$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: zL75F3nTnh7D5Lwxdk8eLrEHyTWYMSThG8qRF8Ydbbc= Subject key identifier: 69:D1:53:47:AB:EE:7E:94:FA:C5:A8:9A:DE:D9:68:E9:C2:31:08:01 Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: 88 Signing time: Tue 01 Jul 2025 07:17:47 +0000 Manifest this update: Tue 01 Jul 2025 07:17:47 +0000 Manifest next update: Tue 08 Jul 2025 07:17:47 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: EZlnqIuERorbTFNYzsVZlVqXIk/Bwsg9LfZx9ii3ZRI=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: jpoA3nOwURms9S72GBWIhr5w5HiTb8jNg/HLvSF6ab8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Jul 1 07:17:47 2025 GMT Not After : Jul 8 07:17:47 2025 GMT Subject: CN=68638b9b-8521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:24:c4:e0:ac:fa:bf:8e:d2:81:76:6c:8a: 42:71:1d:7f:a4:0e:81:57:11:75:24:7f:c8:72:24: 3b:2c:00:65:dc:96:a0:2b:c0:f2:ad:12:e6:14:d3: 3d:2b:c6:4a:99:c8:19:10:6b:15:85:94:61:26:2d: 7d:22:76:3f:99:af:cc:69:28:be:0b:57:6e:4d:60: 78:97:64:be:f0:98:03:24:cc:44:3a:3f:33:a8:5a: 5a:2d:bc:ce:f1:0f:34:27:6c:fc:8e:04:70:bc:60: f4:80:06:71:aa:58:1c:50:f2:0d:91:65:46:80:55: 07:e9:47:9b:ad:cb:24:f1:95:2a:33:3b:5f:e2:45: 83:fa:9b:f5:2d:dd:2f:86:cc:3f:a4:a9:29:3e:f3: 3a:5b:b8:2d:b3:55:3a:9c:24:0c:8b:1a:c5:18:c7: b2:2a:20:31:17:3a:44:28:3b:14:68:e1:a6:ff:5e: 75:d1:25:92:94:4b:37:6c:84:c9:75:de:c4:b1:8b: a0:cd:60:05:32:c7:40:c9:99:cc:ea:79:04:f9:97: 1b:28:38:8e:f5:0e:e2:99:dc:48:12:18:93:90:e3: 3f:ab:99:dc:70:4e:dd:1f:ae:44:4d:8b:14:77:57: 8b:be:e2:57:7f:a6:e9:47:6b:ff:d7:c8:f4:58:af: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D1:53:47:AB:EE:7E:94:FA:C5:A8:9A:DE:D9:68:E9:C2:31:08:01 X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:26:32:bd:7c:e5:c9:75:20:38:63:59:ad:05:57:ae:6f:54: e7:56:f4:93:b6:13:eb:90:38:d7:0f:91:84:dc:1d:3d:81:80: 4c:e9:0b:69:b0:63:ea:cc:0d:f1:1e:d2:e2:50:ca:a8:60:42: 44:4d:07:e1:3c:cb:f9:4b:b5:79:bb:e4:55:03:b4:d5:4c:db: ce:d4:86:9b:91:c1:b1:38:10:8b:00:59:8e:bb:d4:e8:a0:17: 80:83:18:6f:79:40:44:5a:4b:c0:bb:84:72:3e:12:33:9e:21: 74:89:9a:df:9d:6f:10:56:21:14:9b:e9:37:a7:e2:aa:f7:0c: bc:a3:3b:09:f2:f9:63:ab:80:01:12:5e:d5:59:d7:e9:4d:81: e2:1b:36:44:dd:30:af:7e:36:7a:61:c0:c6:8c:78:84:18:49: 36:e7:c2:e8:f0:e8:27:77:cb:06:f6:33:8f:c8:f6:88:5a:b3: a9:72:42:db:8b:3a:60:fc:c6:ab:f9:01:17:79:f2:94:54:a9: e6:9d:bb:9b:31:e9:e5:70:2f:1a:23:d5:c9:0e:96:20:82:a0: 01:32:fd:2e:d8:6d:86:7f:d2:06:b0:14:16:a8:8c:9c:1f:a6: d8:6d:a7:87:da:b8:dc:4d:f1:a5:6b:28:a4:e5:f4:5e:94:f9: 0f:e5:33:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4 RTkyRDI1MjQwHhcNMjUwNzAxMDcxNzQ3WhcNMjUwNzA4MDcxNzQ3WjAYMRYwFAYD VQQDEw02ODYzOGI5Yi04NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukEkxOCs+r+O0oF2bIpCcR1/pA6BVxF1JH/IciQ7LABl3JagK8DyrRLmFNM9 K8ZKmcgZEGsVhZRhJi19InY/ma/MaSi+C1duTWB4l2S+8JgDJMxEOj8zqFpaLbzO 8Q80J2z8jgRwvGD0gAZxqlgcUPINkWVGgFUH6Uebrcsk8ZUqMztf4kWD+pv1Ld0v hsw/pKkpPvM6W7gts1U6nCQMixrFGMeyKiAxFzpEKDsUaOGm/1510SWSlEs3bITJ dd7EsYugzWAFMsdAyZnM6nkE+ZcbKDiO9Q7imdxIEhiTkOM/q5nccE7dH65ETYsU d1eLvuJXf6bpR2v/18j0WK9vswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnRU0er 7n6U+sWomt7ZaOnCMQgBMB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5 RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr TmxTOUlKTm9JRmVPa3RKU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbJjK9fOXJdSA4Y1mtBVeub1TnVvSTthPrkDjXD5GE3B09gYBM6Qtp sGPqzA3xHtLiUMqoYEJETQfhPMv5S7V5u+RVA7TVTNvO1IabkcGxOBCLAFmOu9To oBeAgxhveUBEWkvAu4RyPhIzniF0iZrfnW8QViEUm+k3p+Kq9wy8ozsJ8vljq4AB El7VWdfpTYHiGzZE3TCvfjZ6YcDGjHiEGEk258Lo8Ognd8sG9jOPyPaIWrOpckLb izpg/Mar+QEXefKUVKnmnbubMenlcC8aI9XJDpYggqABMv0u2G2Gf9IGsBQWqIyc H6bYbaeH2rjcTfGlayik5fRelPkP5TPv -----END CERTIFICATE-----Generated at Tue Jul 1 14:05:27 2025 by rpki-client