$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: m0w3Mje626jW33bow+nvRfBEGvKwpBYOBv2rEbmevcI= Subject key identifier: E1:25:5D:81:70:83:8D:88:86:7D:3E:A7:A7:BF:03:00:07:44:BA:79 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0939 Signing time: Wed 02 Jul 2025 20:29:16 +0000 Manifest this update: Wed 02 Jul 2025 20:29:15 +0000 Manifest next update: Wed 09 Jul 2025 20:29:15 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: Z8kMEWlyOjp63gOP4xtDl8G9O6fD5f6y3nqfy9lGj+s=) 2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: bw4sMGnKDiftNLfRmiZR5SdnMpNduWFQjTQlPL6jZYY=) 3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: FPAklaM71rdV3Mf7CFthJcOnotN1vw1BtN7p9xcPR+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Jul 2 20:29:15 2025 GMT Not After : Jul 9 20:29:15 2025 GMT Subject: CN=6865969b-a76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fc:67:21:38:85:fe:cd:ef:68:e3:b2:fa:9a: 88:96:9e:5c:82:10:bf:cd:61:8d:5c:7e:da:b7:16: 4b:2c:c4:71:74:82:48:fa:81:dd:c9:59:d1:a1:d2: 4e:f7:cc:00:f8:49:bf:24:9f:9d:4f:29:f2:ec:e4: 18:e6:9b:d1:a0:5f:ee:6d:7f:3f:4d:89:87:5f:cb: 36:c4:92:32:93:76:ff:7b:6a:2e:5f:bb:6f:70:8d: 64:65:69:a7:ea:45:74:84:56:84:55:70:7d:ba:0f: da:7c:4d:fe:da:21:a2:3f:b4:fb:66:b6:45:3a:1e: 78:f4:6d:05:31:40:66:89:40:f7:17:a3:fb:82:4f: 20:d5:3e:e9:9c:16:7c:94:e1:13:62:4c:51:02:a3: bb:43:d0:f4:4b:5c:65:45:f8:bb:fe:3c:33:b8:d3: d2:15:8c:4b:c3:8b:fb:e8:d9:47:05:ba:de:48:e5: 8c:bb:45:35:9b:47:33:2d:3a:30:61:78:4a:4e:44: c4:4e:70:6d:c1:3a:7b:df:b8:d8:2f:bc:98:96:47: 79:b9:af:c9:33:71:58:58:59:8b:54:7d:d7:b1:08: 6a:68:f7:19:45:03:bf:74:27:16:30:21:94:95:53: 3b:5f:86:fc:6f:2b:f2:39:41:d7:82:3d:58:1b:cd: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:25:5D:81:70:83:8D:88:86:7D:3E:A7:A7:BF:03:00:07:44:BA:79 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ac:f8:19:3e:27:23:03:c9:f7:7c:a5:52:14:46:ee:06:17: 01:67:71:7d:a6:b3:c4:d6:da:cc:bd:5e:dc:c5:f3:58:a5:7f: 63:15:8c:4c:50:45:a8:f9:e8:a7:85:64:34:bd:b3:16:db:59: 91:e3:72:30:27:90:0d:e1:37:ec:57:05:84:ae:55:fe:ba:be: 21:bf:54:68:bf:ef:d1:d1:a1:d4:03:45:5d:41:0f:da:fd:4f: 3c:81:70:13:e2:1e:88:c7:e6:ba:a1:5c:60:1d:f2:a7:62:6c: 57:e2:8a:93:bf:7f:d5:7f:5e:8c:e0:f4:95:7e:23:be:4c:b0: 62:4b:8e:f1:d8:60:6b:f6:6c:c9:4b:ed:7d:41:53:41:9f:02: b8:ef:25:29:e7:fd:a7:95:94:c3:86:ea:94:f0:53:6a:7d:45: cd:d0:90:a3:bb:53:0a:75:1c:c6:db:fa:36:a3:9f:b7:a0:bc: 27:81:18:90:07:0e:b0:23:30:7f:b5:59:26:49:df:d3:d0:cb: 44:62:09:51:32:e7:e0:48:56:c4:61:3a:83:8a:b0:85:95:2d: 74:5c:b2:ef:99:f7:a8:cb:f7:e7:5b:41:32:0a:4f:9c:55:ff: ea:47:22:fd:5b:60:f4:0b:40:e3:2c:aa:c6:3f:69:f5:6a:43: 3b:86:13:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwNzAyMjAyOTE1WhcNMjUwNzA5MjAyOTE1WjAYMRYwFAYD VQQDEw02ODY1OTY5Yi1hNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PxnITiF/s3vaOOy+pqIlp5cghC/zWGNXH7atxZLLMRxdIJI+oHdyVnRodJO 98wA+Em/JJ+dTyny7OQY5pvRoF/ubX8/TYmHX8s2xJIyk3b/e2ouX7tvcI1kZWmn 6kV0hFaEVXB9ug/afE3+2iGiP7T7ZrZFOh549G0FMUBmiUD3F6P7gk8g1T7pnBZ8 lOETYkxRAqO7Q9D0S1xlRfi7/jwzuNPSFYxLw4v76NlHBbreSOWMu0U1m0czLTow YXhKTkTETnBtwTp737jYL7yYlkd5ua/JM3FYWFmLVH3XsQhqaPcZRQO/dCcWMCGU lVM7X4b8byvyOUHXgj1YG82RkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOElXYFw g42Ihn0+p6e/AwAHRLp5MB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChrPgZPicjA8n3fKVSFEbuBhcBZ3F9prPE1trMvV7cxfNYpX9jFYxM UEWo+einhWQ0vbMW21mR43IwJ5AN4TfsVwWErlX+ur4hv1Rov+/R0aHUA0VdQQ/a /U88gXAT4h6Ix+a6oVxgHfKnYmxX4oqTv3/Vf16M4PSVfiO+TLBiS47x2GBr9mzJ S+19QVNBnwK47yUp5/2nlZTDhuqU8FNqfUXN0JCju1MKdRzG2/o2o5+3oLwngRiQ Bw6wIzB/tVkmSd/T0MtEYglRMufgSFbEYTqDirCFlS10XLLvmfeoy/fnW0EyCk+c Vf/qRyL9W2D0C0DjLKrGP2n1akM7hhOz -----END CERTIFICATE-----Generated at Thu Jul 3 11:40:33 2025 by rpki-client