$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: DKkIdIDCCieWTdWFYe+kufxUvw1gw498WjQcDPkfjPw= Subject key identifier: F0:93:6F:6F:23:98:68:02:C0:53:8C:5B:CC:E8:21:AA:A8:C7:3C:F5 Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 04BB Signing time: Wed 14 May 2025 23:54:31 +0000 Manifest this update: Wed 14 May 2025 23:54:31 +0000 Manifest next update: Wed 21 May 2025 23:54:31 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: htcxkPfZ8hTCxhlUdBGEd9T6Dxmwrq1Ft0/HRuApI9k=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: K+U5H/gEB39S0MtkniCqyAbmgU8k6WO9RKiUyR91DCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: May 14 23:54:31 2025 GMT Not After : May 21 23:54:31 2025 GMT Subject: CN=68252d37-55da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:4c:b0:99:32:e4:e4:f0:b6:7a:b4:9e:bc: 2d:f2:64:48:5f:80:e6:55:2f:c6:10:68:26:43:ca: 66:64:11:f3:d2:a2:b8:14:89:ba:17:25:85:71:54: 93:c6:b2:81:6c:6d:47:2d:9e:c3:19:fc:cf:93:18: f7:da:79:02:de:6d:b4:e6:0c:c3:8e:9d:d1:4d:cc: 1b:ee:b1:10:7a:89:62:e1:70:fd:db:69:fd:b6:ec: a4:35:25:6b:50:bb:9c:38:9a:86:26:7c:8d:dd:c8: 84:4d:55:06:d9:2c:c5:eb:66:5c:fa:a3:31:90:1b: d1:f7:93:d4:9c:9e:55:38:bd:dc:33:70:d1:90:bf: 00:b2:ac:57:20:44:7c:ee:8b:2e:47:72:ca:ac:b2: 06:03:22:39:5a:b6:d8:f3:88:bf:8a:d9:93:4e:59: 88:43:aa:a7:1f:d3:db:19:a1:d3:ec:52:95:79:98: 2b:21:fb:e5:68:b2:dd:90:e6:6c:fa:84:dd:d2:15: dd:e8:94:07:cf:85:4e:79:fa:be:fb:9e:6f:86:48: 2f:e2:08:be:df:75:31:39:de:11:5c:cd:b3:d2:6b: 66:74:e3:cd:dc:df:4f:c6:55:05:1d:6d:3d:7c:dc: 7f:de:98:51:05:fd:0a:83:79:ee:88:1f:c8:3e:61: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:93:6F:6F:23:98:68:02:C0:53:8C:5B:CC:E8:21:AA:A8:C7:3C:F5 X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8c:e2:73:ae:30:cb:4e:f3:7b:12:9d:0c:23:f5:e4:30:6b: 0a:34:56:54:c7:dd:e7:73:8a:ef:dc:f0:35:7e:0a:c7:6a:4a: 4c:9a:9e:04:5d:aa:34:35:f3:34:37:d4:8f:14:1f:c3:b6:dd: ae:1b:a3:07:2c:a5:22:2d:83:8b:54:ba:8b:8d:cb:42:90:03: 4c:4c:6d:5b:27:d5:f5:1a:2f:c2:3b:7d:c4:4c:93:9b:73:91: fa:35:06:35:bc:15:25:8b:54:9e:b2:54:2e:a4:d9:4e:cb:5c: d3:45:74:dd:20:7f:28:4a:ef:9a:1b:6a:d8:ad:77:36:5e:85: ea:6b:66:69:d4:74:ab:a9:17:b3:d7:b5:26:95:95:b8:84:a4: c9:7f:d1:31:d9:88:cf:e5:2a:d1:ac:fc:73:1f:71:1d:fe:67: fd:ee:9a:c6:85:94:d2:45:7e:35:8d:26:b2:82:f9:5f:d3:a8: 10:4f:c2:52:01:0d:59:7e:55:3c:3c:76:b6:46:af:9d:f8:cc: cf:2b:6d:6f:4a:52:43:92:c4:23:11:11:a4:3a:e6:e6:53:7e: 6e:6b:59:97:c3:f3:5d:7d:c2:9d:16:8e:b5:a5:e2:01:88:89: 5a:09:11:af:a9:dc:21:b5:25:e7:9a:20:d1:99:09:74:be:71: dd:47:fb:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjUwNTE0MjM1NDMxWhcNMjUwNTIxMjM1NDMxWjAYMRYwFAYD VQQDEw02ODI1MmQzNy01NWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomZMsJky5OTwtnq0nrwt8mRIX4DmVS/GEGgmQ8pmZBHz0qK4FIm6FyWFcVST xrKBbG1HLZ7DGfzPkxj32nkC3m205gzDjp3RTcwb7rEQeoli4XD922n9tuykNSVr ULucOJqGJnyN3ciETVUG2SzF62Zc+qMxkBvR95PUnJ5VOL3cM3DRkL8AsqxXIER8 7osuR3LKrLIGAyI5WrbY84i/itmTTlmIQ6qnH9PbGaHT7FKVeZgrIfvlaLLdkOZs +oTd0hXd6JQHz4VOefq++55vhkgv4gi+33UxOd4RXM2z0mtmdOPN3N9PxlUFHW09 fNx/3phRBf0Kg3nuiB/IPmHMHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCTb28j mGgCwFOMW8zoIaqoxzz1MB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkjOJzrjDLTvN7Ep0MI/XkMGsKNFZUx93nc4rv3PA1fgrHakpMmp4E Xao0NfM0N9SPFB/Dtt2uG6MHLKUiLYOLVLqLjctCkANMTG1bJ9X1Gi/CO33ETJOb c5H6NQY1vBUli1SeslQupNlOy1zTRXTdIH8oSu+aG2rYrXc2XoXqa2Zp1HSrqRez 17UmlZW4hKTJf9Ex2YjP5SrRrPxzH3Ed/mf97prGhZTSRX41jSaygvlf06gQT8JS AQ1ZflU8PHa2Rq+d+MzPK21vSlJDksQjERGkOubmU35ua1mXw/NdfcKdFo61peIB iIlaCRGvqdwhtSXnmiDRmQl0vnHdR/t5 -----END CERTIFICATE-----Generated at Fri May 16 07:30:12 2025 by rpki-client