$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json) Hash identifier: B0FSR376Ko99wPXIgnUCJt9UVbmyIuDcM9PO2EwrINk= Subject key identifier: A9:0D:F0:36:82:FC:AE:CA:D6:EA:39:B9:32:81:53:C6:7B:33:53:C4 Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft Manifest number: 0645 Signing time: Wed 02 Jul 2025 22:56:36 +0000 Manifest this update: Wed 02 Jul 2025 22:56:35 +0000 Manifest next update: Wed 09 Jul 2025 22:56:35 +0000 Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: Igq/FYEzoA6Z9aj0qB66Ij7LkCPggLRMboy1OOfLg64=) 2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: 4nQWYZbXWSJ3PqE4ZBiXzBzUwOjlbjDx0Oq7v5W8vCQ=) 3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: MzEQJvzOJlRcf4tMcorSrwSuzHCC7BZBlDirsliZQdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Validity Not Before: Jul 2 22:56:35 2025 GMT Not After : Jul 9 22:56:35 2025 GMT Subject: CN=6865b924-b5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:26:08:80:51:de:54:2c:bf:48:a9:09:5e: 20:fa:2d:ce:74:db:f3:3b:02:ea:00:e6:86:08:b1: 09:f0:a3:8b:ad:06:5e:38:6f:f3:57:52:dc:7c:b6: 4c:11:52:eb:dc:ea:94:14:80:2d:c9:f3:18:49:29: e2:c6:d0:dc:75:a1:81:cb:ba:09:65:39:92:50:24: 99:af:cc:df:eb:9f:85:21:b2:1f:d8:01:e8:a8:8e: 73:86:d1:45:fd:65:c1:cf:53:a5:f9:76:b0:93:fd: 6a:20:41:83:1c:3f:61:11:94:ed:47:e2:89:76:77: db:94:a8:3e:16:11:af:02:3f:60:9c:96:d9:4a:be: a2:83:48:c3:87:f6:7c:eb:9a:37:a4:5c:d1:81:4d: f6:50:6f:51:c8:48:62:96:ca:bf:a3:3f:f4:a4:dc: 39:f9:a7:15:0e:30:75:68:47:69:18:39:6e:14:e1: cb:8c:76:32:d7:be:2a:8c:6f:66:6c:b4:39:6a:b5: fd:89:2d:8a:29:82:2b:ac:8d:79:16:0d:5c:6d:59: 2e:75:dc:44:58:ee:6b:70:05:7d:b7:1d:12:ad:73: ed:44:be:aa:ae:5b:35:84:e8:2e:cc:3e:a0:70:77: c4:90:76:d7:de:51:88:c2:5a:f9:3e:24:d0:f7:dc: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0D:F0:36:82:FC:AE:CA:D6:EA:39:B9:32:81:53:C6:7B:33:53:C4 X509v3 Authority Key Identifier: keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f5:b0:ab:72:7c:52:62:4c:f2:2f:ea:e9:d9:8d:2f:10:45: c0:4d:d9:04:52:be:54:7b:e8:e2:7d:f5:0e:bb:08:75:80:04: 50:c3:6a:b4:c3:56:9b:f7:95:60:9d:27:5d:26:9e:aa:fe:dd: 9c:64:a9:fb:48:5d:01:08:28:18:e4:e5:e9:ef:b6:b9:87:be: 75:f6:d2:ac:76:55:3a:24:b2:aa:f3:93:d3:b2:0f:b3:38:c9: ed:82:8f:06:90:02:ab:f1:81:0d:7a:9b:e3:ec:fb:09:27:38: 50:96:90:ed:6b:76:d6:d5:42:3d:34:2d:62:22:63:54:20:10: 0f:6f:9e:42:54:8f:10:79:65:ad:a0:be:85:19:c2:43:52:b2: a8:57:9e:fd:04:f4:9b:f2:5a:5b:15:69:45:c1:ec:7c:4c:11: 7b:20:62:69:a4:ce:dc:e4:d3:5b:42:63:0f:7c:7a:e4:09:c0: 03:15:48:a9:22:65:0e:35:49:98:33:7c:0e:21:2a:12:7e:c8: 44:22:fa:ae:43:55:cc:0f:97:cf:66:72:30:b7:1b:dd:7a:63: 29:d9:05:47:20:de:76:ee:4e:61:c8:e5:92:3b:3f:30:1a:8d: 9f:75:5a:9b:fe:a3:dc:b7:65:ef:82:cc:7b:e6:c1:a5:c0:6a: 63:fd:49:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQxM0JEMzRGRjM4 NzhFNEVFRDAwHhcNMjUwNzAyMjI1NjM1WhcNMjUwNzA5MjI1NjM1WjAYMRYwFAYD VQQDEw02ODY1YjkyNC1iNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqEmCIBR3lQsv0ipCV4g+i3OdNvzOwLqAOaGCLEJ8KOLrQZeOG/zV1LcfLZM EVLr3OqUFIAtyfMYSSnixtDcdaGBy7oJZTmSUCSZr8zf65+FIbIf2AHoqI5zhtFF /WXBz1Ol+Xawk/1qIEGDHD9hEZTtR+KJdnfblKg+FhGvAj9gnJbZSr6ig0jDh/Z8 65o3pFzRgU32UG9RyEhilsq/oz/0pNw5+acVDjB1aEdpGDluFOHLjHYy174qjG9m bLQ5arX9iS2KKYIrrI15Fg1cbVkuddxEWO5rcAV9tx0SrXPtRL6qrls1hOguzD6g cHfEkHbX3lGIwlr5PiTQ99y83wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkN8DaC /K7K1uo5uTKBU8Z7M1PEMB8GA1UdIwQYMBaAFN8R6SaNBq5Tuvt0E700/zh45O7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0RC9CMkVGM0UzNDk1 RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3JsTzYtM1FUdlRUX09Iams3 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4SHBKbzBHcmxPNi0zUVR2VFRfT0hqazd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0RC9CMkVGM0UzNDk1RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3Js TzYtM1FUdlRUX09Iams3dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR9bCrcnxSYkzyL+rp2Y0vEEXATdkEUr5Ue+jiffUOuwh1gARQw2q0 w1ab95VgnSddJp6q/t2cZKn7SF0BCCgY5OXp77a5h7519tKsdlU6JLKq85PTsg+z OMntgo8GkAKr8YENepvj7PsJJzhQlpDta3bW1UI9NC1iImNUIBAPb55CVI8QeWWt oL6FGcJDUrKoV579BPSb8lpbFWlFwex8TBF7IGJppM7c5NNbQmMPfHrkCcADFUip ImUONUmYM3wOISoSfshEIvquQ1XMD5fPZnIwtxvdemMp2QVHIN527k5hyOWSOz8w Go2fdVqb/qPct2Xvgsx75sGlwGpj/UlA -----END CERTIFICATE-----Generated at Fri Jul 4 08:36:41 2025 by rpki-client