$ rpki-client -vvf rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft File: 3qB5KN5ChJYNLNXo50cChCYLMmY.mft (raw, json) Hash identifier: aevCVau7tDWhR8YBXrjKtOYD1k7pwo4287i9j5SXDFU= Subject key identifier: 68:5D:E2:E5:D9:64:CC:80:5B:25:45:F9:3A:D3:6B:1B:34:39:F3:36 Authority key identifier: DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66 Certificate issuer: /CN=A9171AD3/serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266 Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft Manifest number: 0890 Signing time: Wed 02 Jul 2025 20:52:36 +0000 Manifest this update: Wed 02 Jul 2025 20:52:35 +0000 Manifest next update: Wed 09 Jul 2025 20:52:35 +0000 Files and hashes: 1: 3qB5KN5ChJYNLNXo50cChCYLMmY.crl (hash: Dlr5rn5nLbUNTrPebocm1YyMY8lj8X6+YFP4Nrn/nIw=) 2: 186A811414CD11F0AB0B2C0CC4F9AE02.roa (hash: 9tc8Ga8JfnoWYOg9jj5aEvP7RbMQoDEn79rxtZ5FqHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.crl rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171AD3, serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266 Validity Not Before: Jul 2 20:52:35 2025 GMT Not After : Jul 9 20:52:35 2025 GMT Subject: CN=68659c14-f2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:17:3e:7f:d8:e9:15:e0:09:0b:25:7a:72: 14:d4:bc:fa:2e:6c:58:2b:a2:a9:8a:0d:2b:e1:c3: 43:5d:88:ec:89:c1:21:bc:74:0c:26:26:b9:10:af: ae:56:a6:19:41:37:55:1e:5f:66:ed:bb:98:f6:27: ac:30:81:90:2f:f2:75:77:81:2f:25:ef:f8:cd:95: a7:dc:5d:f3:92:7c:ab:99:8c:1a:fa:e8:d9:46:f3: fa:46:09:c0:52:00:4f:7f:ce:d3:e8:3b:8b:9f:f5: 29:cb:97:5c:39:7a:18:b8:c0:aa:ab:98:b8:b5:17: be:46:d1:66:89:ea:dd:73:a9:91:f8:9c:7a:d4:3a: 69:93:62:82:41:07:6c:b1:d2:32:db:c2:74:f6:a0: 9a:b3:8e:88:3b:86:07:dd:45:c0:62:f1:2f:e7:de: bf:c8:13:aa:b4:b7:84:24:b1:9c:36:ef:05:84:79: 92:73:f4:ef:13:cd:6d:e8:86:7f:72:29:69:2c:17: 0d:b2:ac:e5:26:30:ec:0a:79:68:6e:49:67:db:ff: 44:0c:de:3b:be:58:81:04:f0:c4:4b:63:6c:9d:58: 9e:48:4c:b0:c5:32:c3:a9:14:09:c2:2e:34:10:e8: 7d:ef:72:18:e3:8b:16:b5:86:2f:3c:e3:09:b4:71: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:E2:E5:D9:64:CC:80:5B:25:45:F9:3A:D3:6B:1B:34:39:F3:36 X509v3 Authority Key Identifier: keyid:DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bc:f5:f9:df:01:06:38:86:78:91:48:dd:bf:49:fd:fc:f8: e8:17:08:f6:8b:e6:c1:5f:9f:60:5d:0d:32:4d:2a:76:fa:ec: 5d:24:04:26:35:4e:48:a1:cd:42:41:29:79:31:b5:b6:9d:34: 38:90:0a:c7:64:17:25:8a:ce:aa:b5:a7:3c:ec:01:37:f4:ac: 8c:16:bb:82:bd:2b:64:9e:06:79:19:f3:fb:8f:40:bb:fe:8a: 9a:7c:b4:b9:2a:38:4f:89:5d:9b:2f:2c:44:7d:96:3c:54:d7: a7:c5:13:6a:53:a1:1e:63:22:5b:da:ed:3d:0e:32:81:28:b8: 89:a7:d0:dc:b0:0d:d8:9b:f9:2b:8e:14:08:4d:9a:df:a8:c6: 76:38:41:21:f0:ea:6f:91:af:6b:2e:2f:cd:3a:18:79:de:d7: 9c:7c:91:bc:93:41:b9:bc:4e:8d:2b:54:3c:0e:46:e4:1d:21: f3:a2:15:b7:b8:55:20:40:66:b0:0c:a0:4a:f2:2a:a6:88:d7: f5:66:a3:6c:7c:13:55:d6:2b:3b:08:59:b8:cc:4a:3d:e6:3f: 61:d5:05:e0:ef:8b:9d:2b:96:a7:28:ec:9a:0e:aa:7d:59:08: 8b:29:c2:3c:ea:05:dd:c0:a4:b8:e0:ab:c7:c2:35:89:97:75: d5:a0:56:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBRDMxMTAvBgNVBAUTKERFQTA3OTI4REU0Mjg0OTYwRDJDRDVFOEU3NDcwMjg0 MjYwQjMyNjYwHhcNMjUwNzAyMjA1MjM1WhcNMjUwNzA5MjA1MjM1WjAYMRYwFAYD VQQDEw02ODY1OWMxNC1mMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4cXPn/Y6RXgCQslenIU1Lz6LmxYK6Kpig0r4cNDXYjsicEhvHQMJia5EK+u VqYZQTdVHl9m7buY9iesMIGQL/J1d4EvJe/4zZWn3F3zknyrmYwa+ujZRvP6RgnA UgBPf87T6DuLn/Upy5dcOXoYuMCqq5i4tRe+RtFmierdc6mR+Jx61Dppk2KCQQds sdIy28J09qCas46IO4YH3UXAYvEv596/yBOqtLeEJLGcNu8FhHmSc/TvE81t6IZ/ cilpLBcNsqzlJjDsCnlobkln2/9EDN47vliBBPDES2NsnVieSEywxTLDqRQJwi40 EOh973IY44sWtYYvPOMJtHEeAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhd4uXZ ZMyAWyVF+TrTaxs0OfM2MB8GA1UdIwQYMBaAFN6geSjeQoSWDSzV6OdHAoQmCzJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUFEMy8wQkM0Rjg0MEMx QjIxMUVBODMyNzg3NjdDNEY5QUUwMi8zcUI1S041Q2hKWU5MTlhvNTBjQ2hDWUxN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxQjVLTjVDaEpZTkxOWG81MGNDaENZTE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUFEMy8wQkM0Rjg0MEMxQjIxMUVBODMyNzg3NjdDNEY5QUUwMi8zcUI1S041Q2hK WU5MTlhvNTBjQ2hDWUxNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMvPX53wEGOIZ4kUjdv0n9/PjoFwj2i+bBX59gXQ0yTSp2+uxdJAQm NU5Ioc1CQSl5MbW2nTQ4kArHZBclis6qtac87AE39KyMFruCvStkngZ5GfP7j0C7 /oqafLS5KjhPiV2bLyxEfZY8VNenxRNqU6EeYyJb2u09DjKBKLiJp9DcsA3Ym/kr jhQITZrfqMZ2OEEh8Opvka9rLi/NOhh53tecfJG8k0G5vE6NK1Q8DkbkHSHzohW3 uFUgQGawDKBK8iqmiNf1ZqNsfBNV1is7CFm4zEo95j9h1QXg74udK5anKOyaDqp9 WQiLKcI86gXdwKS44KvHwjWJl3XVoFae -----END CERTIFICATE-----Generated at Thu Jul 3 08:28:53 2025 by rpki-client