$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft File: mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json) Hash identifier: rqpjpo8GHCyiCEgkmWPfSh0wkkaBV8VkOetc/kiAE04= Subject key identifier: 70:EA:F1:4D:20:77:AF:89:D8:76:C3:19:53:7E:BE:03:7B:8F:A0:3B Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 Certificate issuer: /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft Manifest number: 0791 Signing time: Mon 30 Jun 2025 21:40:16 +0000 Manifest this update: Mon 30 Jun 2025 21:40:15 +0000 Manifest next update: Mon 07 Jul 2025 21:40:15 +0000 Files and hashes: 1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: k4NksbFUBg2h6FULYSe8Z6oaj3uFFvRcJY7afuYbae0=) 2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Validity Not Before: Jun 30 21:40:15 2025 GMT Not After : Jul 7 21:40:15 2025 GMT Subject: CN=68630440-58cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:fe:d3:64:bd:6f:ff:59:aa:f5:a4:eb:80: ad:36:af:91:a3:2d:22:6f:d3:06:56:10:61:e1:94: e8:86:d6:d9:86:38:29:df:0c:79:ea:d0:dc:6d:aa: 85:ed:29:5f:58:d6:d3:96:b2:8d:a9:ef:cc:6c:3d: ee:23:d0:5a:10:88:08:8f:e3:1c:11:fa:a3:82:e9: 4e:50:d7:2e:e9:99:72:97:ae:69:d2:cb:82:02:5f: d4:05:90:84:49:83:61:76:53:3b:fd:9f:af:db:bf: 08:af:cc:6b:fd:1d:13:e2:c9:57:15:75:9f:56:22: 62:95:07:1e:4b:7c:b9:bc:35:60:2f:ab:be:66:88: 9b:42:0b:b6:04:0d:88:81:b4:d6:7d:94:c0:10:87: eb:ae:23:16:38:bb:7e:f7:67:34:db:8b:11:0a:a5: 07:7d:a5:7c:1c:25:0f:67:1a:70:42:4b:e3:13:4e: 49:21:a8:47:95:5f:62:95:d9:8b:a2:5f:66:ef:8d: b8:a7:30:0a:22:3c:be:7f:9a:7a:a0:92:53:d1:fe: fa:c5:be:98:d7:70:7a:f0:cf:84:a8:dd:98:49:0d: 87:53:74:13:b8:fd:c2:33:e0:fc:80:b6:81:b7:0c: fa:c1:28:3f:ba:7b:44:62:cd:6e:2b:83:4a:92:b8: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EA:F1:4D:20:77:AF:89:D8:76:C3:19:53:7E:BE:03:7B:8F:A0:3B X509v3 Authority Key Identifier: keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d7:08:4b:4a:1c:30:cc:2a:55:b6:53:61:2f:42:bf:07:ca: 45:59:e0:ff:ca:65:09:30:f5:48:87:a7:2e:1c:c5:7e:e0:7b: b8:3d:9b:d8:f5:c2:44:3d:27:b1:16:41:a3:73:a8:72:e5:e2: 66:5d:12:e2:d4:f6:27:da:f0:19:a6:af:6b:e3:75:b4:96:c4: c7:57:99:ca:f4:84:ce:fb:2b:13:8f:5e:2b:26:12:e8:94:7b: b2:cc:8c:b7:84:d1:be:c6:8e:83:8b:40:f0:fc:30:43:3f:32: fc:18:9c:c8:c3:0b:6a:20:b4:b0:8b:68:2e:42:5a:26:55:90: 5f:50:e5:32:3b:6e:d0:0f:b4:df:4c:c2:c4:5a:83:10:a8:54: e3:de:90:26:9f:b4:be:6c:89:04:3e:f2:83:3d:c8:f9:e9:d3: ef:6d:c7:d8:b1:75:ef:8d:e2:63:89:d5:e2:5a:95:81:e9:09: 87:a6:2e:ee:bb:5f:ba:48:f8:ec:86:35:94:99:57:d1:ba:d9: 25:7a:54:9f:54:f4:9b:d0:dd:e7:d8:8e:1b:17:d9:b6:a9:3e: 4d:03:97:55:43:bb:f1:3b:1e:9b:48:87:38:92:43:21:43:91: 9d:a3:44:ea:f1:9a:32:b3:ac:50:ae:40:35:c5:51:66:ca:ba: c9:15:f0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFENTFBOThDQzg3 MTkxM0YzQTkwHhcNMjUwNjMwMjE0MDE1WhcNMjUwNzA3MjE0MDE1WjAYMRYwFAYD VQQDEw02ODYzMDQ0MC01OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09v+02S9b/9ZqvWk64CtNq+Roy0ib9MGVhBh4ZTohtbZhjgp3wx56tDcbaqF 7SlfWNbTlrKNqe/MbD3uI9BaEIgIj+McEfqjgulOUNcu6Zlyl65p0suCAl/UBZCE SYNhdlM7/Z+v278Ir8xr/R0T4slXFXWfViJilQceS3y5vDVgL6u+ZoibQgu2BA2I gbTWfZTAEIfrriMWOLt+92c024sRCqUHfaV8HCUPZxpwQkvjE05JIahHlV9ildmL ol9m7424pzAKIjy+f5p6oJJT0f76xb6Y13B68M+EqN2YSQ2HU3QTuP3CM+D8gLaB twz6wSg/untEYs1uK4NKkrhdqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDq8U0g d6+J2HbDGVN+vgN7j6A7MB8GA1UdIwQYMBaAFJnNwOq+GAQSYRmh1RqYzIcZE/Op MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0Y3Ri9FMzdFNUIzMjE1 MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJCSmhHYUhWR3BqTWh4a1Q4 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jM0E2cjRZQkJKaEdhSFZHcGpNaHhrVDg2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0Y3Ri9FMzdFNUIzMjE1MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJC SmhHYUhWR3BqTWh4a1Q4NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW1whLShwwzCpVtlNhL0K/B8pFWeD/ymUJMPVIh6cuHMV+4Hu4PZvY 9cJEPSexFkGjc6hy5eJmXRLi1PYn2vAZpq9r43W0lsTHV5nK9ITO+ysTj14rJhLo lHuyzIy3hNG+xo6Di0Dw/DBDPzL8GJzIwwtqILSwi2guQlomVZBfUOUyO27QD7Tf TMLEWoMQqFTj3pAmn7S+bIkEPvKDPcj56dPvbcfYsXXvjeJjidXiWpWB6QmHpi7u u1+6SPjshjWUmVfRutklelSfVPSb0N3n2I4bF9m2qT5NA5dVQ7vxOx6bSIc4kkMh Q5Gdo0Tq8Zoys6xQrkA1xVFmyrrJFfDF -----END CERTIFICATE-----Generated at Wed Jul 2 15:03:46 2025 by rpki-client