$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: TF9B78tW5q0IcD2D3qhcHSzS5fTqluoythEbH45os5o= Subject key identifier: 1F:98:ED:BF:BF:24:56:00:F9:15:82:51:39:9A:4C:77:4A:53:17:96 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0C8D Signing time: Wed 02 Jul 2025 18:35:07 +0000 Manifest this update: Wed 02 Jul 2025 18:35:07 +0000 Manifest next update: Wed 09 Jul 2025 18:35:07 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: /ITtMDclbSmqFZ3ShoP+RITZkqmThRR7pSWMI8e0+zc=) 2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: /m7E0Dw/anD8qYNxCWedW44uleLaVBkf0eBmZ6XFvMk=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: rZ4CQjG/7W0/b4/xy8McSOxNbiTi926f91iRcbtKHeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Jul 2 18:35:07 2025 GMT Not After : Jul 9 18:35:07 2025 GMT Subject: CN=68657bdb-3e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:d9:bc:17:c8:65:f6:02:3b:f1:59:a6:e0: cb:55:cf:e8:e3:49:31:9f:a2:01:f7:1f:ba:c7:bc: 12:53:38:93:f1:cf:a8:c3:95:4c:fc:30:16:77:02: ce:bd:99:1b:be:3d:52:7a:de:80:55:8b:88:35:f8: 31:67:e6:0f:fb:21:a3:cf:dc:29:c5:d9:20:53:9a: ce:f6:3a:2a:33:cb:8b:74:42:f4:6c:0c:ae:e9:e4: 9d:6b:0c:d8:c2:bd:ea:f8:57:85:3f:65:16:6a:3c: c8:37:e7:13:43:0e:e9:1d:54:c0:e8:9b:16:69:f4: c3:9c:d2:49:99:be:92:52:75:3a:97:53:b2:29:91: 83:bf:85:df:47:1c:7e:de:25:70:b3:9a:58:5c:2c: 61:b7:74:e1:ec:67:91:d7:77:d1:3e:11:d3:80:79: d8:ab:2e:1e:c9:94:f4:e6:05:45:de:3c:cd:33:c2: 6f:f9:96:77:95:b5:fd:7d:a8:79:ee:2d:a1:eb:91: aa:13:7e:0c:a8:ff:7c:2a:02:14:33:4e:4e:0f:4b: f8:18:61:54:80:38:05:56:b1:2a:18:8a:8d:41:55: 3a:93:c9:0c:ef:13:b5:ab:1c:bf:94:0a:9d:6b:cb: 4b:09:62:bb:f1:df:81:aa:ca:8b:de:37:3b:7f:f0: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:98:ED:BF:BF:24:56:00:F9:15:82:51:39:9A:4C:77:4A:53:17:96 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3e:62:96:d6:b9:c4:d7:b1:6e:e0:61:c0:fc:42:5e:d9:47: e6:fd:97:b7:dc:c5:13:8b:03:0e:1e:ed:c5:2f:d2:f5:92:6b: b9:a5:e5:d0:65:9d:27:d3:4f:eb:1e:5a:fd:cc:61:85:ce:8f: 4a:9c:56:26:5f:7c:d8:aa:97:ed:c2:a0:33:5f:57:84:ea:01: c6:bf:09:e4:04:a5:a2:e3:2b:42:53:3b:52:f8:69:83:3a:9b: 61:44:4b:82:d0:14:73:90:d5:ae:29:90:27:c4:ce:d5:6c:72: 5a:9a:c4:3e:94:85:4d:38:45:76:bd:79:47:94:f7:fd:18:e9: f5:2a:fa:ad:70:dd:04:68:5b:f2:d4:95:67:cd:5b:f1:fb:f3: fa:ee:6e:4c:74:f0:b1:51:a5:39:17:83:f0:86:7a:54:fc:ea: 41:04:fa:6d:42:6e:bc:c6:d8:3d:15:6a:71:9e:e6:04:ff:6a: 9d:3e:0d:ce:10:48:05:0d:03:4e:43:8f:18:1f:00:0f:1d:79: 7f:ff:9e:60:43:2a:2a:f2:1c:05:e0:a0:16:d9:24:a0:c2:23: f8:ae:f4:23:b9:69:67:40:43:dc:e8:33:a2:3b:92:ff:b5:49: b7:e8:a7:21:73:ec:f9:a6:6a:13:96:2d:7a:38:d0:ca:cc:8c: 7c:49:f1:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjUwNzAyMTgzNTA3WhcNMjUwNzA5MTgzNTA3WjAYMRYwFAYD VQQDEw02ODY1N2JkYi0zZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0//ZvBfIZfYCO/FZpuDLVc/o40kxn6IB9x+6x7wSUziT8c+ow5VM/DAWdwLO vZkbvj1Set6AVYuINfgxZ+YP+yGjz9wpxdkgU5rO9joqM8uLdEL0bAyu6eSdawzY wr3q+FeFP2UWajzIN+cTQw7pHVTA6JsWafTDnNJJmb6SUnU6l1OyKZGDv4XfRxx+ 3iVws5pYXCxht3Th7GeR13fRPhHTgHnYqy4eyZT05gVF3jzNM8Jv+ZZ3lbX9fah5 7i2h65GqE34MqP98KgIUM05OD0v4GGFUgDgFVrEqGIqNQVU6k8kM7xO1qxy/lAqd a8tLCWK78d+BqsqL3jc7f/A03QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+Y7b+/ JFYA+RWCUTmaTHdKUxeWMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaPmKW1rnE17Fu4GHA/EJe2Ufm/Ze33MUTiwMOHu3FL9L1kmu5peXQ ZZ0n00/rHlr9zGGFzo9KnFYmX3zYqpftwqAzX1eE6gHGvwnkBKWi4ytCUztS+GmD OpthREuC0BRzkNWuKZAnxM7VbHJamsQ+lIVNOEV2vXlHlPf9GOn1KvqtcN0EaFvy 1JVnzVvx+/P67m5MdPCxUaU5F4PwhnpU/OpBBPptQm68xtg9FWpxnuYE/2qdPg3O EEgFDQNOQ48YHwAPHXl//55gQyoq8hwF4KAW2SSgwiP4rvQjuWlnQEPc6DOiO5L/ tUm36Kchc+z5pmoTli16ONDKzIx8SfF7 -----END CERTIFICATE-----Generated at Thu Jul 3 06:17:41 2025 by rpki-client