$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: +kkMWywl3saZipxK32nCQDj1dEt3APfI/9R1hd25f6o= Subject key identifier: 8B:4C:E9:02:C5:F2:9E:18:A8:7F:BC:E0:89:F0:9D:BB:27:AF:AD:BB Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 079E Signing time: Mon 30 Jun 2025 21:31:20 +0000 Manifest this update: Mon 30 Jun 2025 21:31:20 +0000 Manifest next update: Mon 07 Jul 2025 21:31:20 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: BfssfxRvqT7YlekfuNcMaHR5AQ9WrQ9p5RBQywtrddM=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Jun 30 21:31:20 2025 GMT Not After : Jul 7 21:31:20 2025 GMT Subject: CN=68630228-53bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:8a:42:8e:2b:ba:93:34:13:03:0c:06:5c: 5f:73:23:ae:65:ea:20:bc:ce:0a:cd:8d:96:fc:17: 41:60:e0:33:6c:52:b9:87:09:de:16:f3:fd:c3:3b: f3:ac:1f:db:6a:08:80:84:b4:d2:6c:23:c1:fd:53: 71:c7:e9:72:a7:c8:0b:23:ab:f4:24:d0:a7:90:f1: 61:07:bc:2a:64:8e:d2:c3:61:94:13:41:5f:e3:b0: 49:24:fa:2e:b3:f6:e3:ae:d9:5e:38:56:95:ee:54: 19:7d:7c:eb:e0:e4:56:ed:4c:a8:84:bb:ea:cc:87: 47:39:03:fe:1a:9b:09:f5:1d:ab:3e:d1:d3:87:d0: 5d:ae:79:3c:fb:8f:64:a2:f7:57:f2:a1:73:b2:7e: 48:5d:38:cb:c8:30:18:20:db:7a:82:96:39:4b:a1: 0e:2a:57:79:40:2e:c6:55:23:4c:6b:10:5e:79:94: 4b:6c:08:15:a9:ef:24:99:7e:c0:87:d6:0d:a0:fd: ea:f5:33:eb:4f:09:02:a9:f8:4f:cf:60:25:6b:37: 31:e8:32:4c:47:e4:93:e9:ff:0e:ff:8c:53:6b:89: 25:fc:0a:39:18:22:32:59:ab:6e:ab:a2:39:b7:2c: 7a:0b:f5:81:ba:e9:40:7f:ab:92:4c:5f:6c:33:91: 7b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4C:E9:02:C5:F2:9E:18:A8:7F:BC:E0:89:F0:9D:BB:27:AF:AD:BB X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:5b:d0:a5:76:55:c8:38:4d:4a:14:9a:0d:88:13:92:27:75: 8a:9a:bb:01:51:81:92:ff:d4:05:4e:3c:84:3a:56:a1:d2:17: e2:54:a7:b9:76:66:21:33:0d:f2:21:38:b6:28:0e:d5:49:a2: c4:31:77:d4:17:93:c5:f6:3f:40:47:af:79:80:4c:6d:ee:9d: 69:0c:e5:f3:49:1d:e7:ff:4f:3d:02:37:5c:b7:b9:52:3b:ef: 86:30:53:70:cf:07:9f:28:a3:8c:e4:2a:59:d2:47:c6:df:f0: 74:6d:b7:d5:e8:01:ab:f4:6f:5a:b0:cc:a6:f8:d2:32:d1:8e: 0f:42:0f:b0:b0:9b:9a:81:7b:74:2c:37:58:41:67:ea:bc:ab: 51:64:87:ac:01:54:ea:49:99:ee:e3:79:ff:9d:1b:66:88:66: d0:57:14:90:b4:11:38:c2:89:e7:87:40:2d:18:34:0c:9a:66: 7b:7f:44:4f:f6:06:28:08:78:a8:61:b6:49:8a:fd:63:ff:3a: ce:01:53:89:6d:ea:3f:cc:16:7f:6a:38:b0:39:79:c5:ca:64: 78:f2:13:2e:1e:11:9f:c2:55:9d:56:b3:cd:12:06:c9:76:e1: cb:50:b7:2e:0a:71:a8:4c:2c:9c:f0:2e:20:c6:c3:c1:44:33: 78:bc:4a:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUwNjMwMjEzMTIwWhcNMjUwNzA3MjEzMTIwWjAYMRYwFAYD VQQDEw02ODYzMDIyOC01M2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEWKQo4rupM0EwMMBlxfcyOuZeogvM4KzY2W/BdBYOAzbFK5hwneFvP9wzvz rB/bagiAhLTSbCPB/VNxx+lyp8gLI6v0JNCnkPFhB7wqZI7Sw2GUE0Ff47BJJPou s/bjrtleOFaV7lQZfXzr4ORW7UyohLvqzIdHOQP+GpsJ9R2rPtHTh9Bdrnk8+49k ovdX8qFzsn5IXTjLyDAYINt6gpY5S6EOKld5QC7GVSNMaxBeeZRLbAgVqe8kmX7A h9YNoP3q9TPrTwkCqfhPz2Alazcx6DJMR+ST6f8O/4xTa4kl/Ao5GCIyWatuq6I5 tyx6C/WBuulAf6uSTF9sM5F7CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItM6QLF 8p4YqH+84Inwnbsnr627MB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTW9CldlXIOE1KFJoNiBOSJ3WKmrsBUYGS/9QFTjyEOlah0hfiVKe5 dmYhMw3yITi2KA7VSaLEMXfUF5PF9j9AR695gExt7p1pDOXzSR3n/089Ajdct7lS O++GMFNwzwefKKOM5CpZ0kfG3/B0bbfV6AGr9G9asMym+NIy0Y4PQg+wsJuagXt0 LDdYQWfqvKtRZIesAVTqSZnu43n/nRtmiGbQVxSQtBE4wonnh0AtGDQMmmZ7f0RP 9gYoCHioYbZJiv1j/zrOAVOJbeo/zBZ/ajiwOXnFymR48hMuHhGfwlWdVrPNEgbJ duHLULcuCnGoTCyc8C4gxsPBRDN4vEqB -----END CERTIFICATE-----Generated at Wed Jul 2 20:23:37 2025 by rpki-client