$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: W6uF2ilgwRHCCedpzULxkTpmeL/6Uzv/m+GEU7EQ8o4= Subject key identifier: 32:A9:B5:C0:47:5A:9D:07:FE:43:E1:F3:85:32:B6:43:A2:AE:40:25 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 035C Signing time: Tue 01 Jul 2025 01:34:57 +0000 Manifest this update: Tue 01 Jul 2025 01:34:56 +0000 Manifest next update: Tue 08 Jul 2025 01:34:56 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: OwK06cwil6ySRpXK7eLAHss9nWwK/NGEKfx+ohFCjQY=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Jul 1 01:34:56 2025 GMT Not After : Jul 8 01:34:56 2025 GMT Subject: CN=68633b41-a41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:0e:b7:64:0e:68:8b:5b:b2:bd:ba:57:dc: 80:ed:79:52:b0:b4:53:ed:06:29:90:19:e1:e7:95: db:60:ad:ad:77:08:34:90:e2:92:50:42:5e:59:38: c5:d6:20:38:6b:c8:81:9a:5d:9f:c3:43:0a:3c:4c: e3:56:9a:2c:27:f5:b4:ef:d3:00:66:ec:55:81:d8: ed:73:e1:4c:a7:7a:a7:05:b1:e9:c4:70:7e:ee:11: 47:70:31:6d:02:b7:5f:c8:16:46:b7:95:f0:c5:8b: fe:92:ea:c4:bb:5f:f0:db:d1:5f:9b:d6:06:7a:d3: ea:92:9d:27:df:da:55:51:8f:a0:83:4b:8f:64:c8: 71:d2:da:73:c1:20:96:88:a8:c1:58:71:f5:0a:ba: 8b:2a:58:24:06:b1:0e:13:c6:fb:26:dd:0e:db:17: 15:c5:c4:81:3f:65:f8:dc:2d:bc:65:d4:fb:69:07: 9d:da:39:42:95:70:e2:73:ed:fa:5e:88:a5:8f:e1: 0b:50:b0:e5:a6:af:95:c7:e9:77:af:cd:e6:a4:4d: 62:75:d7:80:bb:3e:f6:d3:6b:01:d9:ac:d5:61:5f: 03:41:d3:2f:18:99:59:b5:83:aa:41:06:e2:c9:60: a4:b3:e2:d2:33:65:79:82:9e:cb:df:17:af:04:0b: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:B5:C0:47:5A:9D:07:FE:43:E1:F3:85:32:B6:43:A2:AE:40:25 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:08:a6:1b:42:9d:6b:85:93:6b:da:31:23:3a:75:fc:8f:36: f5:3a:65:d6:dd:d9:1e:b9:de:14:37:f1:d1:90:72:77:14:8e: f4:1f:65:45:24:02:5c:4b:4f:88:86:93:d6:6e:a8:1b:15:4d: 46:db:67:f0:9b:86:49:b0:99:a8:94:40:8d:aa:45:a4:3c:d8: 66:5e:fd:48:47:03:79:f9:42:cf:1e:e4:1d:15:7b:9b:6a:6d: 0e:a8:6b:32:6b:86:10:ed:46:37:cb:c3:07:69:30:72:9a:be: c1:73:06:f1:47:c6:f3:33:f9:13:b9:fe:2c:24:99:d6:ee:96: 32:78:93:da:46:64:d6:05:ff:fb:77:67:1f:ae:09:8a:36:bb: 03:c9:91:d5:91:ee:26:e3:06:79:2c:89:51:5e:11:53:f8:15: ad:2b:f8:15:79:14:ec:5a:8a:58:47:06:0a:55:ff:90:f5:a6: ec:92:22:f3:f5:1b:12:be:4d:de:90:04:c9:e1:ad:86:77:a9: 70:88:fc:71:a3:7c:aa:08:27:1a:e4:bb:72:46:5a:dc:5a:07: 27:ee:8a:7a:44:a1:56:8c:1e:a8:f5:2e:f5:0e:a1:ea:17:a3: b1:47:87:e6:16:e6:ea:eb:eb:ae:47:84:08:4d:af:88:d8:55: 0e:d4:d0:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjUwNzAxMDEzNDU2WhcNMjUwNzA4MDEzNDU2WjAYMRYwFAYD VQQDEw02ODYzM2I0MS1hNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wIOt2QOaItbsr26V9yA7XlSsLRT7QYpkBnh55XbYK2tdwg0kOKSUEJeWTjF 1iA4a8iBml2fw0MKPEzjVposJ/W079MAZuxVgdjtc+FMp3qnBbHpxHB+7hFHcDFt ArdfyBZGt5XwxYv+kurEu1/w29Ffm9YGetPqkp0n39pVUY+gg0uPZMhx0tpzwSCW iKjBWHH1CrqLKlgkBrEOE8b7Jt0O2xcVxcSBP2X43C28ZdT7aQed2jlClXDic+36 Xoilj+ELULDlpq+Vx+l3r83mpE1iddeAuz7202sB2azVYV8DQdMvGJlZtYOqQQbi yWCks+LSM2V5gp7L3xevBAsxOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKptcBH Wp0H/kPh84UytkOirkAlMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPCKYbQp1rhZNr2jEjOnX8jzb1OmXW3dkeud4UN/HRkHJ3FI70H2VF JAJcS0+IhpPWbqgbFU1G22fwm4ZJsJmolECNqkWkPNhmXv1IRwN5+ULPHuQdFXub am0OqGsya4YQ7UY3y8MHaTBymr7BcwbxR8bzM/kTuf4sJJnW7pYyeJPaRmTWBf/7 d2cfrgmKNrsDyZHVke4m4wZ5LIlRXhFT+BWtK/gVeRTsWopYRwYKVf+Q9abskiLz 9RsSvk3ekATJ4a2Gd6lwiPxxo3yqCCca5LtyRlrcWgcn7op6RKFWjB6o9S71DqHq F6OxR4fmFubq6+uuR4QITa+I2FUO1NBo -----END CERTIFICATE-----Generated at Thu Jul 3 00:32:04 2025 by rpki-client