$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: f5Z+Y3nU4Sum9OlKmgcyJXvkEMf9iuEfzA9H60FLUtM= Subject key identifier: 4C:24:A0:94:D5:46:3A:70:2D:B1:A9:11:11:4A:1A:21:CC:71:B0:26 Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0C23 Signing time: Fri 04 Jul 2025 18:59:37 +0000 Manifest this update: Fri 04 Jul 2025 18:59:36 +0000 Manifest next update: Fri 11 Jul 2025 18:59:36 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: 1K9avxtrPetAqnh7I1+8BkQX6dQ/YJIsAOqECuqkncM=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: H306zJ6w0u++pxJwnmCEZeb1MJYQzvBqunxs7beIBF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Jul 4 18:59:36 2025 GMT Not After : Jul 11 18:59:36 2025 GMT Subject: CN=68682499-ec70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:01:8f:ef:54:5e:80:c6:9f:3d:9a:e4:99: 9a:3b:18:0c:1a:a9:00:c9:35:5f:2a:b2:42:9d:b6: d1:df:c0:bf:90:45:ab:c1:d2:d8:88:73:95:fa:bb: b5:02:b9:87:9f:4a:fc:ee:58:55:7d:62:76:7a:f5: 47:6c:f8:ee:c3:1e:b7:ad:83:76:64:14:5b:24:0e: 8e:9a:50:2a:6d:82:f3:a6:8b:43:b7:6d:03:96:47: dc:80:da:38:89:b3:56:47:7d:e6:f9:e2:45:17:3f: 94:8e:4a:6b:95:29:9f:92:c5:30:bd:14:f6:68:9b: f6:dd:4e:2b:3c:f1:22:35:e4:9d:b8:a3:05:f9:e4: c4:0f:69:cf:fd:29:16:09:2f:eb:d4:03:74:ac:6b: f8:e9:d8:50:c3:81:4a:fc:5c:31:b4:0a:16:b8:db: 2d:15:a4:7e:56:38:ab:79:ee:ad:81:41:74:d5:8b: 03:34:7b:ec:1a:8c:6d:b8:78:1a:6d:41:94:e1:ac: 75:2c:46:86:0c:0d:8b:15:82:5c:2f:6c:86:e0:e5: 35:26:36:41:ea:23:2e:b4:ab:de:8e:08:0a:c1:7a: 88:13:55:7d:cd:9a:cd:f2:71:37:40:d2:d6:75:cb: c1:ec:de:9f:7b:ca:24:0b:0f:43:6c:d2:90:80:86: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:24:A0:94:D5:46:3A:70:2D:B1:A9:11:11:4A:1A:21:CC:71:B0:26 X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:86:62:ca:01:d3:ea:07:18:31:d5:51:3a:04:db:d5:12:33: c1:ec:4e:4a:32:8c:aa:32:cb:95:23:6f:16:b0:ab:f5:b9:66: 13:86:91:80:bd:2f:db:94:d6:1f:69:eb:19:4e:5f:83:4b:e1: ef:a7:d1:60:a7:52:e3:24:f8:97:d5:10:53:91:e3:37:3d:a6: 69:05:40:9e:b6:36:f6:2d:89:aa:32:2c:d7:bf:af:90:9f:9b: 64:e9:99:f8:7a:78:9b:a9:79:cc:84:35:96:de:9e:f0:f9:4b: 92:28:5f:7e:a2:c2:ad:54:99:85:06:90:54:fb:6b:a9:ac:ff: d5:30:72:1d:8f:34:54:ea:36:a0:de:5a:4d:9d:e1:0e:03:39: 2d:31:b3:69:5a:dd:e7:75:5d:a7:f8:c6:3d:86:56:73:ff:1e: dd:3a:6c:ed:9a:73:6c:61:e1:45:e0:4f:4d:15:b6:a3:42:07: f3:a7:84:ec:6d:b7:b4:48:59:71:83:52:8a:d8:eb:cf:b6:18: 89:ec:26:38:72:05:81:00:e4:ad:88:00:14:86:37:b5:71:aa: dd:63:c8:84:5e:1b:b6:6e:c7:c6:07:e9:2a:47:03:a7:5e:08: a3:ca:b2:58:fe:49:af:3e:5a:09:08:7c:a4:01:ad:4f:eb:09: da:e8:8a:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjUwNzA0MTg1OTM2WhcNMjUwNzExMTg1OTM2WjAYMRYwFAYD VQQDEw02ODY4MjQ5OS1lYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtIBj+9UXoDGnz2a5JmaOxgMGqkAyTVfKrJCnbbR38C/kEWrwdLYiHOV+ru1 ArmHn0r87lhVfWJ2evVHbPjuwx63rYN2ZBRbJA6OmlAqbYLzpotDt20DlkfcgNo4 ibNWR33m+eJFFz+UjkprlSmfksUwvRT2aJv23U4rPPEiNeSduKMF+eTED2nP/SkW CS/r1AN0rGv46dhQw4FK/FwxtAoWuNstFaR+Vjiree6tgUF01YsDNHvsGoxtuHga bUGU4ax1LEaGDA2LFYJcL2yG4OU1JjZB6iMutKvejggKwXqIE1V9zZrN8nE3QNLW dcvB7N6fe8okCw9DbNKQgIZnnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwkoJTV RjpwLbGpERFKGiHMcbAmMB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLhmLKAdPqBxgx1VE6BNvVEjPB7E5KMoyqMsuVI28WsKv1uWYThpGA vS/blNYfaesZTl+DS+Hvp9Fgp1LjJPiX1RBTkeM3PaZpBUCetjb2LYmqMizXv6+Q n5tk6Zn4enibqXnMhDWW3p7w+UuSKF9+osKtVJmFBpBU+2uprP/VMHIdjzRU6jag 3lpNneEOAzktMbNpWt3ndV2n+MY9hlZz/x7dOmztmnNsYeFF4E9NFbajQgfzp4Ts bbe0SFlxg1KK2OvPthiJ7CY4cgWBAOStiAAUhje1cardY8iEXhu2bsfGB+kqRwOn XgijyrJY/kmvPloJCHykAa1P6wna6Ipt -----END CERTIFICATE-----Generated at Sun Jul 6 10:06:36 2025 by rpki-client