$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: +uQtnJvcN7w6BWY3zwbtXqIe4AmVMfx1ylcPEcaQtww= Subject key identifier: CF:C9:B6:07:18:03:DB:CA:0B:BD:8C:DD:9F:B9:8A:85:07:7B:51:A8 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 1526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 151E Signing time: Mon 30 Jun 2025 16:59:55 +0000 Manifest this update: Mon 30 Jun 2025 16:59:54 +0000 Manifest next update: Mon 07 Jul 2025 16:59:54 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: ONZLFfEGf7hyFS22TB/WL6TitrX4wvrky3ALyDdwT/I=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5414 (0x1526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Jun 30 16:59:54 2025 GMT Not After : Jul 7 16:59:54 2025 GMT Subject: CN=6862c28a-83be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f5:17:e7:ab:04:dc:c5:d8:1d:7d:27:9c:06: 5f:6c:24:e9:8c:c4:20:81:f8:98:47:d3:07:7a:35: 7c:1e:21:69:54:b0:e8:a8:c3:b2:af:60:f5:e7:27: 29:28:3b:e0:c9:d6:00:88:3e:c9:23:21:a6:54:c8: 3e:83:9c:5f:3c:8f:0e:ae:d9:30:02:80:cf:37:57: 41:8c:22:8b:0d:43:3c:be:bf:8c:f4:3a:d2:06:a2: f9:3b:b4:c6:9a:f2:a9:55:52:40:8d:71:cd:ff:46: 0e:db:b4:9a:f6:e4:32:e2:53:2a:84:6b:cf:c2:73: d7:d3:50:03:f1:68:fa:2b:8c:80:91:84:1b:9e:67: 88:6c:3c:8d:40:bf:80:ea:71:5e:df:23:d2:07:3c: e1:db:91:03:31:5e:8f:dc:ed:72:ce:b9:34:da:fc: fe:eb:43:25:61:27:8a:8c:73:93:ff:ef:77:42:d1: 77:9d:d3:44:68:a1:ae:e5:40:f9:73:11:44:d2:69: 54:92:95:ba:52:3b:1f:71:f4:6c:cf:e8:b8:34:12: e5:0c:97:a1:9e:28:33:7d:5f:16:6f:34:88:b0:c1: f9:90:a6:9b:8c:b8:39:41:9a:80:3c:23:9a:6a:43: 8b:fd:5c:85:85:f1:47:28:c4:d4:45:7a:ad:d9:2c: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C9:B6:07:18:03:DB:CA:0B:BD:8C:DD:9F:B9:8A:85:07:7B:51:A8 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:22:66:f4:25:86:33:0f:82:b1:c9:29:52:ce:c3:ad:be:93: 8e:6c:d3:7c:7f:51:15:ce:f2:36:48:c6:99:84:0a:06:f9:08: b5:4c:ac:9e:df:19:d4:fd:11:de:32:60:ac:c3:c3:80:21:7c: 38:68:e1:2c:34:dc:de:c4:63:ab:79:82:33:ac:47:ab:db:55: c3:f0:f0:a5:60:40:4e:1c:75:7a:6c:36:2c:7d:cb:09:b0:48: 47:81:d6:b7:3d:e2:f8:44:1f:e8:e3:cf:1e:59:38:1d:e7:b6: 75:c5:b3:4f:2a:c7:32:1c:8f:51:53:59:0e:10:ff:cb:ed:0f: 6d:d1:4a:37:24:d4:24:dd:43:2a:b8:6a:d9:e2:ba:20:f8:cc: 2f:a8:7b:b4:51:c8:de:5c:71:5b:42:03:89:5e:c7:3f:1e:6b: 30:a8:d1:2e:7b:22:86:9d:82:84:04:07:de:52:23:60:ea:e5: da:57:34:33:19:42:37:bb:92:1d:c7:86:75:82:19:a0:69:80: d0:c9:df:df:0a:18:2f:17:b1:08:5c:ae:9a:21:1b:61:ed:a3: d9:21:e7:32:97:b9:02:28:8e:1b:e5:db:09:7d:df:93:c5:e5: ae:ea:ff:01:2a:c2:3e:31:99:ab:17:fa:99:30:b1:8e:bb:e9: a5:de:05:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUwNjMwMTY1OTU0WhcNMjUwNzA3MTY1OTU0WjAYMRYwFAYD VQQDEw02ODYyYzI4YS04M2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9PUX56sE3MXYHX0nnAZfbCTpjMQggfiYR9MHejV8HiFpVLDoqMOyr2D15ycp KDvgydYAiD7JIyGmVMg+g5xfPI8OrtkwAoDPN1dBjCKLDUM8vr+M9DrSBqL5O7TG mvKpVVJAjXHN/0YO27Sa9uQy4lMqhGvPwnPX01AD8Wj6K4yAkYQbnmeIbDyNQL+A 6nFe3yPSBzzh25EDMV6P3O1yzrk02vz+60MlYSeKjHOT/+93QtF3ndNEaKGu5UD5 cxFE0mlUkpW6UjsfcfRsz+i4NBLlDJehnigzfV8WbzSIsMH5kKabjLg5QZqAPCOa akOL/VyFhfFHKMTURXqt2SwGKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/JtgcY A9vKC72M3Z+5ioUHe1GoMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBImb0JYYzD4KxySlSzsOtvpOObNN8f1EVzvI2SMaZhAoG+Qi1TKye 3xnU/RHeMmCsw8OAIXw4aOEsNNzexGOreYIzrEer21XD8PClYEBOHHV6bDYsfcsJ sEhHgda3PeL4RB/o488eWTgd57Z1xbNPKscyHI9RU1kOEP/L7Q9t0Uo3JNQk3UMq uGrZ4rog+MwvqHu0UcjeXHFbQgOJXsc/HmswqNEueyKGnYKEBAfeUiNg6uXaVzQz GUI3u5Idx4Z1ghmgaYDQyd/fChgvF7EIXK6aIRth7aPZIecyl7kCKI4b5dsJfd+T xeWu6v8BKsI+MZmrF/qZMLGOu+ml3gUg -----END CERTIFICATE-----Generated at Tue Jul 1 18:56:26 2025 by rpki-client