$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json) Hash identifier: /3oZaFmuLGsFyBZXMdrL30QiMOs21ge9FbY+sgjEwOY= Subject key identifier: F5:C6:63:67:2F:94:EB:0F:31:C8:FC:23:ED:43:46:30:19:F9:82:46 Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft Manifest number: 0684 Signing time: Wed 02 Jul 2025 22:41:31 +0000 Manifest this update: Wed 02 Jul 2025 22:41:30 +0000 Manifest next update: Wed 09 Jul 2025 22:41:30 +0000 Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: 0rkeurtqSx0MYBkVipXj+dNNQa6wS44OH+RfoDsZCJg=) 2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: FOS9hpfhSMJ/5W+e+NFkrecUhC86TAOPH0uxsIPYP4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Validity Not Before: Jul 2 22:41:30 2025 GMT Not After : Jul 9 22:41:30 2025 GMT Subject: CN=6865b59b-9a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:58:f1:e9:3b:3f:1c:4e:5a:92:01:a8:db: 66:56:f5:b4:ce:e7:0f:b2:74:3f:d5:3b:ee:9f:ad: f7:e9:01:d9:7a:9c:95:89:b4:88:d6:7a:87:ff:c4: 6a:7e:4f:48:b3:81:a9:a9:a7:17:9c:ef:51:70:a8: c1:2b:3f:f6:8f:34:48:c2:f7:16:af:19:0e:e9:31: c2:b0:7a:00:61:35:12:6e:57:5d:3f:9a:d3:5e:83: d2:8b:27:a0:39:dc:e3:6c:94:e5:54:84:6a:f5:6b: c7:81:d7:f9:79:0b:7b:ab:16:13:7e:b8:79:1c:25: e4:70:ab:ec:f8:49:c0:68:5d:62:d6:63:21:d6:2c: 3b:44:75:a8:0f:ad:96:9a:31:aa:5d:7c:9e:2a:b5: a4:91:09:d1:e9:a3:e8:19:73:d9:c1:52:eb:ad:68: ed:ed:e2:9c:ef:3d:bd:cf:b1:f5:8e:c0:59:51:bc: 30:0e:40:2c:f6:ac:da:82:96:ba:ee:10:f8:26:95: 0e:4d:7b:26:ae:46:6d:02:7a:52:6d:8d:f8:60:60: 97:ea:bb:3a:d6:2a:64:5e:7e:52:1f:5c:bd:1f:3a: 31:27:db:1b:4d:24:03:0e:36:c6:5d:ab:65:65:f5: 34:83:ea:62:3b:da:6a:ba:c2:c9:e0:e3:93:a5:75: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C6:63:67:2F:94:EB:0F:31:C8:FC:23:ED:43:46:30:19:F9:82:46 X509v3 Authority Key Identifier: keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:04:49:56:4e:54:5c:a5:6b:80:57:4b:07:6c:e4:33:f0:84: 4b:e2:23:a7:37:17:84:7f:88:2f:8b:60:5a:cc:b4:51:04:44: ec:0c:a8:7c:ee:75:46:68:9d:2c:29:d8:12:62:49:6f:49:c4: fe:76:c4:2a:f5:61:40:26:65:64:59:44:05:48:1c:9c:c4:4e: 91:96:0b:fe:40:55:92:7c:a2:d0:7f:54:ab:cb:22:fb:49:09: 93:24:ec:51:a5:c2:30:b2:5d:28:01:5e:6d:1c:31:1d:9d:ce: 6f:a2:a8:fb:4b:5a:da:a7:e0:b6:3b:73:af:2e:65:58:75:92: 27:0f:81:da:bd:c3:03:58:c3:f1:72:dc:eb:c1:9a:8a:70:16: 5c:ed:05:fb:2c:55:d2:1c:8b:0d:71:2c:da:16:05:1c:6b:3a: e8:a1:e2:ac:9f:aa:6c:ab:dd:89:07:e5:63:2b:f7:0b:20:40: 5c:df:8d:0d:d8:25:d8:31:07:17:3d:88:07:b0:9f:5e:fa:39: 23:77:26:e5:e0:50:7e:5b:3b:4a:b2:f1:ff:23:70:ec:a4:86: ca:fa:f1:de:85:92:09:ac:ae:2c:86:35:fb:59:4a:94:d6:b7: f3:80:8d:4b:5a:93:45:e0:5d:1e:f2:50:31:8c:bd:5b:5b:8d: 35:3a:9e:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5 NTZBN0Q5RTMwHhcNMjUwNzAyMjI0MTMwWhcNMjUwNzA5MjI0MTMwWjAYMRYwFAYD VQQDEw02ODY1YjU5Yi05YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWlY8ek7PxxOWpIBqNtmVvW0zucPsnQ/1Tvun6336QHZepyVibSI1nqH/8Rq fk9Is4GpqacXnO9RcKjBKz/2jzRIwvcWrxkO6THCsHoAYTUSblddP5rTXoPSiyeg OdzjbJTlVIRq9WvHgdf5eQt7qxYTfrh5HCXkcKvs+EnAaF1i1mMh1iw7RHWoD62W mjGqXXyeKrWkkQnR6aPoGXPZwVLrrWjt7eKc7z29z7H1jsBZUbwwDkAs9qzagpa6 7hD4JpUOTXsmrkZtAnpSbY34YGCX6rs61ipkXn5SH1y9HzoxJ9sbTSQDDjbGXatl ZfU0g+piO9pqusLJ4OOTpXXuhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXGY2cv lOsPMcj8I+1DRjAZ+YJGMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1 dkg3UFo1czdMVHlWYW4yZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASBElWTlRcpWuAV0sHbOQz8IRL4iOnNxeEf4gvi2BazLRRBETsDKh8 7nVGaJ0sKdgSYklvScT+dsQq9WFAJmVkWUQFSBycxE6Rlgv+QFWSfKLQf1SryyL7 SQmTJOxRpcIwsl0oAV5tHDEdnc5voqj7S1rap+C2O3OvLmVYdZInD4HavcMDWMPx ctzrwZqKcBZc7QX7LFXSHIsNcSzaFgUcazrooeKsn6psq92JB+VjK/cLIEBc340N 2CXYMQcXPYgHsJ9e+jkjdybl4FB+WztKsvH/I3DspIbK+vHehZIJrK4shjX7WUqU 1rfzgI1LWpNF4F0e8lAxjL1bW401Op4z -----END CERTIFICATE-----Generated at Fri Jul 4 23:12:07 2025 by rpki-client