$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: WbnKaJk7JSYHy7tGScDWjB0XeJELBYftAIKCzgQyTgc= Subject key identifier: 14:11:21:EF:52:61:ED:8D:B4:37:30:CA:D7:DE:1F:DB:7E:C4:57:7B Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 257B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2546 Signing time: Mon 02 Jun 2025 14:21:45 +0000 Manifest this update: Mon 02 Jun 2025 14:21:45 +0000 Manifest next update: Mon 09 Jun 2025 14:21:45 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: rpbQ7JUKKjOXHgHqyukub2xrwSy68J/olAeQ3ujfSQ8=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) 7: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: QuRY0ECb/GscIKQG3TIAOw51gGl4J73Kmkxl36DZ8mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9595 (0x257b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Jun 2 14:21:45 2025 GMT Not After : Jun 9 14:21:45 2025 GMT Subject: CN=683db379-4b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:68:9c:68:f3:a3:0f:52:f2:07:67:fe:e2:b3: 22:fd:2a:a4:a9:91:97:04:6a:97:37:79:7d:57:b5: 39:32:07:76:4d:37:0a:56:e0:4e:3b:a1:97:d0:9d: c8:05:85:dd:b7:d8:cb:10:40:b3:17:a1:f7:15:ba: dd:9e:b1:ca:be:73:16:9d:aa:bd:79:28:58:05:18: 9e:08:09:5a:04:0b:d3:d8:9c:6e:ee:cc:66:61:cc: 5a:4a:c3:2c:2a:08:f5:39:46:8f:73:7d:31:dc:5d: 33:60:b7:f2:f5:69:ff:b1:5a:2a:fd:ae:9b:fd:3b: 0c:42:55:86:96:54:64:63:db:d2:f8:fe:f3:77:13: 17:9a:71:8a:04:7b:ae:0a:c1:8b:04:0d:17:9a:a5: 56:ee:02:dd:7f:41:17:97:32:63:ae:1d:af:10:0d: ae:0e:6c:2a:c2:f8:32:36:db:ac:f5:20:ea:1e:7f: 6b:86:72:95:75:91:a0:5d:8c:ee:fc:f6:7b:60:15: 28:15:d7:fc:b5:e1:31:ae:1f:b8:3b:19:e1:58:8f: e8:49:86:14:86:8f:af:cc:59:5f:b1:50:e7:95:4b: e6:16:d6:6c:1a:a5:77:76:84:41:ec:70:32:98:3b: 58:68:89:29:14:67:5d:36:54:74:47:10:98:22:c6: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:11:21:EF:52:61:ED:8D:B4:37:30:CA:D7:DE:1F:DB:7E:C4:57:7B X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d6:96:ae:a8:8a:d4:09:cd:49:5d:10:86:63:24:d2:f6:d3: 50:f9:71:76:37:56:03:e1:98:24:53:29:56:33:11:7d:c4:70: 60:fd:5a:6d:3a:6f:7d:b2:d1:f4:4b:69:53:e3:56:c7:34:9d: 53:c0:eb:9e:b8:71:c0:e8:69:5c:2c:47:2d:65:8e:65:5c:92: fd:45:2d:d3:0e:d0:9d:af:10:d3:7f:2b:ac:2f:f3:87:43:40: bc:de:ec:aa:2f:9d:dc:17:f9:aa:0e:65:a4:2c:09:9b:31:61: 37:cc:19:64:69:b6:1d:ea:2b:e6:c5:61:c4:be:15:82:21:1a: 56:39:ba:37:4a:01:33:20:58:46:b7:61:c8:85:aa:53:16:c3: d1:e1:f7:fe:59:4b:9c:d4:d2:fa:c4:7e:4e:8a:43:3b:3d:9b: ac:d0:f2:60:2e:9d:bb:0d:3a:ac:1a:31:e1:49:fd:07:a7:1c: 85:cb:62:cd:75:f2:66:78:87:38:cd:ed:3a:a2:5a:a6:7f:12: 09:88:6d:a8:29:c6:ab:33:c4:81:c9:0c:c6:2c:0a:08:a0:6f: 37:7c:1e:1a:0b:ee:b1:02:d0:fa:b7:c9:f4:78:40:a9:17:9b: b9:b0:ff:3e:93:de:aa:62:a1:9c:68:20:42:22:29:bf:62:92: 57:23:16:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwNjAyMTQyMTQ1WhcNMjUwNjA5MTQyMTQ1WjAYMRYwFAYD VQQDEw02ODNkYjM3OS00YjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6micaPOjD1LyB2f+4rMi/SqkqZGXBGqXN3l9V7U5Mgd2TTcKVuBOO6GX0J3I BYXdt9jLEECzF6H3FbrdnrHKvnMWnaq9eShYBRieCAlaBAvT2Jxu7sxmYcxaSsMs Kgj1OUaPc30x3F0zYLfy9Wn/sVoq/a6b/TsMQlWGllRkY9vS+P7zdxMXmnGKBHuu CsGLBA0XmqVW7gLdf0EXlzJjrh2vEA2uDmwqwvgyNtus9SDqHn9rhnKVdZGgXYzu /PZ7YBUoFdf8teExrh+4OxnhWI/oSYYUho+vzFlfsVDnlUvmFtZsGqV3doRB7HAy mDtYaIkpFGddNlR0RxCYIsaPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQRIe9S Ye2NtDcwytfeH9t+xFd7MB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt1pauqIrUCc1JXRCGYyTS9tNQ+XF2N1YD4ZgkUylWMxF9xHBg/Vpt Om99stH0S2lT41bHNJ1TwOueuHHA6GlcLEctZY5lXJL9RS3TDtCdrxDTfyusL/OH Q0C83uyqL53cF/mqDmWkLAmbMWE3zBlkabYd6ivmxWHEvhWCIRpWObo3SgEzIFhG t2HIhapTFsPR4ff+WUuc1NL6xH5OikM7PZus0PJgLp27DTqsGjHhSf0HpxyFy2LN dfJmeIc4ze06olqmfxIJiG2oKcarM8SByQzGLAoIoG83fB4aC+6xAtD6t8n0eECp F5u5sP8+k96qYqGcaCBCIim/YpJXIxa5 -----END CERTIFICATE-----Generated at Wed Jun 4 00:16:26 2025 by rpki-client