$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: tbgw2jrJiQrwIydShe55r+7DfV5CvYJo1WKXpY6yjO8= Subject key identifier: C1:DD:12:BC:E8:CD:12:27:1E:E7:DF:65:67:91:FB:ED:9C:05:39:AB Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 3491 Signing time: Mon 30 Jun 2025 15:13:57 +0000 Manifest this update: Mon 30 Jun 2025 15:13:57 +0000 Manifest next update: Mon 07 Jul 2025 15:13:57 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: 3pP88Vjts6egYlmeTtMnJILeeOmXE3BbnlOnZR4PB48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Jun 30 15:13:57 2025 GMT Not After : Jul 7 15:13:57 2025 GMT Subject: CN=6862a9b5-d028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:55:18:80:1d:cf:a5:c7:e7:e5:0e:45:b0:15: 92:1e:8d:95:a3:04:e8:31:0a:96:cd:15:f5:be:24: 69:4a:ff:62:f0:ab:ed:7e:f1:8a:26:3a:4c:42:d7: 64:b4:68:67:8e:84:7c:23:a7:a8:25:26:08:21:9a: 8d:37:c2:06:45:84:af:95:3e:02:db:30:10:a1:df: 1d:83:9f:f1:aa:c8:9b:50:43:80:ef:b0:d0:cf:e1: c6:51:95:cf:60:99:79:fe:33:02:27:e0:cb:b0:66: 19:2b:73:be:da:db:3f:fd:f2:f4:bd:1f:56:1f:be: 6c:cb:e2:98:34:62:52:6b:fd:0a:49:69:0f:77:89: 3a:e7:b5:61:e9:e7:3e:4b:70:0f:5e:24:42:61:90: 52:d4:ff:b6:a0:a1:3d:89:94:ad:83:f4:e7:5d:1c: ad:a7:56:86:08:13:c7:b1:30:c4:e1:5e:9f:9c:ce: 04:8e:5c:59:c1:db:b0:19:bd:35:61:3e:4a:fa:ee: 5f:46:fe:eb:5b:20:f8:d5:42:f4:b6:72:d0:ce:a4: 71:bf:87:b2:a6:b6:84:6c:43:73:2b:e9:eb:e1:76: 77:03:5d:5f:b2:87:a5:4d:9f:f3:3e:30:52:06:c1: e0:1d:7c:9f:61:68:82:eb:bb:cd:1d:4d:c6:1d:be: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DD:12:BC:E8:CD:12:27:1E:E7:DF:65:67:91:FB:ED:9C:05:39:AB X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:31:c3:a8:d4:e9:bc:59:7a:4d:f8:e4:b3:4b:a1:ae:32:dc: 68:cb:3a:b6:10:5f:85:81:08:d9:35:7f:02:40:8b:9d:f3:7d: 8e:80:fa:e8:ff:77:72:d3:66:75:c5:d6:26:17:66:ef:e5:8d: e3:73:ad:9c:a9:e2:4c:cd:96:4a:e3:57:51:c3:5e:e0:34:4c: 68:c8:24:88:61:06:8d:81:ae:69:bb:fe:15:9b:3f:d4:73:b9: ae:c1:8f:18:e5:88:68:18:e5:e1:c3:a1:28:ca:80:5e:cb:8d: 12:23:fe:df:a6:e7:39:da:bb:46:41:be:3c:f6:0d:e3:87:60: ca:e2:28:15:e4:b3:07:1f:1f:58:87:3e:03:7a:4f:84:09:ee: b2:1c:be:e1:a8:50:fc:3d:18:c4:a0:82:bb:7b:b8:9b:5f:ff: 00:cd:12:2a:d8:03:53:dd:1b:a6:24:46:35:31:b1:3e:fd:10: 55:c6:d1:6d:fb:7e:63:8c:c5:3a:cb:79:b7:a2:41:09:e9:74: e2:a7:79:0e:e2:26:e3:12:2e:70:05:c6:f2:fa:00:16:ee:8c: 88:80:27:79:3e:aa:05:00:b7:b0:e8:5d:32:76:31:2c:4a:51: 11:2c:bb:b0:e0:1b:a0:79:53:78:bc:db:d8:7e:f5:da:1d:f0: 8e:9f:8e:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjUwNjMwMTUxMzU3WhcNMjUwNzA3MTUxMzU3WjAYMRYwFAYD VQQDEw02ODYyYTliNS1kMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11UYgB3Ppcfn5Q5FsBWSHo2VowToMQqWzRX1viRpSv9i8KvtfvGKJjpMQtdk tGhnjoR8I6eoJSYIIZqNN8IGRYSvlT4C2zAQod8dg5/xqsibUEOA77DQz+HGUZXP YJl5/jMCJ+DLsGYZK3O+2ts//fL0vR9WH75sy+KYNGJSa/0KSWkPd4k657Vh6ec+ S3APXiRCYZBS1P+2oKE9iZStg/TnXRytp1aGCBPHsTDE4V6fnM4EjlxZwduwGb01 YT5K+u5fRv7rWyD41UL0tnLQzqRxv4eypraEbENzK+nr4XZ3A11fsoelTZ/zPjBS BsHgHXyfYWiC67vNHU3GHb54SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHdErzo zRInHuffZWeR++2cBTmrMB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVMcOo1Om8WXpN+OSzS6GuMtxoyzq2EF+FgQjZNX8CQIud832OgPro /3dy02Z1xdYmF2bv5Y3jc62cqeJMzZZK41dRw17gNExoyCSIYQaNga5pu/4Vmz/U c7muwY8Y5YhoGOXhw6EoyoBey40SI/7fpuc52rtGQb489g3jh2DK4igV5LMHHx9Y hz4Dek+ECe6yHL7hqFD8PRjEoIK7e7ibX/8AzRIq2ANT3RumJEY1MbE+/RBVxtFt +35jjMU6y3m3okEJ6XTip3kO4ibjEi5wBcby+gAW7oyIgCd5PqoFALew6F0ydjEs SlERLLuw4BugeVN4vNvYfvXaHfCOn44I -----END CERTIFICATE-----Generated at Tue Jul 1 19:18:54 2025 by rpki-client