$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: Qpd9M94SMYBsYo8aLNSw0H4mmGCtoDCfY305DtCZuoY= Subject key identifier: 8A:87:72:F5:93:47:EC:92:2A:60:E9:0A:C5:FC:5D:2B:C4:90:E0:4F Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 0148 Signing time: Thu 03 Jul 2025 04:39:12 +0000 Manifest this update: Thu 03 Jul 2025 04:39:11 +0000 Manifest next update: Thu 10 Jul 2025 04:39:11 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: NylHg6Kq4eB9mEDDrwsFYqiNwP50R3aLsBhg0mncV5M=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: aEwpt3FN/b3agcSqsy028NBcRbgaV2C2DNdzwhDgaUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Jul 3 04:39:11 2025 GMT Not After : Jul 10 04:39:11 2025 GMT Subject: CN=6866096f-9cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:6b:9e:a4:57:1d:83:c0:fe:7d:c9:12:bd: df:37:0b:86:6d:fa:8d:73:fb:98:2c:2a:7d:85:e4: ec:30:71:26:b4:cd:ed:af:65:ea:5c:01:02:7a:26: 8d:47:93:5a:4a:31:14:b8:c6:7f:8f:8d:64:97:e1: 6f:a1:a1:dd:a4:66:46:6c:07:28:e7:04:a6:b1:55: ca:6d:7a:03:96:67:e6:55:52:80:99:22:eb:7b:5a: 5f:6a:9b:0a:6d:f4:df:a0:b1:f4:c5:e5:e6:75:ea: 7b:9b:b3:4b:07:bd:6f:79:cb:81:cb:dd:9b:f4:19: 70:f0:f1:4e:83:c8:ee:20:7c:b3:87:5e:86:86:9a: 5d:8a:ec:1a:16:5e:de:11:dc:a6:43:0e:06:cc:7b: 60:28:bc:ba:4c:3f:8e:b6:ef:a3:1c:35:a0:d3:28: ef:74:bc:cc:d0:2a:2e:36:c1:10:44:d4:c0:66:71: e3:ec:e5:f1:87:2f:de:5a:46:2a:ed:de:67:7f:24: ae:91:ce:28:82:03:90:85:e8:74:31:92:ca:4b:9c: 33:77:91:fb:37:e4:6e:75:58:b2:7c:b9:cd:5b:73: 95:1c:a6:b2:43:46:c7:8b:46:d4:b6:fe:d2:1c:fa: 5c:f7:2d:d3:5a:a5:3a:66:62:12:aa:5e:1c:42:7f: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:87:72:F5:93:47:EC:92:2A:60:E9:0A:C5:FC:5D:2B:C4:90:E0:4F X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e8:5a:70:75:b7:56:71:98:ea:a7:b5:87:19:6d:96:e5:0c: 34:3d:8d:cc:38:86:c0:3d:f4:a5:f8:90:97:23:8f:d3:37:41: d2:a4:44:28:87:31:af:64:3c:ee:f3:ea:68:19:a0:14:2f:a6: e5:d1:e3:e9:9f:6b:2e:50:f5:f7:ec:90:0b:52:6d:39:77:64: 4d:eb:37:51:fc:4a:8d:49:4d:e8:0f:2e:01:66:cc:79:52:cc: 9a:45:45:92:6e:8f:05:8b:7f:28:40:36:ff:1f:3c:28:c1:b6: 82:9f:09:5a:12:b4:9b:3d:28:94:d3:e8:59:71:d3:ad:58:3e: 3b:62:69:cb:1d:64:4e:ef:ba:e8:59:5d:3e:3f:13:f6:2e:a5: f4:de:64:40:cd:ad:73:38:11:82:90:e5:c8:6d:a2:a5:d0:ff: 79:26:3a:11:2e:d2:f3:2d:7c:70:8d:2e:ef:85:87:06:13:0c: 05:b2:a0:c2:59:4d:8a:68:07:80:9a:13:b7:98:4e:bc:1c:0c: 6d:c6:f2:f8:cc:66:32:55:e8:14:fe:83:39:f7:d4:41:00:77: 88:74:a7:65:b7:da:01:62:1d:b7:0d:cf:85:48:88:97:b3:f7: a2:55:db:0f:71:d2:e0:d1:c1:9f:f5:c3:e5:d8:75:2d:7d:f7: 8a:54:2d:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjUwNzAzMDQzOTExWhcNMjUwNzEwMDQzOTExWjAYMRYwFAYD VQQDEw02ODY2MDk2Zi05Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TtrnqRXHYPA/n3JEr3fNwuGbfqNc/uYLCp9heTsMHEmtM3tr2XqXAECeiaN R5NaSjEUuMZ/j41kl+FvoaHdpGZGbAco5wSmsVXKbXoDlmfmVVKAmSLre1pfapsK bfTfoLH0xeXmdep7m7NLB71vecuBy92b9Blw8PFOg8juIHyzh16GhppdiuwaFl7e EdymQw4GzHtgKLy6TD+Otu+jHDWg0yjvdLzM0CouNsEQRNTAZnHj7OXxhy/eWkYq 7d5nfySukc4oggOQheh0MZLKS5wzd5H7N+RudViyfLnNW3OVHKayQ0bHi0bUtv7S HPpc9y3TWqU6ZmISql4cQn/tIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqHcvWT R+ySKmDpCsX8XSvEkOBPMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd6FpwdbdWcZjqp7WHGW2W5Qw0PY3MOIbAPfSl+JCXI4/TN0HSpEQo hzGvZDzu8+poGaAUL6bl0ePpn2suUPX37JALUm05d2RN6zdR/EqNSU3oDy4BZsx5 UsyaRUWSbo8Fi38oQDb/HzwowbaCnwlaErSbPSiU0+hZcdOtWD47YmnLHWRO77ro WV0+PxP2LqX03mRAza1zOBGCkOXIbaKl0P95JjoRLtLzLXxwjS7vhYcGEwwFsqDC WU2KaAeAmhO3mE68HAxtxvL4zGYyVegU/oM599RBAHeIdKdlt9oBYh23Dc+FSIiX s/eiVdsPcdLg0cGf9cPl2HUtffeKVC0z -----END CERTIFICATE-----Generated at Fri Jul 4 13:37:20 2025 by rpki-client