$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: PnTUAJYmf9NMKgzSg83fYGBs6pjY7IqEYtjxpKAB+PE= Subject key identifier: FE:55:AD:D1:87:DD:48:DA:3C:FC:C7:24:BB:5E:BF:3E:F5:7C:99:0B Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 04D3 Signing time: Thu 03 Jul 2025 00:08:04 +0000 Manifest this update: Thu 03 Jul 2025 00:08:04 +0000 Manifest next update: Thu 10 Jul 2025 00:08:04 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: GKKer9trIY24q12bIJ6GqV8wvvIa0Cy/Z+nObrYoJXI=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: K+U5H/gEB39S0MtkniCqyAbmgU8k6WO9RKiUyR91DCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: Jul 3 00:08:04 2025 GMT Not After : Jul 10 00:08:04 2025 GMT Subject: CN=6865c9e4-86a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:af:ff:05:4d:f7:8a:ad:56:42:a2:33:5d: 56:a4:43:d7:99:04:b4:7b:3e:60:74:71:0c:11:3c: 43:7f:53:64:d6:5d:a0:42:18:cf:d4:b0:aa:c2:cb: ab:5f:87:fb:94:90:71:76:db:dd:ac:b0:d0:b5:26: e5:bf:1b:c2:f9:ff:d1:35:eb:41:5e:24:50:3d:19: 7c:e9:3e:cd:30:84:bf:2d:2e:c9:2f:38:34:fc:71: 4f:f5:11:0a:1f:76:25:59:34:7c:1f:66:c5:27:14: e2:2a:0e:f7:7b:9f:06:ec:f3:86:01:63:89:7c:64: a4:37:ae:88:de:10:b9:16:16:7b:3c:b7:3d:7f:4b: e4:51:90:6b:72:ed:b2:6c:de:42:64:03:67:a9:0b: 3f:e7:27:22:6f:77:e2:c0:27:28:40:ae:13:c9:40: f1:fd:f2:5e:32:67:29:94:bd:b2:7c:0c:36:a5:99: e3:b8:e0:ff:d0:ff:7d:fe:c9:c1:c2:a3:da:56:36: 15:46:06:cf:27:17:f1:09:f3:c1:06:b4:01:32:23: dc:2d:31:65:34:75:60:73:64:79:6b:cc:01:f6:ac: 0a:9d:c1:b2:6e:f6:f9:d5:85:44:42:37:38:0a:68: c6:6d:00:6d:24:7a:67:53:9a:6e:0d:b2:14:91:6f: f9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:55:AD:D1:87:DD:48:DA:3C:FC:C7:24:BB:5E:BF:3E:F5:7C:99:0B X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:73:5e:75:f4:50:4b:bc:3f:40:da:82:f0:19:55:95:9d:98: de:31:d8:a5:a8:ea:e4:21:7c:b1:42:67:c7:1d:bc:94:dc:dc: d2:5a:13:db:09:5b:9a:5d:4e:a9:d9:2a:8b:a8:73:75:4f:27: 0e:97:3e:54:22:39:ac:2a:54:57:1a:ed:bb:17:cb:f9:cb:0c: 21:c1:58:a6:f8:74:2a:27:76:1c:c7:4b:e4:a3:6e:44:0f:fb: f6:07:88:9e:c6:33:1b:5f:0a:2a:58:5c:87:ba:b9:b8:9d:e7: d2:e8:a4:9b:2d:cd:c4:f7:65:a5:63:a1:b0:dd:7a:8a:70:bd: e3:fd:4d:85:f8:bb:3b:02:0f:e7:f7:c9:5b:e5:a1:13:9a:9f: 8d:d5:0f:0d:0c:6f:5d:34:1a:22:04:76:42:10:3e:9e:1a:48: 21:fb:2a:c7:99:5b:df:cb:f2:1a:c0:79:cb:4a:c6:1f:4b:c1: 85:39:5e:70:d0:2e:43:38:6a:67:c5:f4:ea:fe:4d:49:e6:54: 55:fd:33:16:3f:68:49:01:e5:0b:b7:20:8b:a9:53:2c:ce:a1: e9:db:b4:dd:ed:2f:81:f7:da:ec:69:30:b1:c8:5a:9b:92:9f: 66:3a:5f:60:0a:a3:6e:b9:cf:e9:1c:00:2b:aa:fe:74:c6:02: 8d:ee:0a:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjUwNzAzMDAwODA0WhcNMjUwNzEwMDAwODA0WjAYMRYwFAYD VQQDEw02ODY1YzllNC04NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngyv/wVN94qtVkKiM11WpEPXmQS0ez5gdHEMETxDf1Nk1l2gQhjP1LCqwsur X4f7lJBxdtvdrLDQtSblvxvC+f/RNetBXiRQPRl86T7NMIS/LS7JLzg0/HFP9REK H3YlWTR8H2bFJxTiKg73e58G7POGAWOJfGSkN66I3hC5FhZ7PLc9f0vkUZBrcu2y bN5CZANnqQs/5ycib3fiwCcoQK4TyUDx/fJeMmcplL2yfAw2pZnjuOD/0P99/snB wqPaVjYVRgbPJxfxCfPBBrQBMiPcLTFlNHVgc2R5a8wB9qwKncGybvb51YVEQjc4 CmjGbQBtJHpnU5puDbIUkW/5EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5VrdGH 3UjaPPzHJLtevz71fJkLMB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCc1519FBLvD9A2oLwGVWVnZjeMdilqOrkIXyxQmfHHbyU3NzSWhPb CVuaXU6p2SqLqHN1TycOlz5UIjmsKlRXGu27F8v5ywwhwVim+HQqJ3Ycx0vko25E D/v2B4iexjMbXwoqWFyHurm4nefS6KSbLc3E92WlY6Gw3XqKcL3j/U2F+Ls7Ag/n 98lb5aETmp+N1Q8NDG9dNBoiBHZCED6eGkgh+yrHmVvfy/IawHnLSsYfS8GFOV5w 0C5DOGpnxfTq/k1J5lRV/TMWP2hJAeULtyCLqVMszqHp27Td7S+B99rsaTCxyFqb kp9mOl9gCqNuuc/pHAArqv50xgKN7gqY -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:20 2025 by rpki-client