$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft File: 3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json) Hash identifier: QkUZ73jMuBqN2qnNxmEPkX4r4WAkB7DTVykXtk7QegI= Subject key identifier: 2D:AB:BC:72:F7:E9:E8:2F:3E:BF:FE:7E:1A:E3:DB:59:B3:ED:1D:BB Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E Certificate issuer: /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft Manifest number: 0A36 Signing time: Wed 02 Jul 2025 19:58:49 +0000 Manifest this update: Wed 02 Jul 2025 19:58:49 +0000 Manifest next update: Wed 09 Jul 2025 19:58:49 +0000 Files and hashes: 1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: qtG58HwdzLKlzq0grNEWkRGUoq7qvTxnRup1p48XxvU=) 2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: vFM8zP6/yZnn9lA/MIHAlH1VsJ7/4aQRYj46a02OHPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Validity Not Before: Jul 2 19:58:49 2025 GMT Not After : Jul 9 19:58:49 2025 GMT Subject: CN=68658f79-8d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:e5:72:58:9f:d6:88:08:79:31:5b:a6:83: 58:77:f8:9d:e5:cf:6c:9e:11:d0:c8:23:74:b9:4b: e6:65:39:55:f4:9e:98:8c:b0:10:45:14:30:ff:d3: 38:c8:9d:27:8e:4b:35:19:df:19:a5:48:e0:b3:68: ac:29:ed:a9:48:b8:75:e0:f3:cb:ed:de:9a:64:75: 30:d9:9b:8f:c2:a9:10:c8:ad:92:82:f9:20:8e:f5: 40:66:1d:46:11:fa:ea:52:fb:13:d8:32:e0:66:b5: fc:c7:6f:4a:91:a6:04:01:64:d1:d0:ed:a6:a1:4d: a0:68:ad:88:a2:40:c6:a9:00:b3:72:57:08:f1:b3: e1:dd:97:31:a5:50:00:96:99:50:f5:78:3f:2b:db: e9:b0:dc:7c:15:50:45:89:ae:35:25:ce:ce:aa:32: 32:d9:a1:c9:cb:e1:97:e3:b5:f6:e3:ed:9e:2e:1e: be:99:a0:17:1d:42:0c:aa:a7:df:31:ac:9c:35:58: 82:60:ff:08:8e:d8:9d:25:47:1b:fc:23:0a:9c:8e: c7:9d:d5:82:60:4e:b1:fa:6e:05:4c:33:6f:b8:88: a2:80:4d:e4:f1:c7:2d:e7:f9:8a:43:8a:0b:f9:31: 0d:e6:5f:54:76:0d:5b:1f:0b:6b:95:97:94:88:f3: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AB:BC:72:F7:E9:E8:2F:3E:BF:FE:7E:1A:E3:DB:59:B3:ED:1D:BB X509v3 Authority Key Identifier: keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:9d:f4:82:c9:50:2b:dc:33:ed:5d:eb:01:d1:50:d1:e3:63: 0c:25:c6:be:b2:f0:e3:3d:14:4a:1d:d9:1b:42:04:8b:73:10: a1:a4:d7:63:77:b7:44:68:5d:56:cb:bd:39:3a:67:0c:e4:94: 63:12:06:de:e4:74:8f:f7:fb:8e:1c:9f:ed:2c:1f:26:0d:2e: 0b:5e:16:28:2d:1f:75:86:20:1a:32:60:10:39:96:3d:de:0b: 2f:85:fb:3c:de:90:fe:fb:50:e4:a6:96:6b:10:90:f2:4e:1e: 1b:4b:86:92:c4:02:d1:48:62:b7:1d:85:7a:ac:8e:7a:9f:f2: 6c:ad:76:6a:34:36:92:b3:8a:bd:be:3b:96:54:7c:83:0d:a4: 6b:fb:80:93:79:71:91:92:f3:ce:96:12:c6:e1:7c:e1:ac:51: de:a8:5b:cd:ee:07:b0:d7:b5:78:3a:91:c2:28:ec:2e:e4:4c: 9e:75:44:38:d8:f3:a8:51:58:95:bb:9c:46:62:02:de:50:66: d9:37:a8:09:41:5f:2f:31:1c:95:ba:40:a9:80:ac:e1:77:01: 26:26:a0:49:9c:fb:ea:69:62:fe:68:17:b3:c7:12:67:f9:8d: d2:45:a8:09:4c:ef:b1:26:e8:cb:ef:0c:07:1e:d3:29:cd:4d: 08:cb:88:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4MjkxMTAvBgNVBAUTKERDQ0Q1NTM1NTJCQUY4QTY1QzFBMDY2QjMzNDdGNzkz MjQ0RjU3NUUwHhcNMjUwNzAyMTk1ODQ5WhcNMjUwNzA5MTk1ODQ5WjAYMRYwFAYD VQQDEw02ODY1OGY3OS04ZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s7lclif1ogIeTFbpoNYd/id5c9snhHQyCN0uUvmZTlV9J6YjLAQRRQw/9M4 yJ0njks1Gd8ZpUjgs2isKe2pSLh14PPL7d6aZHUw2ZuPwqkQyK2SgvkgjvVAZh1G EfrqUvsT2DLgZrX8x29KkaYEAWTR0O2moU2gaK2IokDGqQCzclcI8bPh3ZcxpVAA lplQ9Xg/K9vpsNx8FVBFia41Jc7OqjIy2aHJy+GX47X24+2eLh6+maAXHUIMqqff MaycNViCYP8IjtidJUcb/CMKnI7HndWCYE6x+m4FTDNvuIiigE3k8cct5/mKQ4oL +TEN5l9Udg1bHwtrlZeUiPPEtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2rvHL3 6egvPr/+fhrj21mz7R27MB8GA1UdIwQYMBaAFNzNVTVSuvimXBoGazNH95MkT1de MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDgyOS85OUQ3QzZBNDZG RUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1LWmNHZ1pyTTBmM2t5UlBW MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNMVZOVks2LUtaY0dnWnJNMGYza3lSUFYxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDgyOS85OUQ3QzZBNDZGRUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1L WmNHZ1pyTTBmM2t5UlBWMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEnfSCyVAr3DPtXesB0VDR42MMJca+svDjPRRKHdkbQgSLcxChpNdj d7dEaF1Wy705OmcM5JRjEgbe5HSP9/uOHJ/tLB8mDS4LXhYoLR91hiAaMmAQOZY9 3gsvhfs83pD++1DkppZrEJDyTh4bS4aSxALRSGK3HYV6rI56n/JsrXZqNDaSs4q9 vjuWVHyDDaRr+4CTeXGRkvPOlhLG4XzhrFHeqFvN7gew17V4OpHCKOwu5EyedUQ4 2POoUViVu5xGYgLeUGbZN6gJQV8vMRyVukCpgKzhdwEmJqBJnPvqaWL+aBezxxJn +Y3SRagJTO+xJujL7wwHHtMpzU0Iy4it -----END CERTIFICATE-----Generated at Thu Jul 3 18:30:02 2025 by rpki-client