$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: 4JPLZWrkVXMJC1pxgHRvw7AYgxYFjBJTdHAw3eDT9H8= Subject key identifier: 37:A6:9A:E5:8A:61:79:29:2B:5A:24:F1:33:88:82:81:E5:B0:D3:15 Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 014E Signing time: Sun 29 Jun 2025 03:16:23 +0000 Manifest this update: Sun 29 Jun 2025 03:16:22 +0000 Manifest next update: Sun 06 Jul 2025 03:16:22 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: 1vAjNDivrmrTpnRrlLjhjhOWR1WEi9XtNxY3VVJ5rmg=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: Jun 29 03:16:22 2025 GMT Not After : Jul 6 03:16:22 2025 GMT Subject: CN=6860b006-8aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:9b:ea:bf:d4:0d:ee:e6:da:13:78:2f:5d: 24:1c:cb:71:c9:2b:6f:17:32:a1:81:53:4b:e3:d4: ce:6b:df:93:05:64:75:21:12:b8:61:53:02:7a:3a: bf:f8:55:46:67:15:d8:ec:4a:3c:db:ca:99:a7:4a: 6a:2b:53:a9:0e:3f:b1:f3:6d:e7:27:f8:00:a7:87: c0:bd:b2:0b:83:e6:31:c6:28:4c:c8:b7:d9:b3:d8: e3:c1:0c:1b:b2:f5:89:f4:9a:99:3b:ce:a8:df:b4: 7e:a8:4f:7d:7f:00:81:d7:7f:1d:e8:28:d2:2f:04: 3d:97:94:da:be:a5:5f:f8:f3:71:6e:b7:52:f7:45: 9a:e8:9a:f2:e0:db:73:28:81:c6:ef:4a:a7:c8:52: 63:6e:d4:7d:ad:c8:6d:66:7c:fc:12:3d:20:4e:de: 41:ff:9d:53:50:9f:46:91:2c:ca:79:3a:5a:de:3b: 14:16:1a:1f:da:29:3b:ed:d3:c3:a5:4d:fd:ce:9d: 90:9f:39:b3:27:d0:02:ee:73:c8:87:15:1c:cd:e4: 95:89:49:00:4b:7f:91:fc:15:60:5d:be:92:4b:03: 4b:aa:3e:50:ef:e6:91:b4:db:06:03:d2:6b:2f:5d: 01:57:b3:19:24:da:7a:17:f8:d1:e9:c5:d9:b2:f2: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A6:9A:E5:8A:61:79:29:2B:5A:24:F1:33:88:82:81:E5:B0:D3:15 X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5e:5f:3f:66:2e:00:d5:3e:f8:26:b5:51:f6:e6:b5:42:c4: f5:05:70:bf:79:a3:ae:19:19:04:9c:02:17:19:05:27:16:31: c1:25:b0:7b:70:a9:a0:d2:d3:6a:7c:2d:5e:c7:e7:e0:7d:8a: 73:c5:e5:8f:eb:af:f6:c2:44:53:43:a3:49:e7:d5:e9:a1:db: 24:2c:1c:92:5b:5e:2b:0b:ad:b7:75:00:5d:2c:9e:e0:13:c7: 0d:74:52:ac:80:56:b3:bd:23:90:99:05:5b:42:8d:b5:bc:1a: 8e:8f:e1:cb:a2:c8:1b:ee:a9:1b:e0:43:9f:1b:d4:39:cd:6e: 67:fb:a0:b2:2f:0b:dc:02:41:a2:04:a4:24:e4:96:c4:00:ec: d6:dc:86:79:57:89:a0:89:ed:ac:d3:4c:2b:c1:87:18:74:bc: ab:51:0f:68:06:e3:64:34:d4:2a:cc:a4:a7:3d:a6:a6:5b:88: 8a:db:6b:a1:fe:fb:13:57:8e:81:29:9d:b6:9d:4a:9f:57:75: fd:af:d8:47:fe:20:04:af:93:a9:d5:4e:36:a9:23:60:68:12: 37:c8:35:6f:fd:ab:e4:11:5b:e8:3e:d3:cb:8e:8c:0a:85:73: cf:10:14:08:ee:c1:ed:8f:cd:6f:bf:79:4f:fe:e3:f6:8c:2c: c6:c5:f5:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUwNjI5MDMxNjIyWhcNMjUwNzA2MDMxNjIyWjAYMRYwFAYD VQQDEw02ODYwYjAwNi04YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwimb6r/UDe7m2hN4L10kHMtxyStvFzKhgVNL49TOa9+TBWR1IRK4YVMCejq/ +FVGZxXY7Eo828qZp0pqK1OpDj+x823nJ/gAp4fAvbILg+YxxihMyLfZs9jjwQwb svWJ9JqZO86o37R+qE99fwCB138d6CjSLwQ9l5TavqVf+PNxbrdS90Wa6Jry4Ntz KIHG70qnyFJjbtR9rchtZnz8Ej0gTt5B/51TUJ9GkSzKeTpa3jsUFhof2ik77dPD pU39zp2QnzmzJ9AC7nPIhxUczeSViUkAS3+R/BVgXb6SSwNLqj5Q7+aRtNsGA9Jr L10BV7MZJNp6F/jR6cXZsvLJFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDemmuWK YXkpK1ok8TOIgoHlsNMVMB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANXl8/Zi4A1T74JrVR9ua1QsT1BXC/eaOuGRkEnAIXGQUnFjHBJbB7 cKmg0tNqfC1ex+fgfYpzxeWP66/2wkRTQ6NJ59XpodskLBySW14rC623dQBdLJ7g E8cNdFKsgFazvSOQmQVbQo21vBqOj+HLosgb7qkb4EOfG9Q5zW5n+6CyLwvcAkGi BKQk5JbEAOzW3IZ5V4mgie2s00wrwYcYdLyrUQ9oBuNkNNQqzKSnPaamW4iK22uh /vsTV46BKZ22nUqfV3X9r9hH/iAEr5Op1U42qSNgaBI3yDVv/avkEVvoPtPLjowK hXPPEBQI7sHtj81vv3lP/uP2jCzGxfWd -----END CERTIFICATE-----Generated at Tue Jul 1 04:30:35 2025 by rpki-client