$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: uolxGDiAZJgLKZ81nts5KjBV4WMmIwv6nVFScYLclqQ= Subject key identifier: A1:C1:F0:2A:A8:60:3D:ED:36:32:5E:80:8E:5F:5C:DC:91:DD:B5:65 Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: 49 Signing time: Tue 01 Jul 2025 08:08:27 +0000 Manifest this update: Tue 01 Jul 2025 08:08:27 +0000 Manifest next update: Tue 08 Jul 2025 08:08:27 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: TaEfhjGM4Nyz4j08a+LGaf6Y6L9XLL1RmwN7Wujs9g8=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: EzMoudDWuTdlnNruCHKgAEy3hjxWEtpDs8wnwjR1b6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: Jul 1 08:08:27 2025 GMT Not After : Jul 8 08:08:27 2025 GMT Subject: CN=6863977b-11e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:07:42:e1:c9:6f:a0:8b:6a:bb:43:9a:3d: 2c:5a:3f:b5:07:f0:6e:c9:0a:cf:1d:c0:e2:e9:b5: 25:c6:77:80:f5:96:ea:c7:a3:b4:1a:26:38:12:29: f1:82:70:66:74:e6:6e:25:29:4a:c8:de:8b:73:e4: 6c:10:cd:b3:20:1c:8b:9f:98:13:c9:df:2c:5d:5e: 22:a0:44:41:65:b8:e0:2e:64:b1:c1:24:01:60:a0: f0:94:75:56:ad:fe:0c:9f:f1:4d:c2:71:b0:06:fe: 45:9e:e3:e8:3a:eb:d4:54:cc:e7:d4:95:df:13:27: b8:50:b9:f1:35:32:63:9d:d2:51:fe:ea:12:5e:d9: 4b:40:1c:34:87:46:13:7d:f0:9d:91:d8:1b:27:f2: ff:ca:57:19:ad:49:40:20:b0:85:6f:4f:6e:ea:b5: 07:e2:f6:11:ff:42:6a:2a:de:35:5d:6e:96:d5:57: d2:03:e0:d2:08:53:18:ab:ed:dc:3d:4b:c7:7b:90: 16:b2:52:00:7e:94:e5:3b:67:fb:fc:2f:81:ba:5f: d6:1a:30:c3:5c:02:ac:30:a5:37:65:a7:bc:ab:8a: 65:da:42:6b:1e:a8:92:23:cc:3c:1a:54:07:4a:8c: 12:d4:cf:1e:06:ac:e2:87:83:45:2b:5f:db:a2:42: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C1:F0:2A:A8:60:3D:ED:36:32:5E:80:8E:5F:5C:DC:91:DD:B5:65 X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5f:49:48:8a:95:87:6b:b0:58:46:b0:64:53:84:9c:d3:ce: ff:0f:10:21:73:e6:30:d6:ca:ea:f5:71:84:c2:9e:c4:ae:73: 42:72:8e:29:22:ff:a7:74:48:e2:d2:d9:19:99:54:9c:97:ca: 16:d9:69:b7:4c:31:ee:c6:4d:1e:f3:06:08:3b:ef:4e:60:36: 90:0d:08:a2:68:17:b3:63:b8:84:77:27:aa:98:b2:a8:c6:00: 3e:5d:ca:ba:c6:3b:3e:5a:ef:86:f1:d4:0f:0a:27:50:35:29: 2c:df:e6:6f:29:5c:b8:6d:17:f9:55:80:08:d3:1a:2b:93:6e: ae:47:6d:f5:a7:b4:8a:46:a6:4f:55:df:73:00:af:2f:a9:45: a2:61:30:40:3a:ea:b1:ca:bb:0a:93:64:cf:49:74:18:5f:dc: 01:48:94:9f:9d:68:6c:e1:c5:03:de:7d:5c:14:b0:8a:07:7a: 30:3a:15:5c:77:32:04:2a:ea:d9:1c:c6:b5:e1:8a:bd:da:12: a7:b6:d9:d2:9b:50:0c:f0:e8:98:21:7c:fb:70:4f:92:c5:59: 8b:7c:83:d7:e3:6b:fd:3b:bc:56:87:ed:c8:b9:64:c7:33:fc: 19:d3:f0:19:02:b1:ae:fc:5b:ee:2a:04:74:e0:ee:78:cb:61: 49:dc:f8:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NEQ1NDExMC8GA1UEBRMoQUY3NjEyNTdERTJDOURBNUYzM0U3MUM2NDE5RTI2N0E4 NjJERkI2MjAeFw0yNTA3MDEwODA4MjdaFw0yNTA3MDgwODA4MjdaMBgxFjAUBgNV BAMTDTY4NjM5NzdiLTExZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuYAdC4clvoItqu0OaPSxaP7UH8G7JCs8dwOLptSXGd4D1lurHo7QaJjgSKfGC cGZ05m4lKUrI3otz5GwQzbMgHIufmBPJ3yxdXiKgREFluOAuZLHBJAFgoPCUdVat /gyf8U3CcbAG/kWe4+g669RUzOfUld8TJ7hQufE1MmOd0lH+6hJe2UtAHDSHRhN9 8J2R2Bsn8v/KVxmtSUAgsIVvT27qtQfi9hH/Qmoq3jVdbpbVV9ID4NIIUxir7dw9 S8d7kBayUgB+lOU7Z/v8L4G6X9YaMMNcAqwwpTdlp7yrimXaQmseqJIjzDwaVAdK jBLUzx4GrOKHg0UrX9uiQtbbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUocHwKqhg Pe02Ml6Ajl9c3JHdtWUwHwYDVR0jBBgwFoAUr3YSV94snaXzPnHGQZ4meoYt+2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0RDU0L0QyODc3REI2RTlF QjExRUZBNDU0MkIxOEM0RjlBRTAyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0y SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjNZU1Y5NHNuYVh6UG5IR1FaNG1lb1l0LTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 RDU0L0QyODc3REI2RTlFQjExRUZBNDU0MkIxOEM0RjlBRTAyL3IzWVNWOTRzbmFY elBuSEdRWjRtZW9ZdC0ySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJpfSUiKlYdrsFhGsGRThJzTzv8PECFz5jDWyur1cYTCnsSuc0Jyjiki /6d0SOLS2RmZVJyXyhbZabdMMe7GTR7zBgg7705gNpANCKJoF7NjuIR3J6qYsqjG AD5dyrrGOz5a74bx1A8KJ1A1KSzf5m8pXLhtF/lVgAjTGiuTbq5HbfWntIpGpk9V 33MAry+pRaJhMEA66rHKuwqTZM9JdBhf3AFIlJ+daGzhxQPefVwUsIoHejA6FVx3 MgQq6tkcxrXhir3aEqe22dKbUAzw6JghfPtwT5LFWYt8g9fja/07vFaH7ci5ZMcz /BnT8BkCsa78W+4qBHTg7njLYUnc+E0= -----END CERTIFICATE-----Generated at Tue Jul 1 21:19:50 2025 by rpki-client