$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json) Hash identifier: i2UUpC55Q1+H9No6+RrtwX79Qp87p0QoTlVwV1I8Zq8= Subject key identifier: 43:76:76:BC:5A:D3:27:38:AF:49:97:0F:74:B7:A9:3E:73:FD:DF:FC Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76 Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576 Certificate serial: 0C15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft Manifest number: 0C06 Signing time: Fri 18 Jul 2025 18:56:19 +0000 Manifest this update: Fri 18 Jul 2025 18:56:18 +0000 Manifest next update: Fri 25 Jul 2025 18:56:18 +0000 Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: Zpr6xrZq42uh9FLJZn7qk78vouwXOCiM0e+2VukZCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3093 (0xc15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAAD, serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576 Validity Not Before: Jul 18 18:56:18 2025 GMT Not After : Jul 25 18:56:18 2025 GMT Subject: CN=687a98d3-7744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:ac:00:f6:b7:fa:0e:ad:f4:d8:6d:8c:79: 96:46:96:41:3e:62:17:87:39:32:d6:e0:c5:d8:2c: 90:bd:38:a7:c0:15:bc:c3:93:e6:04:b2:c9:75:aa: 9f:63:b4:3b:76:7a:1f:7e:7b:2f:ea:12:6f:de:1f: c8:bd:1d:81:ab:e1:2a:0c:db:82:c1:db:ee:8a:8a: bf:cd:3f:77:1d:85:e8:94:c7:c3:2e:f0:23:0b:c9: 90:56:c5:b4:f8:16:32:27:2f:90:38:c6:bd:ed:ed: 2e:81:25:2c:d0:ad:b9:ad:49:7d:09:ce:88:31:4e: 22:14:b9:fe:8e:f9:92:10:9a:c6:78:73:62:0d:ba: e7:4e:56:a2:31:22:7b:28:e6:79:f6:5d:4e:a9:9a: 8e:9c:bd:b6:2f:b3:87:41:97:49:66:a0:8d:50:6c: f6:fc:01:5b:ed:75:10:cc:ca:ce:57:90:fb:e1:36: ef:dd:05:d0:45:95:3a:25:a5:98:c3:17:47:9d:5a: 05:3b:29:9c:e8:39:4f:80:7b:1f:ec:90:af:b3:a5: c6:b1:41:36:6b:29:ce:bd:1f:97:b7:86:ad:39:bd: 10:a5:6e:e9:35:14:8f:c2:06:42:9e:dd:a3:12:32: c9:2f:c4:f2:29:44:39:47:ee:5c:e2:da:37:a3:cd: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:76:BC:5A:D3:27:38:AF:49:97:0F:74:B7:A9:3E:73:FD:DF:FC X509v3 Authority Key Identifier: keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1e:8e:b7:5f:98:5a:60:4e:83:da:e4:06:01:1c:32:8a:20: 8f:9b:d8:de:12:fd:01:0c:47:49:97:26:c9:94:bf:1a:f0:d6: a1:33:7f:4a:dc:41:f3:51:5f:7e:49:4b:6c:ff:f7:16:3b:a1: 29:1f:02:0f:c2:19:3d:8d:86:27:0f:0d:b3:c1:40:44:e0:2f: 37:a4:0b:e0:e0:8f:6a:31:30:ad:ef:ad:86:ac:8e:df:d1:1f: b1:9d:96:22:d7:89:de:ec:d2:7b:4e:92:0e:b7:e8:26:59:c4: 24:d3:14:7a:3c:52:bd:57:5b:1c:a2:ab:cc:1e:28:e0:b9:0d: df:ce:b1:6c:18:1d:65:11:97:fb:19:f3:02:b2:d7:77:82:aa: 42:ad:f8:77:03:e7:db:79:6f:4e:d9:cd:1a:ab:fd:32:80:91: dd:03:b0:63:22:99:b5:1b:9f:fc:51:37:a9:38:19:b4:01:ee: a5:f3:39:c6:9f:91:1a:85:93:ab:be:6b:e0:a2:71:fc:29:d3: 2b:8b:9a:8c:39:60:67:34:36:86:74:6d:c5:3a:a7:94:c8:2a: 08:67:40:82:dd:c2:f9:00:8f:74:6e:77:7d:6b:d9:65:4a:45: b3:38:0d:2a:90:2b:eb:7a:c9:c1:7e:62:b3:41:1b:a7:19:3a: 80:b0:42:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQUQxMTAvBgNVBAUTKERERjg4NDkxMUFEM0YyOENDOUQ5NkE4QzI0QTkzOUE2 NUY4QjI1NzYwHhcNMjUwNzE4MTg1NjE4WhcNMjUwNzI1MTg1NjE4WjAYMRYwFAYD VQQDEw02ODdhOThkMy03NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zGsAPa3+g6t9NhtjHmWRpZBPmIXhzky1uDF2CyQvTinwBW8w5PmBLLJdaqf Y7Q7dnoffnsv6hJv3h/IvR2Bq+EqDNuCwdvuioq/zT93HYXolMfDLvAjC8mQVsW0 +BYyJy+QOMa97e0ugSUs0K25rUl9Cc6IMU4iFLn+jvmSEJrGeHNiDbrnTlaiMSJ7 KOZ59l1OqZqOnL22L7OHQZdJZqCNUGz2/AFb7XUQzMrOV5D74Tbv3QXQRZU6JaWY wxdHnVoFOymc6DlPgHsf7JCvs6XGsUE2aynOvR+Xt4atOb0QpW7pNRSPwgZCnt2j EjLJL8TyKUQ5R+5c4to3o80fDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEN2drxa 0yc4r0mXD3S3qT5z/d/8MB8GA1UdIwQYMBaAFN34hJEa0/KMydlqjCSpOaZfiyV2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBRC81MjFBRERDODE4 NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhvekoyV3FNSktrNXBsLUxK WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaUVrUnJUOG96SjJXcU1KS2s1cGwtTEpYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBRC81MjFBRERDODE4NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhv ekoyV3FNSktrNXBsLUxKWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOHo63X5haYE6D2uQGARwyiiCPm9jeEv0BDEdJlybJlL8a8NahM39K 3EHzUV9+SUts//cWO6EpHwIPwhk9jYYnDw2zwUBE4C83pAvg4I9qMTCt762GrI7f 0R+xnZYi14ne7NJ7TpIOt+gmWcQk0xR6PFK9V1scoqvMHijguQ3fzrFsGB1lEZf7 GfMCstd3gqpCrfh3A+fbeW9O2c0aq/0ygJHdA7BjIpm1G5/8UTepOBm0Ae6l8znG n5EahZOrvmvgonH8KdMri5qMOWBnNDaGdG3FOqeUyCoIZ0CC3cL5AI90bnd9a9ll SkWzOA0qkCvresnBfmKzQRunGTqAsEKq -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:26 2025 by rpki-client