$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: BTuusUE7xaB59msKkaS8ZfRR6eUlL+NS3evlgp3vIVc= Subject key identifier: 12:22:5A:C0:44:6F:FF:FC:F5:AA:6B:79:27:1B:B6:C1:F9:CB:E6:6D Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: A2 Signing time: Thu 03 Jul 2025 06:27:45 +0000 Manifest this update: Thu 03 Jul 2025 06:27:45 +0000 Manifest next update: Thu 10 Jul 2025 06:27:44 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: HxSLeXuyTd09+7P3t2M7xgLQT8e8085Vb1DfZa9D8QY=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Jul 3 06:27:45 2025 GMT Not After : Jul 10 06:27:44 2025 GMT Subject: CN=686622e1-9735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:67:38:ce:34:ae:65:3d:13:c3:22:20:b5: 4a:1c:b9:71:4d:b3:69:f8:7e:58:25:58:d6:01:94: 30:f2:75:f7:53:f1:8e:26:13:02:8d:82:d4:f7:00: ac:9a:71:1c:ca:70:86:e9:bf:95:ce:42:8c:06:4c: 42:58:56:7d:c6:a9:55:6c:ab:2a:4b:86:2e:b3:dd: e8:52:45:99:f5:49:22:7d:59:ab:24:6b:cd:b3:1a: 35:a4:51:8c:70:ee:27:11:66:58:11:9f:ed:ce:71: 3f:87:33:de:9a:be:f0:5a:22:4d:3a:31:0a:1f:48: 08:61:e1:f9:af:81:e6:da:4d:b7:c7:1d:ec:53:1d: 39:cb:42:ff:3d:2f:e6:70:25:d9:c3:f7:04:a4:00: b6:14:43:37:4f:30:92:ec:41:07:9b:a4:62:e5:5b: 9c:1b:43:3d:e9:54:c8:87:97:af:63:ce:be:4a:c2: b2:7d:06:ae:48:76:b2:07:e5:3b:82:8f:99:50:85: 86:ce:77:a0:88:cc:25:33:3e:dd:f4:bf:ed:f1:a6: 14:01:ea:ed:6b:14:18:ac:44:b2:90:92:14:31:58: f8:9d:4f:89:89:ef:bd:e2:73:c9:ef:5a:09:95:7f: 85:08:1a:47:3f:a7:b6:70:96:e3:a1:1a:c6:ca:45: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:22:5A:C0:44:6F:FF:FC:F5:AA:6B:79:27:1B:B6:C1:F9:CB:E6:6D X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f2:cc:c4:88:8c:16:fd:e6:59:7a:ab:24:b4:20:b3:ab:5f: 63:a2:65:d5:a4:f7:20:a6:4d:f5:e5:db:e1:3c:02:f6:10:b8: 74:b1:4b:ea:48:98:c4:54:f9:c6:1e:e5:3d:b4:e3:d7:04:d2: 5c:d4:e6:23:15:cf:b3:89:33:b4:ae:59:3f:f6:a4:78:da:e4: 93:55:ee:a0:14:82:a5:b7:79:2e:58:89:09:77:68:c5:7e:d8: 44:a3:62:49:a7:40:c2:c9:35:d2:b6:8c:76:3a:f8:56:7a:07: e7:88:0b:a3:d1:67:95:ea:ee:da:23:5e:be:a4:c0:94:64:34: 07:60:26:3b:cb:fc:85:a3:b4:10:1c:f0:85:3f:de:38:1d:54: 1f:7c:84:fc:99:11:a3:04:d4:21:fa:6b:a2:2e:a5:aa:84:dd: ee:c0:d3:93:ef:33:95:78:00:6e:59:f2:c2:94:24:7f:71:56: ba:6c:29:5c:8e:cc:b9:aa:e1:59:42:4c:11:25:89:7a:64:39: 65:e4:5c:de:9e:59:a4:c9:ae:f8:7b:62:bd:cb:c8:fe:7c:b4: 20:9c:7b:3b:5e:7a:6d:86:b2:bc:6c:73:21:8c:b3:b5:ac:c5: 42:9c:37:57:6b:23:19:46:c7:3a:59:b9:00:7e:e4:f3:1b:30: f7:e4:6c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjUwNzAzMDYyNzQ1WhcNMjUwNzEwMDYyNzQ0WjAYMRYwFAYD VQQDEw02ODY2MjJlMS05NzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7lnOM40rmU9E8MiILVKHLlxTbNp+H5YJVjWAZQw8nX3U/GOJhMCjYLU9wCs mnEcynCG6b+VzkKMBkxCWFZ9xqlVbKsqS4Yus93oUkWZ9UkifVmrJGvNsxo1pFGM cO4nEWZYEZ/tznE/hzPemr7wWiJNOjEKH0gIYeH5r4Hm2k23xx3sUx05y0L/PS/m cCXZw/cEpAC2FEM3TzCS7EEHm6Ri5VucG0M96VTIh5evY86+SsKyfQauSHayB+U7 go+ZUIWGznegiMwlMz7d9L/t8aYUAertaxQYrESykJIUMVj4nU+Jie+94nPJ71oJ lX+FCBpHP6e2cJbjoRrGykXD9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIiWsBE b//89apreScbtsH5y+ZtMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf8szEiIwW/eZZeqsktCCzq19jomXVpPcgpk315dvhPAL2ELh0sUvq SJjEVPnGHuU9tOPXBNJc1OYjFc+ziTO0rlk/9qR42uSTVe6gFIKlt3kuWIkJd2jF fthEo2JJp0DCyTXStox2OvhWegfniAuj0WeV6u7aI16+pMCUZDQHYCY7y/yFo7QQ HPCFP944HVQffIT8mRGjBNQh+muiLqWqhN3uwNOT7zOVeABuWfLClCR/cVa6bClc jsy5quFZQkwRJYl6ZDll5Fzenlmkya74e2K9y8j+fLQgnHs7XnpthrK8bHMhjLO1 rMVCnDdXayMZRsc6WbkAfuTzGzD35Gz9 -----END CERTIFICATE-----Generated at Fri Jul 4 10:21:17 2025 by rpki-client