y2E0 nAU5n+CXPygQ4COpNsvn1PGZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdN0H0eF+ XrEEgwLP4eBZ9+0d6kQwHwYDVR0jBBgwFoAUb3fBnxHTKqqkLiaRb3SC77j5ehww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMTI1L0Y1Rjc4NzhBQ0Mx MDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fxa0xpYVJiM1NDNzdqNWVo dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjNmQm54SFRLcXFrTGlhUmIzU0M3N2o1ZWh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MTI1L0Y1Rjc4NzhBQ0MxMDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fx a0xpYVJiM1NDNzdqNWVody5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSKAVpG+VcSrciE+SuMNPyTjj+SmIoMN/WYrZ+nxi2nqvXcAPu+UrII +jZj0iBRRmE5L8rXk/j3ReuPBg3ftmoVvmenLYh0acTsm+pVq9d2hO1Dbn1c0Gtv iuRyKrP7/qtAc6BCV0Gbr/BrlbbMpZ11h8ZFn+ZqhWumSB3Z1GmX31jkLwo7YcrA Ukbbleac//ZCwcZPDRdnm6gakFbKDAg/2nfa2N6ZIi1xUiyoSEAObhm31UuIES6J 4EwdivOOciCkd7T8lhOiR9JzbVjoJ8/28jqLc/c1AY4aewckaVIVU4SAlz0fEEFr /tEQ3K9IXqdOvH20Xc0Q3poOLR3JkwY= -----END CERTIFICATE-----Generated at Thu Jul 3 23:05:55 2025 by rpki-client