$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: FWDkuptMT2q5NPFZf7eDwFe4pXGUcv3E/s7JK36u92A= Subject key identifier: 52:4E:17:D6:B3:5B:B1:6A:65:26:2D:1F:CF:5F:2B:F7:E6:5D:68:BF Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 8A Signing time: Thu 03 Jul 2025 06:50:17 +0000 Manifest this update: Thu 03 Jul 2025 06:50:17 +0000 Manifest next update: Thu 10 Jul 2025 06:50:17 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: RandDPWGTZJp9iERHedcD5Z1UeWF/AEHkscJIg5jVvs=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: ymXlk9RJfi9V2KzOznS96G8RXYI7jJ6rpj+phG/GZks=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: SX03ccnLTHDWWqP2dXM+ZAcRiPmXaj3vkOlikMISxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Jul 3 06:50:17 2025 GMT Not After : Jul 10 06:50:17 2025 GMT Subject: CN=68662829-8251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:d0:13:39:5a:e5:dc:f6:cb:a9:ef:26:a7: 6b:98:da:65:da:de:59:8a:df:02:25:5d:5a:c2:eb: 90:c5:83:0a:2b:4b:7b:9e:93:bc:53:47:85:65:a6: 06:fa:56:9c:f0:d3:20:be:e7:f5:99:cc:44:01:c1: 97:d2:33:66:19:0c:a5:32:0f:8a:d0:b4:3b:f4:9f: 87:e8:f3:c8:38:22:b1:1f:e2:21:28:f1:43:40:b2: 54:52:7d:e9:da:4b:e3:84:25:2e:23:fd:74:45:4e: f8:8b:88:df:35:c7:ac:d7:e9:69:7f:db:d4:99:5b: 83:7c:3b:90:d9:d7:2d:f9:ee:23:ac:84:f1:27:fc: 3b:f1:91:b8:68:26:3f:29:73:03:0e:b1:94:96:bd: 21:79:66:2a:b7:98:1c:65:a3:44:52:0c:a8:e2:61: 95:50:04:8a:ed:f0:67:48:c3:86:a7:4e:9c:06:0c: a6:3c:68:01:74:23:57:eb:62:64:a9:fb:1b:97:6b: 5a:3c:bb:8c:cd:e5:14:ed:c8:58:54:51:bc:af:f3: a8:e3:37:31:c4:db:0f:a8:b0:96:6b:9d:cc:3c:b6: b2:7b:18:5a:14:6c:9c:43:06:10:fa:4b:0c:27:bd: 54:a0:91:b3:e5:3b:8b:8b:5b:e4:b7:4d:d7:83:f2: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4E:17:D6:B3:5B:B1:6A:65:26:2D:1F:CF:5F:2B:F7:E6:5D:68:BF X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:23:4e:1b:25:87:ad:5d:91:f4:5a:b5:96:a4:6a:de:b2:b1: 27:fc:a4:16:0a:01:7f:57:ff:52:38:cd:78:65:1f:9d:82:c8: 1d:85:69:0b:bf:3d:7d:7b:6d:29:68:79:37:f5:c7:52:47:6c: 89:45:39:35:b2:9f:f5:ef:14:e5:e5:31:19:e3:bf:be:89:16: b0:86:23:ce:d7:a9:ce:5f:d7:a8:7e:77:95:98:0b:98:3e:f4: 54:00:8e:c3:f7:71:38:3f:93:6c:08:eb:77:7e:63:12:db:68: 2d:1a:bc:2f:10:48:de:a3:4f:2c:66:a8:12:38:96:01:fc:af: a1:e7:dc:e6:05:ea:bc:bb:ee:42:99:16:7a:d0:dd:c6:60:37: 8c:95:f8:f8:44:bb:47:ac:a1:cf:02:c3:fe:01:78:3f:69:95: 1b:40:97:3f:fa:2a:5a:34:4d:f8:c8:a5:0e:56:8f:62:c4:f8: d9:20:91:9c:0a:ee:0b:d0:45:71:68:d8:33:0b:74:67:57:ba: f8:2b:90:c2:a3:1f:24:8a:5b:6e:02:85:e7:88:33:14:f5:47: 00:7e:7d:5d:29:22:1c:51:a2:36:65:19:d4:c3:b8:c3:dd:3a: e9:a4:92:7f:a8:28:48:a2:46:03:7f:4a:a8:7a:a7:e4:74:7c: 84:ae:9c:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjUwNzAzMDY1MDE3WhcNMjUwNzEwMDY1MDE3WjAYMRYwFAYD VQQDEw02ODY2MjgyOS04MjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEPQEzla5dz2y6nvJqdrmNpl2t5Zit8CJV1awuuQxYMKK0t7npO8U0eFZaYG +lac8NMgvuf1mcxEAcGX0jNmGQylMg+K0LQ79J+H6PPIOCKxH+IhKPFDQLJUUn3p 2kvjhCUuI/10RU74i4jfNces1+lpf9vUmVuDfDuQ2dct+e4jrITxJ/w78ZG4aCY/ KXMDDrGUlr0heWYqt5gcZaNEUgyo4mGVUASK7fBnSMOGp06cBgymPGgBdCNX62Jk qfsbl2taPLuMzeUU7chYVFG8r/Oo4zcxxNsPqLCWa53MPLayexhaFGycQwYQ+ksM J71UoJGz5TuLi1vkt03Xg/LtRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJOF9az W7FqZSYtH89fK/fmXWi/MB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcI04bJYetXZH0WrWWpGresrEn/KQWCgF/V/9SOM14ZR+dgsgdhWkL vz19e20paHk39cdSR2yJRTk1sp/17xTl5TEZ47++iRawhiPO16nOX9eofneVmAuY PvRUAI7D93E4P5NsCOt3fmMS22gtGrwvEEjeo08sZqgSOJYB/K+h59zmBeq8u+5C mRZ60N3GYDeMlfj4RLtHrKHPAsP+AXg/aZUbQJc/+ipaNE34yKUOVo9ixPjZIJGc Cu4L0EVxaNgzC3RnV7r4K5DCox8kiltuAoXniDMU9UcAfn1dKSIcUaI2ZRnUw7jD 3TrppJJ/qChIokYDf0qoeqfkdHyErpxm -----END CERTIFICATE-----Generated at Fri Jul 4 11:10:42 2025 by rpki-client