$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json) Hash identifier: AwM+bnRnmQSF9Vop5RVlwEzM7RsaYIoMBl0m5DjLMJ0= Subject key identifier: 62:73:2D:9E:5A:13:25:F6:E3:26:56:71:16:4B:5D:6F:EC:97:46:2E Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Certificate serial: 15D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft Manifest number: 15CF Signing time: Wed 02 Jul 2025 16:54:29 +0000 Manifest this update: Wed 02 Jul 2025 16:54:28 +0000 Manifest next update: Wed 09 Jul 2025 16:54:28 +0000 Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: iRpODNodErcpy7dYuL7cvNARt/sP7RO7lrOcNnmakCc=) 2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: Xq7aDp/RYbNUbH8lamtxHtlBICT7QgYLuIupGmw4yJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5591 (0x15d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Validity Not Before: Jul 2 16:54:28 2025 GMT Not After : Jul 9 16:54:28 2025 GMT Subject: CN=68656445-c850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:e8:1d:1e:68:06:c3:ce:4e:b1:88:98:f2: 0c:3b:e2:82:78:38:95:d1:a8:44:33:14:ad:df:50: 71:ad:de:23:83:20:a0:e9:de:25:4f:2f:ad:5c:0b: 21:bb:b8:ae:8d:70:d5:62:b0:6f:38:ba:d9:1f:ac: 80:49:96:73:7a:f6:96:dd:cb:34:7b:3b:2b:34:a2: ab:8b:ba:53:d1:6c:c1:fa:60:82:98:b3:b5:93:fa: 21:bd:79:7c:16:3b:cf:42:a1:3b:10:89:9e:ac:02: 7e:3f:08:2b:29:e7:75:04:e7:c8:92:ff:b7:ba:dd: 62:9c:63:de:91:b5:46:54:28:09:d4:88:ed:b5:8f: a8:74:2b:48:75:27:fd:91:98:06:64:f0:db:af:b7: 3e:9e:18:52:23:74:67:44:5b:17:7b:e3:86:d7:9b: 77:0b:05:da:31:df:9e:c0:db:16:7a:3d:d5:19:8a: 10:a8:1a:bf:65:d8:a1:ad:13:62:7a:2b:fd:71:11: e3:77:9b:c1:d2:23:9e:6f:c7:cf:00:fe:9c:db:c9: ca:11:6c:13:01:60:b4:4b:32:e6:c4:1a:1b:78:3a: 71:9b:54:48:38:02:8b:76:93:c7:8f:e1:11:82:2a: 3f:56:15:2f:69:3c:b0:ba:fb:27:a0:72:f5:80:b0: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:73:2D:9E:5A:13:25:F6:E3:26:56:71:16:4B:5D:6F:EC:97:46:2E X509v3 Authority Key Identifier: keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:6a:6d:0f:51:f0:50:b2:b5:d1:50:3c:3c:4a:ae:cb:9c:40: 95:a2:cd:ab:6e:11:06:a5:6d:c2:e1:f6:0a:81:1b:42:8d:42: fd:12:55:36:d2:44:7b:2e:1d:87:95:a5:c6:a9:6f:9f:20:1e: 30:00:c9:8a:8c:54:2e:32:2f:23:f2:a6:d2:e9:0e:50:ce:09: 48:8b:48:9f:09:80:29:fc:77:4a:d9:a2:f9:ce:7a:96:dc:64: 13:20:6f:01:5d:2a:5d:a4:d7:25:ed:8d:f7:c0:46:42:60:23: 6e:c7:6f:b2:cc:ee:ec:54:9f:e2:c8:08:9e:5e:8d:f1:b5:0c: 0a:68:6f:12:e2:18:2a:e7:8d:71:8a:c5:b1:52:ee:27:13:84: 5d:23:c3:1b:b9:12:68:d2:68:53:ad:af:ce:fb:bf:21:00:24: 84:b6:fd:72:c5:94:46:49:0e:0f:da:e0:bb:08:4e:90:80:70: 61:31:97:ae:5a:9b:77:25:2a:40:15:a3:d5:51:8e:65:f5:89: 81:59:b9:3d:c1:7a:48:79:90:b0:f2:74:55:8f:fa:d4:6f:1f: 92:11:6e:0f:42:de:d5:a8:ad:37:74:7e:67:00:df:92:e6:fc: b2:bc:6b:e2:7b:71:3d:71:3c:a7:c3:9b:05:55:16:1e:23:a7: f5:a9:56:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0 MzRERjQ1NDAwHhcNMjUwNzAyMTY1NDI4WhcNMjUwNzA5MTY1NDI4WjAYMRYwFAYD VQQDEw02ODY1NjQ0NS1jODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuboHR5oBsPOTrGImPIMO+KCeDiV0ahEMxSt31Bxrd4jgyCg6d4lTy+tXAsh u7iujXDVYrBvOLrZH6yASZZzevaW3cs0ezsrNKKri7pT0WzB+mCCmLO1k/ohvXl8 FjvPQqE7EImerAJ+PwgrKed1BOfIkv+3ut1inGPekbVGVCgJ1IjttY+odCtIdSf9 kZgGZPDbr7c+nhhSI3RnRFsXe+OG15t3CwXaMd+ewNsWej3VGYoQqBq/ZdihrRNi eiv9cRHjd5vB0iOeb8fPAP6c28nKEWwTAWC0SzLmxBobeDpxm1RIOAKLdpPHj+ER gio/VhUvaTywuvsnoHL1gLCy7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJzLZ5a EyX24yZWcRZLXW/sl0YuMB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4 MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty a1lDRkNEdm9MVkZEVGZSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYam0PUfBQsrXRUDw8Sq7LnECVos2rbhEGpW3C4fYKgRtCjUL9ElU2 0kR7Lh2HlaXGqW+fIB4wAMmKjFQuMi8j8qbS6Q5QzglIi0ifCYAp/HdK2aL5znqW 3GQTIG8BXSpdpNcl7Y33wEZCYCNux2+yzO7sVJ/iyAieXo3xtQwKaG8S4hgq541x isWxUu4nE4RdI8MbuRJo0mhTra/O+78hACSEtv1yxZRGSQ4P2uC7CE6QgHBhMZeu Wpt3JSpAFaPVUY5l9YmBWbk9wXpIeZCw8nRVj/rUbx+SEW4PQt7VqK03dH5nAN+S 5vyyvGvie3E9cTynw5sFVRYeI6f1qVZT -----END CERTIFICATE-----Generated at Thu Jul 3 03:48:55 2025 by rpki-client