$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: 1TlqHfQbihvuJde1CJ3pel7w6Gc9kZI3cdjnXHgtlBs= Subject key identifier: ED:D3:2F:66:E1:C5:22:18:CA:34:54:32:C9:5F:FE:E8:3E:13:04:01 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 163C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 1626 Signing time: Sat 28 Jun 2025 16:37:22 +0000 Manifest this update: Sat 28 Jun 2025 16:37:21 +0000 Manifest next update: Sat 05 Jul 2025 16:37:21 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: REhXirXBODDn2QQAdKe54nw62rzTpgUj6GmDjR12/qA=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5692 (0x163c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Jun 28 16:37:21 2025 GMT Not After : Jul 5 16:37:21 2025 GMT Subject: CN=68601a42-6491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:bf:dc:4a:16:a1:e7:60:47:48:f4:ec:8c: 20:c7:49:df:8a:23:f2:8a:a0:9c:09:9c:51:39:aa: a9:a7:8f:81:e6:6b:25:dc:5c:55:9f:e5:a2:27:35: b2:bf:29:a9:c0:45:a9:f3:9f:24:74:75:36:47:f0: 01:e4:bd:25:98:e1:eb:8c:92:60:8a:c4:b4:e9:4b: 53:f8:44:71:10:0f:d8:96:4c:5c:b5:16:da:d5:8c: b2:2a:7a:e2:e9:69:90:df:95:ac:d3:40:e4:06:67: 03:7e:04:c6:db:ba:de:04:01:8c:4c:91:63:a6:2a: 75:76:4e:1f:ba:69:d7:5c:d7:86:6e:e1:3c:d7:bb: c0:d0:10:9c:4e:fc:c3:d8:12:b5:c2:a8:24:bb:c8: 0e:47:0a:3c:55:50:5f:93:e7:f0:45:57:d2:38:1d: 73:54:5c:32:f4:97:e4:d7:70:26:45:2f:e3:78:57: a4:57:07:69:f0:43:27:d2:07:21:02:a9:68:00:d4: 14:e9:f2:fb:3e:46:09:fb:07:78:f1:28:bc:50:50: 42:77:24:f7:39:16:fd:59:32:27:f5:dc:b5:75:f1: 37:fb:47:ff:1a:f3:53:bd:8b:e3:87:83:c4:74:59: 01:0f:b5:23:7d:81:55:64:85:d3:e2:e7:3f:88:61: 6f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D3:2F:66:E1:C5:22:18:CA:34:54:32:C9:5F:FE:E8:3E:13:04:01 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f2:8c:0b:7e:1c:7b:5e:a3:0c:65:39:b4:41:cf:0e:98:b8: 20:f8:a7:7a:f3:d1:36:88:43:ff:cc:02:df:05:a4:80:9a:2b: ad:4c:c3:64:30:90:9e:f5:c0:02:77:40:e0:a9:6d:41:49:cd: c5:09:fd:fc:67:13:55:bc:d1:b7:22:43:37:f5:43:f1:a6:ab: ae:f2:1c:c4:9c:13:cf:94:91:b1:35:aa:c2:ce:d3:75:10:f0: fa:90:c4:85:fb:2d:c4:42:78:d4:7c:58:b2:61:30:41:3c:3f: 25:70:4c:e4:0f:a9:69:0e:35:0e:46:2c:ab:c0:22:38:12:36: 8e:81:6d:5e:1d:5e:a5:1b:28:fc:80:5a:ce:5e:00:17:08:85: 5f:b6:91:7f:4e:ba:7e:9d:1b:54:a9:22:48:7f:ce:44:6b:c0: 75:9d:7f:0f:56:bb:f3:1f:bb:4e:ee:f3:a7:56:f5:dd:ce:bb: 49:d1:db:81:1a:19:b4:77:50:5e:9c:00:07:37:49:0f:a2:5a: 4b:07:fe:59:01:c4:79:5d:89:49:5f:35:73:0d:4d:52:04:fb: d6:c1:35:c0:a6:a7:c1:5c:a2:0a:08:7b:fc:b1:ce:ba:00:53: 7d:6a:34:10:65:6b:82:69:f5:46:33:00:6d:9c:b9:d1:a5:20: af:78:00:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUwNjI4MTYzNzIxWhcNMjUwNzA1MTYzNzIxWjAYMRYwFAYD VQQDEw02ODYwMWE0Mi02NDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/q/3EoWoedgR0j07Iwgx0nfiiPyiqCcCZxROaqpp4+B5msl3FxVn+WiJzWy vympwEWp858kdHU2R/AB5L0lmOHrjJJgisS06UtT+ERxEA/YlkxctRba1YyyKnri 6WmQ35Ws00DkBmcDfgTG27reBAGMTJFjpip1dk4fumnXXNeGbuE817vA0BCcTvzD 2BK1wqgku8gORwo8VVBfk+fwRVfSOB1zVFwy9Jfk13AmRS/jeFekVwdp8EMn0gch AqloANQU6fL7PkYJ+wd48Si8UFBCdyT3ORb9WTIn9dy1dfE3+0f/GvNTvYvjh4PE dFkBD7UjfYFVZIXT4uc/iGFvnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3TL2bh xSIYyjRUMslf/ug+EwQBMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe8owLfhx7XqMMZTm0Qc8OmLgg+Kd689E2iEP/zALfBaSAmiutTMNk MJCe9cACd0DgqW1BSc3FCf38ZxNVvNG3IkM39UPxpquu8hzEnBPPlJGxNarCztN1 EPD6kMSF+y3EQnjUfFiyYTBBPD8lcEzkD6lpDjUORiyrwCI4EjaOgW1eHV6lGyj8 gFrOXgAXCIVftpF/Trp+nRtUqSJIf85Ea8B1nX8PVrvzH7tO7vOnVvXdzrtJ0duB Ghm0d1BenAAHN0kPolpLB/5ZAcR5XYlJXzVzDU1SBPvWwTXApqfBXKIKCHv8sc66 AFN9ajQQZWuCafVGMwBtnLnRpSCveAA4 -----END CERTIFICATE-----Generated at Sun Jun 29 18:58:57 2025 by rpki-client