$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: 1OLYFnYgtcn4P76eUQWmGJQH57CwnukUCMDYbr/RBHc= Subject key identifier: 21:22:C1:A1:FA:72:0F:31:3F:5F:65:34:F1:0E:FD:90:7E:AB:C3:BB Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 106D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 105F Signing time: Fri 04 Jul 2025 17:41:26 +0000 Manifest this update: Fri 04 Jul 2025 17:41:25 +0000 Manifest next update: Fri 11 Jul 2025 17:41:25 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: WwzuqXFoJkqokHMjtVDrAbcetzkVjihYQDk1E+SWKuQ=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: 0OKa5D8R5tqflMwj5WNvymkXFrzQXgwFV3RUnRL3aD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4205 (0x106d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Jul 4 17:41:25 2025 GMT Not After : Jul 11 17:41:25 2025 GMT Subject: CN=68681246-5edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:d6:3c:c4:17:12:ef:8f:94:7b:da:8f:b3: 0b:cd:f1:b3:af:fa:6e:b7:67:99:7b:b8:59:a1:90: 20:50:4c:79:18:5a:bc:a2:97:35:60:d3:0c:30:d5: 17:c0:43:d8:cc:76:b9:3b:87:f4:5f:bf:54:f4:6a: 40:b8:ce:25:b0:44:43:1a:51:6a:5d:eb:51:b4:a9: f7:00:5d:b9:38:37:46:7b:19:a1:a3:b7:a0:27:ae: b7:a1:c0:b6:c7:64:fb:1e:d7:a7:19:b8:b4:41:4f: 84:09:14:8c:86:88:01:36:4d:22:03:f2:e9:5d:89: 42:65:d6:03:77:8b:8b:4f:d5:bd:5d:9b:1a:6a:d3: b5:6a:21:e5:bc:5a:31:a4:fb:a5:c9:68:eb:fe:f8: 2a:b7:b2:9d:fe:1a:31:e9:a3:ed:e1:ba:a7:60:85: 4b:14:00:75:6d:26:96:fd:69:9f:c1:5c:1a:d1:b3: 39:e5:28:3c:f0:36:ba:c8:0f:08:e0:03:50:2b:31: 3a:3b:33:be:66:b7:e5:34:f8:fa:ef:22:a4:50:6d: f1:d0:2e:00:df:af:07:74:1a:08:96:ec:97:15:fb: 6b:60:d2:bd:a4:b0:a5:0c:e1:40:2e:40:eb:b5:24: 09:97:fa:83:cb:de:bc:b1:ef:1c:28:09:33:a8:56: e3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:22:C1:A1:FA:72:0F:31:3F:5F:65:34:F1:0E:FD:90:7E:AB:C3:BB X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:88:02:57:a5:6b:da:e3:e2:c8:06:e9:6a:b6:df:9c:42:0e: 89:4f:a5:5c:22:ae:5c:16:e9:a9:81:2d:30:a0:ce:d3:28:99: c7:05:97:6e:10:9c:fc:86:7c:ad:09:36:56:25:02:dc:d5:24: 26:b9:ca:4d:aa:4e:d4:eb:29:01:41:38:e9:d3:b9:04:e4:4d: a8:a7:11:e3:d3:e5:ce:d8:8c:2c:5a:e4:50:58:e6:a5:6b:30: 3e:4d:f0:ca:87:23:b2:bf:1c:e4:58:b0:bd:52:9f:a7:53:a0: fb:88:ae:b3:50:de:7d:a0:27:54:cd:2b:54:b1:3d:c5:e4:c3: 87:d4:df:f5:09:10:0a:5c:85:38:5a:8f:c6:c4:d8:c1:f8:8a: 1e:4f:e7:bd:ef:17:32:93:79:39:b5:4c:47:0a:2c:56:d9:3f: ea:ad:12:64:79:55:85:4d:68:21:aa:09:0f:a0:bc:b4:d3:86: 85:35:d1:4e:7f:af:03:ed:a0:06:98:9a:c0:9b:de:73:29:85: 7d:92:14:83:c2:fd:30:b5:d0:d4:26:19:b2:2d:b2:a8:9a:ed: 2b:52:82:23:6d:43:26:41:03:d2:a5:1f:9b:9d:3c:fd:07:83: 03:93:71:a1:e1:db:e7:70:e2:20:d0:02:33:f9:7a:fe:61:d7: a8:80:d9:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUwNzA0MTc0MTI1WhcNMjUwNzExMTc0MTI1WjAYMRYwFAYD VQQDEw02ODY4MTI0Ni01ZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzF3WPMQXEu+PlHvaj7MLzfGzr/put2eZe7hZoZAgUEx5GFq8opc1YNMMMNUX wEPYzHa5O4f0X79U9GpAuM4lsERDGlFqXetRtKn3AF25ODdGexmho7egJ663ocC2 x2T7HtenGbi0QU+ECRSMhogBNk0iA/LpXYlCZdYDd4uLT9W9XZsaatO1aiHlvFox pPulyWjr/vgqt7Kd/hox6aPt4bqnYIVLFAB1bSaW/WmfwVwa0bM55Sg88Da6yA8I 4ANQKzE6OzO+ZrflNPj67yKkUG3x0C4A368HdBoIluyXFftrYNK9pLClDOFALkDr tSQJl/qDy968se8cKAkzqFbjBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEiwaH6 cg8xP19lNPEO/ZB+q8O7MB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZiAJXpWva4+LIBulqtt+cQg6JT6VcIq5cFumpgS0woM7TKJnHBZdu EJz8hnytCTZWJQLc1SQmucpNqk7U6ykBQTjp07kE5E2opxHj0+XO2IwsWuRQWOal azA+TfDKhyOyvxzkWLC9Up+nU6D7iK6zUN59oCdUzStUsT3F5MOH1N/1CRAKXIU4 Wo/GxNjB+IoeT+e97xcyk3k5tUxHCixW2T/qrRJkeVWFTWghqgkPoLy004aFNdFO f68D7aAGmJrAm95zKYV9khSDwv0wtdDUJhmyLbKomu0rUoIjbUMmQQPSpR+bnTz9 B4MDk3Gh4dvncOIg0AIz+Xr+YdeogNnQ -----END CERTIFICATE-----Generated at Sat Jul 5 06:45:48 2025 by rpki-client