$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: h3TmRZzDnV+9l6PGSmZ7ijZ47V6shYQAihamix9iUK0= Subject key identifier: 51:15:5D:CA:A2:D3:F1:C8:1D:CD:5B:43:BE:4A:C7:9D:BB:8C:11:09 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 036F Signing time: Thu 03 Jul 2025 01:16:46 +0000 Manifest this update: Thu 03 Jul 2025 01:16:46 +0000 Manifest next update: Thu 10 Jul 2025 01:16:46 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: DTsthf/Nr/nreCw31ghLDXDPSUuB1Mv0yEW6n0I92rk=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Jul 3 01:16:46 2025 GMT Not After : Jul 10 01:16:46 2025 GMT Subject: CN=6865d9fe-b2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:fa:db:0b:33:77:da:3c:9f:f0:16:c5:35: a5:ed:fd:4a:73:f2:cd:76:ed:47:4a:5d:05:24:4a: 1e:bb:84:e6:24:54:e5:59:e4:dc:52:c9:f1:af:89: aa:da:d2:2f:11:4a:0c:38:06:fa:f1:07:26:4a:7d: 96:55:77:85:42:ee:c4:2a:ce:12:01:6a:2f:d1:1f: ab:59:dd:f1:9d:d4:72:68:84:94:b0:22:c7:5b:23: ae:a1:41:70:36:2c:97:7a:8a:65:dd:b3:1a:24:e7: dd:43:2f:b0:76:f5:0e:3a:23:24:a5:40:65:8f:47: ee:e5:12:4b:93:18:8f:64:c9:3f:a2:3c:53:3e:27: 92:e2:40:ad:0c:f3:5c:f9:12:ab:7f:d2:eb:8a:56: 1d:c9:f2:98:16:e2:95:ea:1d:a1:11:4a:8d:d8:8a: 4b:e7:2c:8a:84:48:49:25:8e:f7:8c:8c:63:a5:ac: d6:43:f5:2e:f9:0a:d3:d1:af:5c:b9:cd:47:0b:51: 2e:10:dc:bc:ad:ed:c9:cb:aa:cb:2b:0c:d8:8b:f6: 95:3f:27:8b:f6:fa:b1:a9:3b:d6:9a:30:c2:51:f9: bb:6a:95:e2:1b:ba:f3:0f:2b:be:00:72:8e:dc:d0: 3e:f2:21:e0:7b:27:4f:9f:7d:46:f3:5f:e1:af:89: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:15:5D:CA:A2:D3:F1:C8:1D:CD:5B:43:BE:4A:C7:9D:BB:8C:11:09 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:92:91:c7:91:6b:71:a2:6d:75:ab:13:ea:b2:cf:19:ea:49: 3a:ca:fc:da:73:92:4b:17:db:4d:90:d4:50:93:97:16:e0:36: 91:87:e3:40:90:65:f2:2c:9c:a8:ca:15:a3:dd:28:cd:28:fa: 39:d5:2f:99:57:ed:51:84:50:ba:5d:b8:b7:9f:0c:d8:27:20: 3d:c1:61:d3:f2:5f:cf:2a:9c:d6:46:17:69:1a:d0:51:48:4f: 4b:14:7c:e7:5d:99:d8:8b:c9:4f:9e:c2:34:b8:39:e0:c2:ac: 59:85:d8:1a:0b:41:c8:a9:b6:33:c9:83:98:2f:f7:c5:7a:8e: dc:f7:f3:a1:84:8a:4f:fb:ac:f5:e1:40:40:4a:4d:6c:64:6e: 9e:30:ac:c2:6d:e3:e1:87:1a:b5:44:e9:b9:4b:b3:96:d8:73: 01:b8:de:06:b5:62:29:10:d4:fe:cf:52:9f:8e:61:64:85:f9: 3a:16:2b:74:d4:45:3a:0a:13:50:72:f3:97:10:65:a1:ea:13: a3:d1:f3:9b:ae:54:ac:16:06:3a:67:b6:fb:19:22:ea:00:bd: 1d:96:74:3d:f4:04:d0:d9:ff:23:f8:4d:e0:a5:d1:32:38:63: 4f:a9:65:bd:2f:40:fb:60:3d:64:70:15:a3:a4:81:e3:9d:8e: d0:55:af:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUwNzAzMDExNjQ2WhcNMjUwNzEwMDExNjQ2WjAYMRYwFAYD VQQDEw02ODY1ZDlmZS1iMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Zv62wszd9o8n/AWxTWl7f1Kc/LNdu1HSl0FJEoeu4TmJFTlWeTcUsnxr4mq 2tIvEUoMOAb68QcmSn2WVXeFQu7EKs4SAWov0R+rWd3xndRyaISUsCLHWyOuoUFw NiyXeopl3bMaJOfdQy+wdvUOOiMkpUBlj0fu5RJLkxiPZMk/ojxTPieS4kCtDPNc +RKrf9LrilYdyfKYFuKV6h2hEUqN2IpL5yyKhEhJJY73jIxjpazWQ/Uu+QrT0a9c uc1HC1EuENy8re3Jy6rLKwzYi/aVPyeL9vqxqTvWmjDCUfm7apXiG7rzDyu+AHKO 3NA+8iHgeydPn31G81/hr4nwvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEVXcqi 0/HIHc1bQ75Kx527jBEJMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQkpHHkWtxom11qxPqss8Z6kk6yvzac5JLF9tNkNRQk5cW4DaRh+NA kGXyLJyoyhWj3SjNKPo51S+ZV+1RhFC6Xbi3nwzYJyA9wWHT8l/PKpzWRhdpGtBR SE9LFHznXZnYi8lPnsI0uDngwqxZhdgaC0HIqbYzyYOYL/fFeo7c9/OhhIpP+6z1 4UBASk1sZG6eMKzCbePhhxq1ROm5S7OW2HMBuN4GtWIpENT+z1KfjmFkhfk6Fit0 1EU6ChNQcvOXEGWh6hOj0fObrlSsFgY6Z7b7GSLqAL0dlnQ99ATQ2f8j+E3gpdEy OGNPqWW9L0D7YD1kcBWjpIHjnY7QVa/K -----END CERTIFICATE-----Generated at Fri Jul 4 01:08:49 2025 by rpki-client