$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json) Hash identifier: MOS/reMUGR+FfCIxU6b8e5T/W3lI5gkR1qaaSMtDwUI= Subject key identifier: 24:96:67:E4:D7:90:E0:A8:D8:68:71:05:DC:72:51:F3:EF:78:1B:2B Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft Manifest number: 1A Signing time: Tue 01 Jul 2025 08:49:37 +0000 Manifest this update: Tue 01 Jul 2025 08:49:36 +0000 Manifest next update: Tue 08 Jul 2025 08:49:36 +0000 Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: k+0+T4Md9Typp/Ea24r92uvaRZzTA5p4H+rScWxF1Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Validity Not Before: Jul 1 08:49:36 2025 GMT Not After : Jul 8 08:49:36 2025 GMT Subject: CN=6863a121-555b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:6d:1a:37:de:ce:34:d2:eb:1b:45:93:8a: 7f:aa:fa:1c:da:ec:58:e0:31:7e:7e:88:b7:b0:f6: 9b:77:f9:2a:99:24:f5:06:e5:b0:c5:83:a3:f1:da: 46:df:e5:94:50:f5:78:2c:a5:a0:27:73:a8:83:b1: fc:8a:f9:b7:10:c3:ab:d5:28:95:bc:bc:be:69:51: 10:6a:48:5e:fb:89:f3:50:c3:46:10:f5:8d:f7:71: 49:c8:6c:23:4e:15:a2:df:68:ad:e8:1e:1c:22:a6: 44:91:4c:0f:8a:50:25:45:4c:30:34:70:b6:89:e0: ff:26:96:55:c3:66:95:b9:43:13:3a:36:a4:8d:e0: 55:1c:77:24:8c:ce:06:b2:66:13:c3:ef:c5:ae:08: 7a:f5:77:8e:56:06:20:9e:7a:f1:d6:bd:83:a7:cf: 90:57:66:5a:75:26:63:dd:93:21:e2:d8:48:79:b6: 69:26:cd:c1:c6:2d:5a:ee:79:dd:31:d5:4f:da:ef: 4f:07:71:bb:ab:9c:87:6f:62:b7:c1:6d:14:b3:78: 07:45:b0:e7:6d:8b:a1:97:cc:1f:10:be:1e:66:5a: 3f:ef:3f:f3:e0:8f:56:5d:e8:87:08:e2:c8:55:24: 35:fa:6d:d8:fb:8a:7b:41:ca:f9:65:77:bd:60:91: a4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:96:67:E4:D7:90:E0:A8:D8:68:71:05:DC:72:51:F3:EF:78:1B:2B X509v3 Authority Key Identifier: keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:11:ab:f5:86:ab:61:a4:3a:f0:c2:1b:0f:b1:c0:68:08:b9: f0:20:df:2c:f2:9b:6f:d9:c7:cd:26:5b:c1:07:33:0e:14:3e: e8:30:c9:90:7c:bb:fa:a6:8a:9d:05:2a:37:72:33:8a:b1:fb: a5:9e:7a:3a:50:e7:1a:b8:df:8d:44:89:04:a8:a7:d9:2d:69: e1:2c:8c:b5:d3:4c:b6:0b:95:91:60:82:e0:d6:7d:83:96:e1: 72:b7:4e:44:b9:50:a0:31:c2:1b:c3:44:0b:c5:be:5f:39:1c: 83:29:c2:61:d2:c8:95:ee:45:ed:7a:f0:42:75:2d:f1:b1:5e: 67:71:b4:41:bd:1c:87:74:e6:51:67:8a:d0:af:e5:f6:47:69: 41:b3:fe:f1:d6:31:bb:a8:d7:e2:02:8e:d7:61:b1:67:11:86: 89:41:2d:35:0f:39:35:fa:71:d9:22:e8:72:1e:5f:0d:83:16: ec:17:31:ae:95:f2:39:11:22:d4:10:26:ba:b2:aa:90:a6:36: 50:5a:a3:80:44:b1:c0:34:76:e9:de:68:a0:74:bc:78:82:40: 20:81:5d:37:55:cb:d7:6d:45:53:06:bf:24:b0:ef:04:f4:3a: e6:8b:0f:9b:4f:3f:0d:b9:b0:08:fe:4b:4e:ba:43:5b:01:b5: 5c:8a:bf:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTgyRDExMC8GA1UEBRMoRENDQjQ2RUFBRERDRDczRjVBQUZBRTBCM0YwMDJFRDky MEMwRTg3RTAeFw0yNTA3MDEwODQ5MzZaFw0yNTA3MDgwODQ5MzZaMBgxFjAUBgNV BAMTDTY4NjNhMTIxLTU1NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEbW0aN97ONNLrG0WTin+q+hza7FjgMX5+iLew9pt3+SqZJPUG5bDFg6Px2kbf 5ZRQ9XgspaAnc6iDsfyK+bcQw6vVKJW8vL5pURBqSF77ifNQw0YQ9Y33cUnIbCNO FaLfaK3oHhwipkSRTA+KUCVFTDA0cLaJ4P8mllXDZpW5QxM6NqSN4FUcdySMzgay ZhPD78WuCHr1d45WBiCeevHWvYOnz5BXZlp1JmPdkyHi2Eh5tmkmzcHGLVrued0x 1U/a708HcburnIdvYrfBbRSzeAdFsOdti6GXzB8Qvh5mWj/vP/Pgj1Zd6IcI4shV JDX6bdj7intByvlld71gkaSvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJJZn5NeQ 4KjYaHEF3HJR8+94GyswHwYDVR0jBBgwFoAU3MtG6q3c1z9ar64LPwAu2SDA6H4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxODJELzQwNzQ0OEJBM0I4 NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5YXI2NExQd0F1MlNEQTZI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM010RzZxM2MxejlhcjY0TFB3QXUyU0RBNkg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx ODJELzQwNzQ0OEJBM0I4NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5 YXI2NExQd0F1MlNEQTZINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYRq/WGq2GkOvDCGw+xwGgIufAg3yzym2/Zx80mW8EHMw4UPugwyZB8 u/qmip0FKjdyM4qx+6WeejpQ5xq4341EiQSop9ktaeEsjLXTTLYLlZFgguDWfYOW 4XK3TkS5UKAxwhvDRAvFvl85HIMpwmHSyJXuRe168EJ1LfGxXmdxtEG9HId05lFn itCv5fZHaUGz/vHWMbuo1+ICjtdhsWcRholBLTUPOTX6cdki6HIeXw2DFuwXMa6V 8jkRItQQJrqyqpCmNlBao4BEscA0duneaKB0vHiCQCCBXTdVy9dtRVMGvySw7wT0 OuaLD5tPPw25sAj+S066Q1sBtVyKvxg= -----END CERTIFICATE-----Generated at Thu Jul 3 08:07:52 2025 by rpki-client