$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json) Hash identifier: 1UIi3WsCCgXWVxgSdFwDKJrMmJaeA27YknjSkhp6EOc= Subject key identifier: A0:94:F8:D6:EB:01:0A:7F:AB:E3:FF:57:EC:A8:01:91:47:29:7A:3C Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft Manifest number: 04 Signing time: Thu 05 Jun 2025 07:37:09 +0000 Manifest this update: Thu 05 Jun 2025 07:37:08 +0000 Manifest next update: Thu 12 Jun 2025 07:37:08 +0000 Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: ISeZC3KcYmqRoT1cQYlDfd45BiWauqEXyDeyRppiit0=) 2: 3389804E3EE411F0A90C8C51C4F9AE02.roa (hash: 6OXZgM+3Jd9VusOn+wny8Xr8Eu07epm8MvGSb7UmKEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Jun 5 07:37:08 2025 GMT Not After : Jun 12 07:37:08 2025 GMT Subject: CN=68414925-7bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:84:e4:31:e8:61:6d:0b:68:c0:09:fb:af: 9a:95:da:74:45:6d:a7:2e:5e:e5:6e:6d:bb:06:0e: db:11:36:98:7a:0a:15:4d:e2:b7:2d:6a:d0:51:f0: b6:35:bc:96:8e:f9:dc:6e:3b:a2:cf:88:31:a5:6e: 05:d1:38:7e:bb:3d:61:ff:7f:b5:11:62:79:b2:6c: 51:36:ea:eb:e9:cd:82:9b:12:4b:18:90:32:9a:a3: 5c:b5:28:3f:cf:7b:1c:5a:0c:3a:63:3b:cd:ed:c2: 23:2d:41:c9:e7:36:7f:8b:68:4e:33:61:52:1c:bf: 11:54:8a:48:c5:55:b4:bd:b2:0f:bc:f9:d9:3b:76: e6:7c:52:ac:51:7d:73:b1:53:59:a2:e6:ee:5a:f3: b3:6d:8c:0e:30:0f:e2:11:be:ce:ef:f0:4b:71:4c: 10:4e:db:fd:bd:1a:b8:26:3d:94:1d:f0:3c:2f:8f: 6e:72:59:67:61:c5:9b:e6:44:1d:16:2c:25:62:1e: 2f:59:24:64:ff:75:f1:3b:96:c9:bb:33:f4:5e:df: de:29:1d:c4:25:4f:e3:f5:c1:dc:bd:2d:77:a6:1b: 5d:1f:99:40:a4:b0:0d:b9:da:de:59:c5:c3:27:37: 0d:05:e7:a6:67:76:44:3f:64:c2:90:3a:e9:77:f3: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:94:F8:D6:EB:01:0A:7F:AB:E3:FF:57:EC:A8:01:91:47:29:7A:3C X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c0:52:51:66:50:d7:98:28:d9:d9:47:e0:60:b7:e4:4b:9b: 09:ac:39:9b:16:4f:5b:1b:0e:f9:7a:c1:13:bf:35:fa:3f:e2: d9:8b:1d:88:40:a8:71:0e:e8:d3:90:29:0b:17:08:b9:98:22: 31:35:ca:1b:56:af:93:b3:c7:13:d7:d3:9f:1f:58:d8:de:e3: d3:5c:29:41:0d:00:61:1a:31:fe:8b:17:63:b8:24:8f:cb:77: 08:df:1d:ab:6c:e6:25:83:14:5c:84:bb:24:01:3f:44:36:fc: af:e0:af:8f:99:e6:c5:b8:2f:ac:b1:3b:a0:8e:56:21:40:d9: 19:fe:28:fb:7a:48:4b:1a:0c:48:5e:e6:52:6f:e3:c6:a7:1c: cd:9c:63:e8:72:12:0a:ce:30:62:3e:e2:51:64:81:49:4b:e2: b1:74:f0:34:20:b4:4d:a9:22:71:3c:89:2c:74:04:d0:32:e1: c1:e7:af:7e:96:21:a1:e3:c2:7a:ea:3a:55:ea:da:07:9f:de: 61:3f:8d:da:ce:88:c0:72:e9:70:46:75:5e:f1:9b:11:f4:c0: 46:d8:30:84:ed:3a:fc:66:69:03:08:2f:6c:b2:a5:cf:8e:f5: 78:bf:54:2b:19:7b:cf:9d:95:15:59:7e:86:3d:f4:52:f4:92: 56:37:b6:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF NUFERjYzQjAeFw0yNTA2MDUwNzM3MDhaFw0yNTA2MTIwNzM3MDhaMBgxFjAUBgNV BAMTDTY4NDE0OTI1LTdiYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH0ITkMehhbQtowAn7r5qV2nRFbacuXuVubbsGDtsRNph6ChVN4rctatBR8LY1 vJaO+dxuO6LPiDGlbgXROH67PWH/f7URYnmybFE26uvpzYKbEksYkDKao1y1KD/P exxaDDpjO83twiMtQcnnNn+LaE4zYVIcvxFUikjFVbS9sg+8+dk7duZ8UqxRfXOx U1mi5u5a87NtjA4wD+IRvs7v8EtxTBBO2/29GrgmPZQd8Dwvj25yWWdhxZvmRB0W LCViHi9ZJGT/dfE7lsm7M/Re394pHcQlT+P1wdy9LXemG10fmUCksA252t5ZxcMn Nw0F56ZndkQ/ZMKQOul38+7lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoJT41usB Cn+r4/9X7KgBkUcpejwwHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnAUlFmUNeYKNnZR+Bgt+RLmwmsOZsWT1sbDvl6wRO/Nfo/4tmLHYhA qHEO6NOQKQsXCLmYIjE1yhtWr5OzxxPX058fWNje49NcKUENAGEaMf6LF2O4JI/L dwjfHats5iWDFFyEuyQBP0Q2/K/gr4+Z5sW4L6yxO6COViFA2Rn+KPt6SEsaDEhe 5lJv48anHM2cY+hyEgrOMGI+4lFkgUlL4rF08DQgtE2pInE8iSx0BNAy4cHnr36W IaHjwnrqOlXq2gef3mE/jdrOiMBy6XBGdV7xmxH0wEbYMITtOvxmaQMIL2yypc+O 9Xi/VCsZe8+dlRVZfoY99FL0klY3tiQ= -----END CERTIFICATE-----Generated at Sat Jun 7 05:34:47 2025 by rpki-client