$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: nvE21KfJPip02tyqoKXuXyKZjs/TOUcAhG4cXtuYjfs= Subject key identifier: 02:29:86:18:B3:8F:8E:BA:15:EC:42:97:4B:59:96:8E:3B:F6:41:F5 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2CC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2CAB Signing time: Mon 30 Jun 2025 15:33:13 +0000 Manifest this update: Mon 30 Jun 2025 15:33:12 +0000 Manifest next update: Mon 07 Jul 2025 15:33:12 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: aB64SWFauawbUzit8LooiggP6A9XT5VTGFG1mt4nl7Q=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: skjzRKV2yiK6mRZi2jO6tjX3v0zfq/yBAWOKemHERmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11456 (0x2cc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jun 30 15:33:12 2025 GMT Not After : Jul 7 15:33:12 2025 GMT Subject: CN=6862ae39-fa2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:1c:fe:b8:2d:92:6e:86:67:32:4a:97:71: 06:c5:b4:c8:fa:f6:53:08:57:6e:5e:34:55:a8:59: 7c:df:d3:1e:ed:c9:d2:88:01:07:26:d4:75:ba:6c: bc:71:66:a4:b7:72:a5:2b:10:51:c5:09:62:cc:a6: cc:a4:35:f2:0f:8a:0c:4e:d6:3c:e8:2b:e9:35:6c: d4:66:fe:59:6c:c2:e3:6e:ad:1e:53:c6:ec:e6:3a: 9b:db:cd:51:da:f6:5d:1e:32:5b:d7:9e:3d:a0:e8: 1b:65:67:1f:ec:2e:a9:9d:da:cc:69:07:24:c2:2a: e3:0e:66:0b:f6:d0:73:26:80:13:46:12:42:fe:ba: a7:a1:e6:13:46:70:92:1d:92:51:03:82:b2:5b:43: aa:23:13:34:0e:78:ec:6c:e3:92:70:8a:66:ad:a4: ba:7e:ec:27:8f:ff:22:27:5c:d5:e3:ed:4e:42:8b: a9:a6:d1:66:66:49:95:e6:42:ea:ff:8e:1a:65:d9: 48:10:b7:fa:70:75:fd:e1:0f:67:ab:b9:3a:5f:a5: 3f:02:3a:2d:59:ff:50:16:f2:5e:ec:23:cd:7c:c4: ce:7c:05:4d:20:dd:c8:67:d1:20:81:7c:e1:f1:d6: fa:8d:d3:28:a3:e4:a0:f1:13:d6:39:3a:6a:8e:35: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:29:86:18:B3:8F:8E:BA:15:EC:42:97:4B:59:96:8E:3B:F6:41:F5 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d3:79:96:1d:0b:e9:e5:e9:6b:2a:d4:8c:87:9a:a1:ca:0d: e8:3b:04:d8:05:4b:8c:80:d4:21:d5:9e:0a:94:d7:ae:c5:50: e7:75:9b:0a:01:4a:9c:e7:01:59:19:77:dc:ae:62:71:ba:8e: 47:2f:92:7c:9b:b4:6f:d6:d1:89:04:59:38:b4:75:62:72:28: 5c:55:c6:1a:e7:f9:b5:4a:75:01:9b:da:ae:df:16:96:34:34: 95:ee:29:f3:5f:86:6d:0d:9e:4c:f0:52:1c:59:2b:d7:12:42: 64:b8:62:1f:1b:3a:fd:84:22:42:22:0e:94:22:0f:1f:3f:ef: 1a:a3:aa:78:47:74:54:b6:9e:2d:f3:b2:24:2f:88:75:b0:27: 23:f4:1e:71:f1:6c:fb:96:b5:dc:9b:9f:ab:48:95:ec:6d:28: b3:d3:43:28:39:42:6c:22:8f:a0:be:f3:0f:bd:52:df:f7:d3: d5:7c:b0:42:df:87:9d:36:37:d2:75:11:a1:8f:ca:b4:c1:0c: 4e:16:de:7c:dc:39:fa:54:e5:c5:8a:19:87:b7:63:bf:7d:fd: 28:ef:f5:66:82:f3:26:f9:f8:13:f6:7e:09:d7:33:23:b5:18: 31:00:f7:5d:60:30:84:fa:67:e5:b5:88:7c:80:43:1d:d0:c7: 0a:29:5e:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUwNjMwMTUzMzEyWhcNMjUwNzA3MTUzMzEyWjAYMRYwFAYD VQQDEw02ODYyYWUzOS1mYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvoc/rgtkm6GZzJKl3EGxbTI+vZTCFduXjRVqFl839Me7cnSiAEHJtR1umy8 cWakt3KlKxBRxQlizKbMpDXyD4oMTtY86CvpNWzUZv5ZbMLjbq0eU8bs5jqb281R 2vZdHjJb1549oOgbZWcf7C6pndrMaQckwirjDmYL9tBzJoATRhJC/rqnoeYTRnCS HZJRA4KyW0OqIxM0DnjsbOOScIpmraS6fuwnj/8iJ1zV4+1OQoupptFmZkmV5kLq /44aZdlIELf6cHX94Q9nq7k6X6U/AjotWf9QFvJe7CPNfMTOfAVNIN3IZ9EggXzh 8db6jdMoo+Sg8RPWOTpqjjVPmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIphhiz j466FexCl0tZlo479kH1MB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN03mWHQvp5elrKtSMh5qhyg3oOwTYBUuMgNQh1Z4KlNeuxVDndZsK AUqc5wFZGXfcrmJxuo5HL5J8m7Rv1tGJBFk4tHVicihcVcYa5/m1SnUBm9qu3xaW NDSV7inzX4ZtDZ5M8FIcWSvXEkJkuGIfGzr9hCJCIg6UIg8fP+8ao6p4R3RUtp4t 87IkL4h1sCcj9B5x8Wz7lrXcm5+rSJXsbSiz00MoOUJsIo+gvvMPvVLf99PVfLBC 34edNjfSdRGhj8q0wQxOFt583Dn6VOXFihmHt2O/ff0o7/VmgvMm+fgT9n4J1zMj tRgxAPddYDCE+mfltYh8gEMd0McKKV7I -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:14 2025 by rpki-client