$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: /CojFWEbC8V07bzxfuSzOqQ3ihrTB0wkxH3XD9I9c7E= Subject key identifier: A7:68:5D:1A:54:A9:DA:A5:A8:62:30:8A:F9:FA:4E:7F:D2:D4:55:7C Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2F84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2F59 Signing time: Sun 06 Jul 2025 15:30:15 +0000 Manifest this update: Sun 06 Jul 2025 15:30:15 +0000 Manifest next update: Sun 13 Jul 2025 15:30:15 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: 4wT2237gepqagcyFj4sE0nS2agKm09O+wvQHQ7UsM+o=) 2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zMgG3GuNf+zDyezkOM45N+LyqO/kzryLIYKrCSpbqDo=) 3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: vhNYX3z+Zi/YDPj0M1GT/QNGQGsFRe3lw3Q5mL3YNtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12164 (0x2f84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: Jul 6 15:30:15 2025 GMT Not After : Jul 13 15:30:15 2025 GMT Subject: CN=686a9687-a988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:9a:0a:59:57:d0:a4:9d:ba:da:a5:c9:12: 0e:e6:8c:10:b8:a7:fe:66:31:a9:e3:19:01:25:54: 3a:e5:3f:1d:7f:c8:26:ee:35:f5:bf:8c:1d:26:b7: f4:11:9a:41:50:2c:16:fe:e0:ca:57:46:92:97:26: 3b:e7:fd:9b:b6:1f:94:1d:af:64:d9:39:bd:1b:a0: c6:35:e8:19:10:98:a8:35:6c:bc:67:59:30:a3:33: 92:14:d0:61:89:68:7f:14:a8:3e:0d:67:28:48:b7: 10:a9:02:78:c1:80:13:0b:ae:21:6a:b9:75:99:3d: ab:c3:cf:9f:d1:d8:f0:99:c1:a3:4b:10:ec:cb:14: f4:73:31:4b:04:9a:68:0c:21:a7:12:71:59:76:3f: d9:28:d2:5c:07:b6:a1:09:0c:57:3d:27:9c:75:e9: c2:21:bc:45:3e:bc:54:a2:09:bd:d3:d4:bd:e0:e0: 29:0c:ba:d2:6d:c6:2b:50:7b:c6:ca:de:a3:ee:a8: f3:2e:cc:9d:60:39:86:58:b5:af:74:7d:fa:25:d4: 2c:a8:f8:eb:5b:6f:fa:5d:54:10:4f:c9:da:90:df: 91:3e:f5:7a:9c:4d:47:4b:10:a5:9d:6d:20:57:ce: 37:01:02:59:e7:d2:78:17:90:d2:4d:f4:7a:74:cf: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:5D:1A:54:A9:DA:A5:A8:62:30:8A:F9:FA:4E:7F:D2:D4:55:7C X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:6f:fe:fe:3e:92:bf:21:3f:ac:a7:4b:fe:35:88:e7:c1:38: 88:10:25:eb:4d:5f:dc:96:66:ce:67:45:d0:34:67:be:d9:ea: 8f:ff:2b:f0:42:61:c1:9a:91:55:b8:0a:24:f0:a9:55:a6:ad: b6:e7:14:2d:80:40:5d:22:6d:d7:d2:95:43:96:b8:62:0a:b4: 10:da:88:88:69:98:a5:df:46:10:40:33:88:4b:34:8c:cd:d4: f5:9b:46:03:d9:95:17:66:c0:0a:08:76:05:76:fb:ba:e2:71: ee:26:88:9f:70:f4:af:5d:b9:df:42:82:cb:be:c2:82:95:6a: dc:1a:5d:b7:f7:4f:f8:4e:bd:d1:33:af:70:18:20:76:11:b8: 79:e5:c2:2b:d4:f1:1d:fe:2a:f1:3a:9a:84:94:cf:4d:e7:50: d6:ba:fd:6c:7e:73:d8:a6:93:48:81:c4:bc:b8:62:7b:98:21: 9c:4e:41:ac:67:0f:c2:0a:ae:0b:7a:87:4f:db:e8:69:96:38: ed:1d:34:fb:db:26:92:62:d9:50:a1:21:25:1e:f9:2b:48:1c: 9a:6f:7d:e2:ab:ac:40:17:e9:2e:54:f6:34:24:97:e5:12:b7: 6d:b3:1a:14:4e:8b:06:e7:42:13:31:7c:14:27:2f:00:37:ce: 29:61:ad:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjUwNzA2MTUzMDE1WhcNMjUwNzEzMTUzMDE1WjAYMRYwFAYD VQQDEw02ODZhOTY4Ny1hOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvveaCllX0KSdutqlyRIO5owQuKf+ZjGp4xkBJVQ65T8df8gm7jX1v4wdJrf0 EZpBUCwW/uDKV0aSlyY75/2bth+UHa9k2Tm9G6DGNegZEJioNWy8Z1kwozOSFNBh iWh/FKg+DWcoSLcQqQJ4wYATC64harl1mT2rw8+f0djwmcGjSxDsyxT0czFLBJpo DCGnEnFZdj/ZKNJcB7ahCQxXPSecdenCIbxFPrxUogm909S94OApDLrSbcYrUHvG yt6j7qjzLsydYDmGWLWvdH36JdQsqPjrW2/6XVQQT8nakN+RPvV6nE1HSxClnW0g V843AQJZ59J4F5DSTfR6dM8N7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdoXRpU qdqlqGIwivn6Tn/S1FV8MB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCb/7+PpK/IT+sp0v+NYjnwTiIECXrTV/clmbOZ0XQNGe+2eqP/yvw QmHBmpFVuAok8KlVpq225xQtgEBdIm3X0pVDlrhiCrQQ2oiIaZil30YQQDOISzSM zdT1m0YD2ZUXZsAKCHYFdvu64nHuJoifcPSvXbnfQoLLvsKClWrcGl2390/4Tr3R M69wGCB2Ebh55cIr1PEd/irxOpqElM9N51DWuv1sfnPYppNIgcS8uGJ7mCGcTkGs Zw/CCq4LeodP2+hpljjtHTT72yaSYtlQoSElHvkrSByab33iq6xAF+kuVPY0JJfl ErdtsxoUTosG50ITMXwUJy8AN84pYa2T -----END CERTIFICATE-----Generated at Mon Jul 7 03:34:00 2025 by rpki-client