$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: PwjiRBlh8blvb0c3nr2rslh4zrnF2bZ0+Bd519lm1Vw= Subject key identifier: 78:FB:2B:A5:75:1F:74:C5:7F:39:9A:91:42:86:90:FE:59:09:D9:55 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0C58 Signing time: Mon 30 Jun 2025 18:33:35 +0000 Manifest this update: Mon 30 Jun 2025 18:33:35 +0000 Manifest next update: Mon 07 Jul 2025 18:33:35 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: zmP0mdY5jk4lGijTdIFg+p75+9ZT5uUXzLBFenLpv3E=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Jun 30 18:33:35 2025 GMT Not After : Jul 7 18:33:35 2025 GMT Subject: CN=6862d87f-a7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:f5:83:11:8a:d3:f5:30:0d:97:e2:46:41: 67:1d:ad:91:2b:ae:b8:b0:e7:f5:c4:60:ba:d1:d4: ea:33:c7:08:2b:43:5c:fb:10:67:9e:2e:2c:e0:c2: d2:92:2a:45:ba:55:82:5b:38:ea:63:be:4f:a7:e7: 3e:95:fc:4a:ae:13:a5:53:48:22:41:a5:65:05:3f: 71:96:39:46:e3:1c:81:b6:50:7e:4e:1c:de:d6:d2: 36:63:c1:77:d1:81:f3:88:4d:1c:9c:0d:0f:61:17: c4:94:72:b4:e5:ad:5e:a9:37:1d:fe:09:9d:75:48: 3c:85:42:f5:4a:ce:aa:9a:8d:ff:da:b0:1a:2c:da: de:33:02:96:14:c4:e9:a5:9f:f8:fe:a5:3a:b7:04: f5:65:c2:87:4a:04:23:7a:83:71:ff:eb:1f:fe:85: b4:a0:e5:64:1d:97:f9:9b:43:0e:30:67:97:22:ad: bc:e7:e0:6d:66:57:66:05:1f:d0:6f:b5:f9:1a:96: a3:7c:d3:f0:65:ae:b2:2d:6e:d0:b2:6c:ea:65:0a: 13:0a:54:ff:77:10:a2:25:9e:2e:a9:0d:ae:a9:5f: d1:0f:89:6b:c0:b3:9c:65:08:b2:61:5d:8f:cc:21: 5d:e0:28:22:a7:6b:76:02:10:5b:b9:a9:2a:05:03: 26:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FB:2B:A5:75:1F:74:C5:7F:39:9A:91:42:86:90:FE:59:09:D9:55 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e0:b5:1f:50:e1:75:41:a6:46:c9:22:83:1c:f2:3c:40:a0: 30:cd:38:d0:be:90:fb:99:29:c3:26:9e:54:cf:d0:a2:cd:3c: de:bb:c5:60:f9:e1:53:53:f1:b2:94:93:73:5f:e3:fd:a1:5a: e3:1a:8b:e6:75:8f:f9:f6:fc:5b:e7:b9:1d:b7:f0:fe:96:70: a5:dc:8d:6e:46:65:05:91:69:c2:ad:f4:fe:70:d4:a4:29:75: 7e:96:d8:16:66:a0:0a:27:98:ee:96:6c:8d:52:a7:36:f4:b6: a6:d8:ea:1b:57:fe:b2:0e:cd:7e:d8:59:04:59:56:ba:c1:fc: 44:78:9b:bd:bd:f2:d5:bf:2c:25:f2:8a:35:44:4a:e5:0d:f2: 0a:4c:44:2e:79:28:a3:0f:cb:49:f5:15:64:34:3a:7a:e7:3b: 69:13:e5:eb:36:f5:29:2b:7e:3a:6f:3d:81:26:00:b1:5d:aa: 65:4a:89:c3:ec:ba:a1:c5:b5:41:44:91:af:7e:83:e8:58:ae: f6:bb:bb:d6:df:22:fe:7a:e0:77:95:ab:ca:94:d8:3b:ea:77: 5d:c6:8f:fd:b8:bf:3d:57:a9:9a:65:8e:fe:6f:8a:f1:e2:89: 96:d3:0d:26:52:33:b4:6f:f3:e8:3a:b5:55:7d:da:39:6a:86: 05:b0:78:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUwNjMwMTgzMzM1WhcNMjUwNzA3MTgzMzM1WjAYMRYwFAYD VQQDEw02ODYyZDg3Zi1hN2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAT1gxGK0/UwDZfiRkFnHa2RK664sOf1xGC60dTqM8cIK0Nc+xBnni4s4MLS kipFulWCWzjqY75Pp+c+lfxKrhOlU0giQaVlBT9xljlG4xyBtlB+Thze1tI2Y8F3 0YHziE0cnA0PYRfElHK05a1eqTcd/gmddUg8hUL1Ss6qmo3/2rAaLNreMwKWFMTp pZ/4/qU6twT1ZcKHSgQjeoNx/+sf/oW0oOVkHZf5m0MOMGeXIq285+BtZldmBR/Q b7X5GpajfNPwZa6yLW7QsmzqZQoTClT/dxCiJZ4uqQ2uqV/RD4lrwLOcZQiyYV2P zCFd4Cgip2t2AhBbuakqBQMmEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj7K6V1 H3TFfzmakUKGkP5ZCdlVMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW4LUfUOF1QaZGySKDHPI8QKAwzTjQvpD7mSnDJp5Uz9CizTzeu8Vg +eFTU/GylJNzX+P9oVrjGovmdY/59vxb57kdt/D+lnCl3I1uRmUFkWnCrfT+cNSk KXV+ltgWZqAKJ5julmyNUqc29Lam2OobV/6yDs1+2FkEWVa6wfxEeJu9vfLVvywl 8oo1RErlDfIKTEQueSijD8tJ9RVkNDp65ztpE+XrNvUpK346bz2BJgCxXaplSonD 7LqhxbVBRJGvfoPoWK72u7vW3yL+euB3lavKlNg76nddxo/9uL89V6maZY7+b4rx 4omW0w0mUjO0b/PoOrVVfdo5aoYFsHjk -----END CERTIFICATE-----Generated at Wed Jul 2 16:24:11 2025 by rpki-client