$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json) Hash identifier: hEwkitEFGfWi47tkSau8C0bUQssD9pMvIj8c/1HRk1A= Subject key identifier: 6E:A5:47:B7:4D:69:07:1B:29:DC:0B:F7:7B:EA:C9:A5:87:67:8E:13 Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Certificate serial: 18A3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft Manifest number: 189D Signing time: Wed 02 Jul 2025 15:55:27 +0000 Manifest this update: Wed 02 Jul 2025 15:55:27 +0000 Manifest next update: Wed 09 Jul 2025 15:55:27 +0000 Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: qQ31lvtCAMaz0gXp62m/p/NXX/hOi4LYFLW34zTY7e0=) 2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: WuIJH5EmbtRmJmFCN//mGN8XhCDwfYBWN+2IltuHvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6307 (0x18a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Validity Not Before: Jul 2 15:55:27 2025 GMT Not After : Jul 9 15:55:27 2025 GMT Subject: CN=6865566f-ff6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:0a:fb:c0:21:a3:81:56:6f:bd:3a:dc:e2: dc:5e:96:da:0d:cd:1c:14:3d:62:3e:b3:0a:8b:ca: cb:d2:1b:d3:05:c8:47:3f:38:6e:47:83:0b:c2:86: a0:f5:4b:64:12:83:37:f4:47:7e:5b:14:41:17:23: b4:ff:1c:29:37:c5:43:d6:9f:18:a2:1a:76:95:bf: 0a:1d:80:46:cf:68:61:dd:b0:3c:fc:20:1d:4e:01: 6d:3f:73:26:92:bf:bb:dd:b8:90:0b:69:16:f4:1d: c4:ff:37:cb:fc:f0:f7:e3:88:f9:5d:4b:f1:d3:49: b1:3a:38:8d:8c:2c:ba:df:6f:a7:47:b2:e0:e8:09: b9:02:de:66:7b:24:7f:90:2a:df:d0:aa:bf:ca:9b: 00:78:88:bc:b9:6d:14:63:b8:e8:ce:ce:98:83:65: e9:19:57:53:72:93:27:fa:5d:2f:14:8f:41:d4:57: c5:c1:99:d9:fa:49:9e:80:35:aa:f3:6a:ce:c6:a0: 35:24:25:0b:67:9e:ee:80:b2:39:0e:2f:1a:5b:cf: de:75:ae:3d:66:d3:e4:1e:14:52:6d:74:42:3b:b4: 52:be:c0:c2:30:8b:45:07:90:77:6c:b5:11:2c:05: c7:eb:c4:77:c4:92:f1:d5:bd:df:48:5c:fe:5c:8f: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A5:47:B7:4D:69:07:1B:29:DC:0B:F7:7B:EA:C9:A5:87:67:8E:13 X509v3 Authority Key Identifier: keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:38:21:4b:c7:95:d3:66:da:fc:0c:99:45:94:0e:29:da:e3: 0b:9d:c3:32:16:fc:e6:70:60:21:33:21:49:bf:46:d9:52:72: 1a:00:6e:05:0b:59:c5:6d:42:b2:02:e7:c1:67:e6:86:cb:2a: 8f:69:7f:28:95:77:1f:0e:60:b7:06:23:cd:dd:b1:17:e4:08: 6f:18:ee:e2:7e:1e:c3:cd:c5:1c:f6:b3:2a:df:42:9e:64:d2: 13:62:d2:41:e9:2d:b3:c3:c2:d4:76:d0:a1:d9:a5:4b:3d:7b: 40:91:1f:9d:11:b3:7b:9d:83:95:a5:26:5c:66:13:89:ad:2e: 6f:c5:bc:77:b3:45:92:26:4e:29:0f:54:89:09:fd:d4:6a:f0: 80:85:d6:b3:89:2c:b8:b5:d2:6a:fd:be:d7:46:40:c7:92:7c: 62:6c:f5:12:03:8d:97:02:de:0a:20:6d:9a:70:06:0b:f8:93: 69:99:5d:85:aa:bc:91:68:87:cc:86:04:18:6f:0b:71:7a:3c: 6b:96:f0:20:1a:97:4f:d6:26:2b:e3:90:08:ce:56:a2:a8:e3: 6b:4a:98:4f:fc:22:82:84:6f:85:ce:0b:98:a7:9a:88:16:e5: 72:f1:bf:7a:4f:5e:cc:00:3a:57:c6:c8:1d:fb:5e:35:7e:b6: 3d:95:bd:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2 MTFDQURBNTEwHhcNMjUwNzAyMTU1NTI3WhcNMjUwNzA5MTU1NTI3WjAYMRYwFAYD VQQDEw02ODY1NTY2Zi1mZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeQK+8Aho4FWb7063OLcXpbaDc0cFD1iPrMKi8rL0hvTBchHPzhuR4MLwoag 9UtkEoM39Ed+WxRBFyO0/xwpN8VD1p8Yohp2lb8KHYBGz2hh3bA8/CAdTgFtP3Mm kr+73biQC2kW9B3E/zfL/PD344j5XUvx00mxOjiNjCy632+nR7Lg6Am5At5meyR/ kCrf0Kq/ypsAeIi8uW0UY7jozs6Yg2XpGVdTcpMn+l0vFI9B1FfFwZnZ+kmegDWq 82rOxqA1JCULZ57ugLI5Di8aW8/eda49ZtPkHhRSbXRCO7RSvsDCMItFB5B3bLUR LAXH68R3xJLx1b3fSFz+XI/tjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6lR7dN aQcbKdwL93vqyaWHZ44TMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs Z3ZGYTNlN254b0poSEsybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuOCFLx5XTZtr8DJlFlA4p2uMLncMyFvzmcGAhMyFJv0bZUnIaAG4F C1nFbUKyAufBZ+aGyyqPaX8olXcfDmC3BiPN3bEX5AhvGO7ifh7DzcUc9rMq30Ke ZNITYtJB6S2zw8LUdtCh2aVLPXtAkR+dEbN7nYOVpSZcZhOJrS5vxbx3s0WSJk4p D1SJCf3UavCAhdaziSy4tdJq/b7XRkDHknxibPUSA42XAt4KIG2acAYL+JNpmV2F qryRaIfMhgQYbwtxejxrlvAgGpdP1iYr45AIzlaiqONrSphP/CKChG+FzguYp5qI FuVy8b96T17MADpXxsgd+141frY9lb0h -----END CERTIFICATE-----Generated at Fri Jul 4 15:07:47 2025 by rpki-client