$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: 21AbVBRUUQVSIj2SETbgcxoWb4zqnxmln7NbEFMspco= Subject key identifier: 8E:FF:B9:6A:B9:1E:C3:05:CF:45:EA:5B:D6:6D:C3:58:91:02:5D:20 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 34A3 Signing time: Wed 02 Jul 2025 14:36:23 +0000 Manifest this update: Wed 02 Jul 2025 14:36:23 +0000 Manifest next update: Wed 09 Jul 2025 14:36:23 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: /Fb8I5SmbchDp8Plzw5Mhfy83U/7BDBOAm3Kfh00cMM=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco=) 3: 673DC29606B011EFA665703AC4F9AE02.roa (hash: F5Zy7dXCYPL9clQFpPmuH37XP7Qhuqmf+NBAd1W/CM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Jul 2 14:36:23 2025 GMT Not After : Jul 9 14:36:23 2025 GMT Subject: CN=686543e7-ac99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:a2:9c:4b:65:f9:ff:d0:71:48:04:3a:ac: b8:16:7f:b7:52:9c:be:36:60:6c:38:57:9a:92:13: b8:a3:12:c1:39:ac:86:c9:9c:51:c2:e7:9e:c8:5d: 63:4e:e1:b8:f9:20:90:2d:61:ff:22:2b:d4:7f:c0: fe:fa:52:e5:04:28:f0:3d:7c:0d:6c:f7:a7:35:75: ab:d1:0e:70:0b:74:31:d6:63:28:0d:2b:41:95:c6: 47:be:21:fa:5d:1e:78:8d:43:96:f8:78:31:97:0a: 43:7b:97:0b:87:32:4c:39:d9:aa:64:b0:d1:0a:26: 01:57:de:37:e3:6e:9d:aa:5a:88:b8:c8:eb:16:20: 6a:54:02:16:30:6d:96:70:06:fa:87:69:a6:33:0c: d2:0d:46:01:e5:29:67:82:c4:8e:bf:a0:84:fb:93: 6f:ef:a5:28:68:eb:4b:bb:8a:c6:59:94:bd:a0:cc: 36:c7:9d:91:cc:56:ff:4e:eb:db:2d:c3:74:c4:26: cf:9c:4c:0f:87:0c:7d:f4:95:13:79:41:56:86:6b: 92:72:81:f4:a7:0c:e0:49:d8:0a:b0:39:5f:6d:d4: 0f:4f:07:ca:2b:fa:5c:0b:7f:38:ba:9e:af:ae:7d: ab:af:96:d9:ca:86:df:ff:e3:98:bb:4e:ec:84:0c: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FF:B9:6A:B9:1E:C3:05:CF:45:EA:5B:D6:6D:C3:58:91:02:5D:20 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:15:1e:2d:00:8c:be:b7:a0:d4:51:ea:7c:ea:20:76:1f:80: 20:fc:e9:1b:39:68:50:e0:41:3f:2c:85:6e:b1:07:2b:96:b1: 87:89:24:de:de:93:8f:18:3a:47:33:3e:56:53:e0:02:c3:45: cf:fb:07:c0:57:70:8a:7e:ce:d6:07:28:2e:b1:3e:54:31:19: ce:99:3c:b2:e5:19:29:dd:cb:ce:be:07:b4:2e:af:fc:82:a9: 03:f3:1f:cd:0e:5d:69:50:44:5e:90:1c:48:04:af:67:5e:54: f9:56:ed:af:4e:8c:3e:93:c5:05:f5:8f:a3:e5:d8:4d:b9:b7: da:66:ae:6d:97:45:30:43:1f:17:a6:66:5a:10:1b:d9:33:c5: 62:77:f4:cc:63:d6:4a:8d:0d:e0:01:1f:52:d8:ed:8f:11:8f: 52:6f:3d:d9:f6:36:82:dd:b1:17:dd:2c:f5:07:ca:33:7d:94: 68:a0:1c:39:d9:ca:01:47:fa:4a:10:4a:e7:07:21:d5:9f:61: 90:6a:77:21:38:a5:4d:62:c4:80:69:39:db:7e:db:1e:4b:77: 9e:11:db:7a:a7:f7:cf:7c:e4:7b:bc:75:9f:1d:5d:18:e9:21: 81:e9:9d:4d:4d:5b:37:ba:ab:75:d9:1e:0c:c2:55:fc:33:dc: 20:5c:ac:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUwNzAyMTQzNjIzWhcNMjUwNzA5MTQzNjIzWjAYMRYwFAYD VQQDEw02ODY1NDNlNy1hYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojeinEtl+f/QcUgEOqy4Fn+3Upy+NmBsOFeakhO4oxLBOayGyZxRwueeyF1j TuG4+SCQLWH/IivUf8D++lLlBCjwPXwNbPenNXWr0Q5wC3Qx1mMoDStBlcZHviH6 XR54jUOW+HgxlwpDe5cLhzJMOdmqZLDRCiYBV943426dqlqIuMjrFiBqVAIWMG2W cAb6h2mmMwzSDUYB5SlngsSOv6CE+5Nv76UoaOtLu4rGWZS9oMw2x52RzFb/Tuvb LcN0xCbPnEwPhwx99JUTeUFWhmuScoH0pwzgSdgKsDlfbdQPTwfKK/pcC384up6v rn2rr5bZyobf/+OYu07shAzrFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7/uWq5 HsMFz0XqW9Ztw1iRAl0gMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDiFR4tAIy+t6DUUep86iB2H4Ag/OkbOWhQ4EE/LIVusQcrlrGHiSTe 3pOPGDpHMz5WU+ACw0XP+wfAV3CKfs7WBygusT5UMRnOmTyy5Rkp3cvOvge0Lq/8 gqkD8x/NDl1pUERekBxIBK9nXlT5Vu2vTow+k8UF9Y+j5dhNubfaZq5tl0UwQx8X pmZaEBvZM8Vid/TMY9ZKjQ3gAR9S2O2PEY9Sbz3Z9jaC3bEX3Sz1B8ozfZRooBw5 2coBR/pKEErnByHVn2GQanchOKVNYsSAaTnbftseS3eeEdt6p/fPfOR7vHWfHV0Y 6SGB6Z1NTVs3uqt12R4MwlX8M9wgXKwx -----END CERTIFICATE-----Generated at Thu Jul 3 06:32:41 2025 by rpki-client