$ rpki-client -vvf rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft File: B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft (raw, json) Hash identifier: HWZC50he/4kZnT8P6tLHciLkyYJKfZAmTFooFF3lkTE= Subject key identifier: BD:AB:6E:71:3A:EA:2F:91:A2:A1:65:84:FC:3A:64:71:55:E2:79:65 Authority key identifier: 07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3 Certificate issuer: /CN=A91C13E1/serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft Manifest number: DD Signing time: Tue 01 Jul 2025 06:05:59 +0000 Manifest this update: Tue 01 Jul 2025 06:05:59 +0000 Manifest next update: Tue 08 Jul 2025 06:05:59 +0000 Files and hashes: 1: B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl (hash: t7yYlNJkJFBMRtQ6XF6MEVAOT0NOxQqLGA+xSxMeKu8=) 2: 5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa (hash: zw1ksNYvuYvz/L+PTYal5s6UlMhRxYj97KDb6gSbQJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C13E1, serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3 Validity Not Before: Jul 1 06:05:59 2025 GMT Not After : Jul 8 06:05:59 2025 GMT Subject: CN=68637ac7-f020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:30:1f:fa:91:86:04:2d:fa:9a:d8:d6:76:b5: af:2f:1e:5c:f5:5d:15:de:3d:92:05:4c:42:e0:05: b9:9e:00:73:74:85:33:df:2b:ac:da:5c:54:0d:4a: 31:65:48:ad:b9:8a:41:ee:4f:da:78:7a:4e:99:5d: c0:ef:b3:8a:5c:a6:cf:cb:72:c9:ac:ee:39:db:57: ed:55:85:be:c2:aa:d2:4c:7c:c3:97:f2:c8:29:6e: cc:57:1d:41:03:86:9c:dc:9f:4f:96:44:3b:e2:fd: 12:12:ea:ac:bc:de:e8:16:61:6e:1f:c4:2b:8d:df: 66:1f:c2:52:1e:eb:64:b1:98:f5:f0:06:52:e8:62: 42:49:a6:88:39:25:2a:1a:52:bf:8a:3b:a9:83:a5: f0:b2:97:33:a4:89:af:84:f2:3f:0a:38:ca:a4:fb: 4d:24:48:34:ec:c2:97:99:78:d5:4d:18:8f:c0:9c: df:32:2c:00:36:16:16:ce:f4:0c:50:7d:1b:7f:67: 06:d3:40:51:1c:83:6a:b1:d0:b6:c9:20:c6:b5:6e: 79:91:2b:2f:c9:00:c3:46:42:22:2c:f4:f3:3e:8e: cd:4c:5d:97:0f:92:4c:42:df:c5:00:4c:7b:98:10: 6e:21:cc:19:df:e5:2e:cc:a7:3a:82:2d:72:d5:44: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:6E:71:3A:EA:2F:91:A2:A1:65:84:FC:3A:64:71:55:E2:79:65 X509v3 Authority Key Identifier: keyid:07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8f:77:4c:ad:ef:84:7d:16:81:d0:b7:2a:2f:df:54:48:6a: 07:a5:21:85:c9:ba:84:48:09:db:9e:24:24:de:8c:4b:12:4a: 2a:23:73:8d:f6:3a:31:56:3b:41:63:37:f7:da:dd:96:de:db: 7a:1e:54:e4:90:13:34:72:1d:ef:25:ef:a5:ca:c7:d1:ba:ab: 90:70:88:c5:da:53:17:e4:e4:14:cc:ba:8b:a5:d3:69:9a:04: 89:87:80:e5:9e:7c:56:6a:39:e9:95:e4:02:87:07:76:da:87: ea:5c:59:a4:ca:b5:ff:a2:86:58:3c:d6:8c:94:cc:3f:1f:fb: c5:fb:a1:da:aa:b7:c3:dd:88:84:c4:71:21:a3:17:be:d4:72: f8:38:cb:a1:eb:db:5e:ab:2b:92:10:fa:d7:c3:45:c1:82:c3: 1f:4e:30:8b:84:96:6a:1e:0b:f2:42:72:ed:c3:9b:0e:c8:7d: 3f:6c:08:84:6f:8e:5a:aa:6e:68:87:a1:87:8a:44:8a:cd:a6: 36:9d:60:65:7a:fb:93:9e:ed:00:cc:6e:ae:a4:22:57:fe:77: 85:b1:df:80:e7:fb:d6:1b:af:5f:7f:62:b9:af:fc:f5:43:7a: c0:d7:3b:8d:22:f7:e5:3b:ee:a0:43:03:c0:70:e3:e6:d7:f3: 73:48:88:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzRTExMTAvBgNVBAUTKDA3N0JFQTlCRkUzMDA2NDYxNjVDMzQzNkM3RDRDQzM4 MzQ2QzZCQTMwHhcNMjUwNzAxMDYwNTU5WhcNMjUwNzA4MDYwNTU5WjAYMRYwFAYD VQQDEw02ODYzN2FjNy1mMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DAf+pGGBC36mtjWdrWvLx5c9V0V3j2SBUxC4AW5ngBzdIUz3yus2lxUDUox ZUituYpB7k/aeHpOmV3A77OKXKbPy3LJrO4521ftVYW+wqrSTHzDl/LIKW7MVx1B A4ac3J9PlkQ74v0SEuqsvN7oFmFuH8Qrjd9mH8JSHutksZj18AZS6GJCSaaIOSUq GlK/ijupg6XwspczpImvhPI/CjjKpPtNJEg07MKXmXjVTRiPwJzfMiwANhYWzvQM UH0bf2cG00BRHINqsdC2ySDGtW55kSsvyQDDRkIiLPTzPo7NTF2XD5JMQt/FAEx7 mBBuIcwZ3+UuzKc6gi1y1UTtgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2rbnE6 6i+RoqFlhPw6ZHFV4nllMB8GA1UdIwQYMBaAFAd76pv+MAZGFlw0NsfUzDg0bGuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTNFMS84MkZERjkxQTA1 RkMxMUVGOEE1RkMzNjhDNEY5QUUwMi9CM3ZxbV80d0JrWVdYRFEyeDlUTU9EUnNh Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IzdnFtXzR3QmtZV1hEUTJ4OVRNT0RSc2E2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTNFMS84MkZERjkxQTA1RkMxMUVGOEE1RkMzNjhDNEY5QUUwMi9CM3ZxbV80d0Jr WVdYRFEyeDlUTU9EUnNhNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBej3dMre+EfRaB0LcqL99USGoHpSGFybqESAnbniQk3oxLEkoqI3ON 9joxVjtBYzf32t2W3tt6HlTkkBM0ch3vJe+lysfRuquQcIjF2lMX5OQUzLqLpdNp mgSJh4DlnnxWajnpleQChwd22ofqXFmkyrX/ooZYPNaMlMw/H/vF+6HaqrfD3YiE xHEhoxe+1HL4OMuh69teqyuSEPrXw0XBgsMfTjCLhJZqHgvyQnLtw5sOyH0/bAiE b45aqm5oh6GHikSKzaY2nWBlevuTnu0AzG6upCJX/neFsd+A5/vWG69ff2K5r/z1 Q3rA1zuNIvflO+6gQwPAcOPm1/NzSIid -----END CERTIFICATE-----Generated at Thu Jul 3 07:12:24 2025 by rpki-client