$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: 0xRIJGzcCauv7Gzo2Oay0JFJEyloApjNIR2urcm7zvg= Subject key identifier: 17:89:D5:58:AC:A1:B1:9F:C2:EE:FA:CF:70:CC:7B:62:50:EC:0B:FD Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 010E Signing time: Sun 29 Jun 2025 04:05:02 +0000 Manifest this update: Sun 29 Jun 2025 04:05:01 +0000 Manifest next update: Sun 06 Jul 2025 04:05:01 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: oqxo5wg8VSogUDrtlkqILHt/2EL2Tcwbqq3wvDZu4RA=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Jun 29 04:05:01 2025 GMT Not After : Jul 6 04:05:01 2025 GMT Subject: CN=6860bb6e-f3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:fe:0c:2d:3e:10:fc:e9:2f:0f:4d:0f:68: 3f:9e:e6:6a:ed:df:33:4f:d2:fd:47:de:55:30:da: 5d:26:f8:e0:3f:25:1e:91:a2:8a:3b:4d:8a:3c:47: a2:f0:50:0b:c6:ba:e8:ec:0f:71:4b:69:85:2c:bf: f9:6c:f3:e4:7c:3f:a2:29:4d:64:54:df:89:61:ae: 0b:1b:c6:19:82:73:61:9e:28:f7:d5:03:08:ca:ee: db:50:39:74:51:fd:d1:49:c7:8d:8c:51:5e:e0:82: 44:02:0b:cb:1b:6d:0c:92:f7:d5:6e:d4:6c:05:e3: 12:29:38:d2:65:db:ec:ff:80:fd:f3:87:45:d6:7c: 39:84:70:26:72:38:84:e4:5a:2f:72:24:97:88:76: d7:59:55:ef:19:36:5a:83:43:a6:a6:f5:96:79:5f: cd:c1:39:d6:00:31:ca:8d:68:cd:b1:22:45:3a:15: fb:0e:78:18:df:92:15:4b:49:72:f6:f5:c9:3e:cb: db:b8:22:7f:90:70:0d:31:55:e2:5e:04:30:fb:b8: 54:76:2a:b6:85:04:ff:d3:a1:21:4c:37:17:3c:9a: 58:7b:4f:25:05:43:b1:32:08:53:0e:2d:8c:bd:d8: 32:7e:5f:0a:7e:0e:c6:bf:05:54:8b:c1:c5:3d:12: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:D5:58:AC:A1:B1:9F:C2:EE:FA:CF:70:CC:7B:62:50:EC:0B:FD X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d5:0c:d2:1e:5b:0e:da:46:78:2d:ad:9f:76:88:b0:69:6c: 26:a8:13:71:b6:b3:09:ca:ba:57:d9:8e:d9:72:ae:19:97:25: 37:cc:98:06:96:84:53:4b:e3:39:95:05:ec:1d:f2:eb:79:34: 7a:3e:d8:cc:7a:32:f5:be:26:6f:6c:43:9d:d0:7f:e7:a1:75: b2:37:a4:a5:f4:6a:b6:c1:f5:2d:6f:39:45:ea:a1:c9:7b:15: 49:57:7f:1a:91:80:1c:3e:b2:1d:0a:0e:9b:45:7a:64:70:b1: 13:15:bf:d0:e8:e3:57:7f:1b:c7:d5:36:a0:73:2c:13:f3:79: be:a1:1b:ae:96:66:d7:20:12:31:e1:e4:13:b5:13:f2:d5:83: 95:88:c7:49:eb:ef:3a:db:ea:47:4b:74:21:51:d6:7d:e4:29: ff:e1:b5:ed:3f:ed:00:d3:d3:d9:ac:21:db:db:35:8c:7b:a2: e9:ab:28:49:72:ce:12:04:5a:a6:fc:5e:0f:81:3a:f2:84:f6: 35:d3:02:a7:4f:f1:22:41:9a:8f:26:8c:b4:41:58:1f:ca:79: c7:76:2a:2d:56:6c:29:8d:7c:3d:35:49:51:77:f1:3f:f5:2b: 92:5e:b7:2c:b8:f5:69:9f:7f:52:f0:dc:89:14:39:f2:84:42: 81:20:91:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUwNjI5MDQwNTAxWhcNMjUwNzA2MDQwNTAxWjAYMRYwFAYD VQQDEw02ODYwYmI2ZS1mM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOb+DC0+EPzpLw9ND2g/nuZq7d8zT9L9R95VMNpdJvjgPyUekaKKO02KPEei 8FALxrro7A9xS2mFLL/5bPPkfD+iKU1kVN+JYa4LG8YZgnNhnij31QMIyu7bUDl0 Uf3RSceNjFFe4IJEAgvLG20MkvfVbtRsBeMSKTjSZdvs/4D984dF1nw5hHAmcjiE 5FovciSXiHbXWVXvGTZag0OmpvWWeV/NwTnWADHKjWjNsSJFOhX7DngY35IVS0ly 9vXJPsvbuCJ/kHANMVXiXgQw+7hUdiq2hQT/06EhTDcXPJpYe08lBUOxMghTDi2M vdgyfl8Kfg7GvwVUi8HFPRKfDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeJ1Vis obGfwu76z3DMe2JQ7Av9MB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk1QzSHlsO2kZ4La2fdoiwaWwmqBNxtrMJyrpX2Y7Zcq4ZlyU3zJgG loRTS+M5lQXsHfLreTR6PtjMejL1viZvbEOd0H/noXWyN6Sl9Gq2wfUtbzlF6qHJ exVJV38akYAcPrIdCg6bRXpkcLETFb/Q6ONXfxvH1TagcywT83m+oRuulmbXIBIx 4eQTtRPy1YOViMdJ6+862+pHS3QhUdZ95Cn/4bXtP+0A09PZrCHb2zWMe6LpqyhJ cs4SBFqm/F4PgTryhPY10wKnT/EiQZqPJoy0QVgfynnHdiotVmwpjXw9NUlRd/E/ 9SuSXrcsuPVpn39S8NyJFDnyhEKBIJHe -----END CERTIFICATE-----Generated at Sun Jun 29 22:14:38 2025 by rpki-client