$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: NP42fn3Aqg1m6lKzttHnmFH01Ua75mpAkO77M4iq5R0= Subject key identifier: D5:88:E5:DF:40:87:8C:3B:8D:5F:FE:77:2D:87:7E:BE:3B:58:1C:8D Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: EF Signing time: Thu 03 Jul 2025 05:26:58 +0000 Manifest this update: Thu 03 Jul 2025 05:26:57 +0000 Manifest next update: Thu 10 Jul 2025 05:26:57 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: FllmEGDzY2kkhtWNSwkLC1KYg7wXWOhZ8W0pBoML1pQ=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: Jul 3 05:26:57 2025 GMT Not After : Jul 10 05:26:57 2025 GMT Subject: CN=686614a2-597d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:f1:69:d7:0b:7f:69:e6:a2:0a:ac:23:7b: a8:be:db:34:27:6e:66:6b:97:98:1f:04:f0:c5:58: d6:7d:e8:8f:dd:26:96:81:42:1b:7a:97:00:2f:e0: a8:1a:a1:32:7b:23:30:d2:cd:c3:eb:88:ce:8e:05: 8e:e1:ec:f1:42:42:2c:91:9e:6e:38:38:84:40:07: 97:65:e1:b6:72:3c:7d:f8:e1:79:ce:50:f3:55:01: 48:c8:86:51:a6:0f:b2:8f:fc:b1:03:bf:86:54:f0: 6e:42:12:30:2c:62:98:65:63:cc:9e:76:7d:5a:e3: 5f:f0:f9:7d:5d:3a:a2:65:a4:08:f5:4d:75:f3:62: 0c:53:2c:7e:87:9c:21:90:8d:bb:3d:b7:f7:fe:5d: 41:c1:23:57:73:4c:2b:e7:ae:25:80:30:95:29:35: 47:ca:46:18:2b:c2:04:78:8e:8e:73:83:94:78:62: 7c:45:88:8c:c4:81:2e:41:b6:81:61:81:f2:ce:cc: ad:e8:11:d9:f3:33:58:f2:fe:31:e5:ea:19:cf:0a: a7:ec:7f:ae:4b:14:d3:77:24:c8:fe:57:6d:cf:bc: 83:c6:60:d7:c2:4d:4f:3b:da:43:8a:28:4d:25:95: 46:48:2a:0e:d7:6f:58:dd:3e:3a:ff:07:a5:87:a0: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:E5:DF:40:87:8C:3B:8D:5F:FE:77:2D:87:7E:BE:3B:58:1C:8D X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:2e:9a:a6:a5:86:99:d4:1d:19:27:9b:7f:04:96:66:da:4c: 5c:1b:f3:35:27:aa:97:d1:bb:0f:73:8f:85:6b:5d:e8:96:60: cd:37:94:e8:3c:96:eb:00:3a:b9:5c:7c:95:27:2e:e7:34:b0: 24:68:34:78:3f:32:0c:26:d1:b8:61:84:27:06:3a:f9:f1:ac: b6:d8:31:0b:09:6b:23:67:2c:f9:83:6c:bf:7f:00:eb:f1:71: 38:66:f5:22:6b:87:ba:cc:9a:1a:f2:53:02:57:d8:6e:15:22: 2d:c4:93:7a:79:b5:06:82:4b:d9:2f:fc:02:b9:6d:84:0e:fd: ae:97:72:e8:7b:51:cb:9b:de:5d:26:3c:e4:7b:46:e0:65:81: d7:36:96:be:4c:7c:90:62:eb:e7:ea:db:bb:93:49:7d:97:3a: f7:76:ed:f8:94:5c:f6:3a:ea:1c:d1:a5:49:be:c9:1c:af:db: b4:09:c9:d1:6f:ea:ac:83:12:af:43:68:96:09:ab:70:6f:1a: d4:95:56:49:5b:34:b4:86:6a:53:de:ca:1d:3d:6c:e3:85:74: 8f:26:20:e8:77:d4:0a:45:41:1b:d4:a1:95:50:cd:d0:68:fe: 62:f9:66:47:3c:48:d2:81:f8:d2:e3:51:4a:8b:f1:31:82:a9: 93:90:b7:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjUwNzAzMDUyNjU3WhcNMjUwNzEwMDUyNjU3WjAYMRYwFAYD VQQDEw02ODY2MTRhMi01OTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MTxadcLf2nmogqsI3uovts0J25ma5eYHwTwxVjWfeiP3SaWgUIbepcAL+Co GqEyeyMw0s3D64jOjgWO4ezxQkIskZ5uODiEQAeXZeG2cjx9+OF5zlDzVQFIyIZR pg+yj/yxA7+GVPBuQhIwLGKYZWPMnnZ9WuNf8Pl9XTqiZaQI9U1182IMUyx+h5wh kI27Pbf3/l1BwSNXc0wr564lgDCVKTVHykYYK8IEeI6Oc4OUeGJ8RYiMxIEuQbaB YYHyzsyt6BHZ8zNY8v4x5eoZzwqn7H+uSxTTdyTI/ldtz7yDxmDXwk1PO9pDiihN JZVGSCoO129Y3T46/welh6C2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWI5d9A h4w7jV/+dy2Hfr47WByNMB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApLpqmpYaZ1B0ZJ5t/BJZm2kxcG/M1J6qX0bsPc4+Fa13olmDNN5To PJbrADq5XHyVJy7nNLAkaDR4PzIMJtG4YYQnBjr58ay22DELCWsjZyz5g2y/fwDr 8XE4ZvUia4e6zJoa8lMCV9huFSItxJN6ebUGgkvZL/wCuW2EDv2ul3Loe1HLm95d Jjzke0bgZYHXNpa+THyQYuvn6tu7k0l9lzr3du34lFz2Ouoc0aVJvskcr9u0CcnR b+qsgxKvQ2iWCatwbxrUlVZJWzS0hmpT3sodPWzjhXSPJiDod9QKRUEb1KGVUM3Q aP5i+WZHPEjSgfjS41FKi/ExgqmTkLda -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:20 2025 by rpki-client