$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: KhonFzrHIeMpvLwjGDu5fiRfNK3TPilELfsx0ZOPj/s= Subject key identifier: 85:31:6C:73:FC:7B:DB:6A:09:9A:3A:B4:35:AF:DD:5A:DC:6B:C1:4C Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1D2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1D1B Signing time: Mon 30 Jun 2025 16:18:46 +0000 Manifest this update: Mon 30 Jun 2025 16:18:45 +0000 Manifest next update: Mon 07 Jul 2025 16:18:45 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: TuokGMlSOL44F5O1lV6kxib+Vf1qoQ+HUWCnq1u8pLY=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: kc6Qio1nm2R7Nmekjn2RQdz6FiLOSkIgyD8v0SWSLok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7471 (0x1d2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Jun 30 16:18:45 2025 GMT Not After : Jul 7 16:18:45 2025 GMT Subject: CN=6862b8e5-b7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:df:9c:40:01:50:05:16:95:6f:2f:4c:bf: 49:48:8a:21:64:13:be:73:1e:cd:b0:34:f2:67:d2: c8:ea:7b:ed:f6:b6:13:2b:68:df:1b:4c:04:5c:0c: 27:2f:2d:5e:c7:dc:d5:73:19:fb:c8:b5:44:58:9b: 08:16:89:e8:86:bc:76:47:65:26:24:fb:81:c9:4c: 93:13:e3:5e:b7:d3:75:b3:d0:52:23:46:18:e9:07: f5:a0:cc:06:2d:09:71:a6:95:54:24:7a:49:62:98: 93:ef:5a:25:7e:c6:0b:8e:ec:9e:5f:3d:7b:d0:c7: c7:c8:46:84:7b:e9:e2:4c:a2:67:95:0c:14:50:81: 84:b0:7d:f1:3e:37:62:49:11:2d:74:c8:63:2a:5e: e0:be:66:76:be:a4:2a:0a:36:a0:d3:95:a6:f3:1c: dc:57:9b:b0:55:5d:bd:e8:b8:4b:93:b0:d1:09:79: 60:ee:17:50:87:1d:11:39:af:f1:37:4c:b8:36:1b: b6:c2:6f:20:6e:ef:2b:df:e7:62:b9:a9:87:ec:64: 2f:13:37:90:90:94:f9:c1:c1:54:c2:19:89:6a:a0: 15:a2:66:82:9c:11:5e:52:b1:af:77:0c:85:4f:a6: bb:c9:17:cc:8d:1d:c8:de:c6:c8:7e:ce:6c:1a:2c: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:31:6C:73:FC:7B:DB:6A:09:9A:3A:B4:35:AF:DD:5A:DC:6B:C1:4C X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:85:08:d6:fe:f6:7c:8a:8f:d7:5f:9e:00:ad:8e:ff:42:da: 72:cd:97:0e:ed:20:b8:60:ac:e6:08:95:47:16:51:82:e9:8a: 1c:aa:60:31:71:30:46:d5:57:4b:a1:d6:63:d2:56:12:af:b0: d0:2f:56:da:ae:5e:a8:5d:2e:96:1b:c4:dd:09:5c:ea:fe:cf: a7:a5:fe:0b:7d:1b:c6:09:39:8f:27:6e:b6:64:7a:0b:4e:a4: be:54:21:fb:2a:ed:22:1a:36:3c:d0:de:c1:40:ab:04:a3:be: 56:25:12:a9:24:1e:ed:64:8d:3f:1f:76:2c:73:8e:e6:9a:f4: 44:8b:69:92:1d:9c:5a:af:a4:51:a9:7d:f5:b6:9b:4b:2c:f5: 67:c7:bf:24:8d:7f:6a:37:9c:59:6e:ef:93:16:09:6b:e2:fe: 45:2e:af:2c:2f:2c:d9:45:30:e4:9a:1d:c4:97:6b:10:c7:d4: 45:68:d6:d1:96:00:36:c2:b7:d9:71:0a:df:21:68:a8:b3:7e: c1:51:aa:2c:e9:8b:0d:bd:e1:9c:60:b9:fd:af:f2:dd:36:7f: 55:6b:b0:87:4c:0d:bb:dd:8c:1d:6d:3f:5d:b8:e4:e7:2f:8d: 31:4f:e1:e0:45:45:7e:b7:2b:15:97:03:11:c7:2a:cd:72:e7: f8:9c:a9:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjUwNjMwMTYxODQ1WhcNMjUwNzA3MTYxODQ1WjAYMRYwFAYD VQQDEw02ODYyYjhlNS1iN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuXfnEABUAUWlW8vTL9JSIohZBO+cx7NsDTyZ9LI6nvt9rYTK2jfG0wEXAwn Ly1ex9zVcxn7yLVEWJsIFonohrx2R2UmJPuByUyTE+Net9N1s9BSI0YY6Qf1oMwG LQlxppVUJHpJYpiT71olfsYLjuyeXz170MfHyEaEe+niTKJnlQwUUIGEsH3xPjdi SREtdMhjKl7gvmZ2vqQqCjag05Wm8xzcV5uwVV296LhLk7DRCXlg7hdQhx0ROa/x N0y4Nhu2wm8gbu8r3+diuamH7GQvEzeQkJT5wcFUwhmJaqAVomaCnBFeUrGvdwyF T6a7yRfMjR3I3sbIfs5sGix+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUxbHP8 e9tqCZo6tDWv3Vrca8FMMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAhQjW/vZ8io/XX54ArY7/QtpyzZcO7SC4YKzmCJVHFlGC6YocqmAx cTBG1VdLodZj0lYSr7DQL1barl6oXS6WG8TdCVzq/s+npf4LfRvGCTmPJ262ZHoL TqS+VCH7Ku0iGjY80N7BQKsEo75WJRKpJB7tZI0/H3Ysc47mmvREi2mSHZxar6RR qX31tptLLPVnx78kjX9qN5xZbu+TFglr4v5FLq8sLyzZRTDkmh3El2sQx9RFaNbR lgA2wrfZcQrfIWios37BUaos6YsNveGcYLn9r/LdNn9Va7CHTA273YwdbT9duOTn L40xT+HgRUV+tysVlwMRxyrNcuf4nKmd -----END CERTIFICATE-----Generated at Wed Jul 2 10:18:21 2025 by rpki-client