$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json) Hash identifier: TU7/j8V+1SMSGf2Qe1lpdDgNr3ep+gDq08bXoblqVhE= Subject key identifier: B4:F3:D0:1A:6B:47:FF:D8:89:AA:16:36:22:A1:4E:00:05:49:9E:63 Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft Manifest number: 4E Signing time: Sun 01 Jun 2025 07:02:08 +0000 Manifest this update: Sun 01 Jun 2025 07:02:07 +0000 Manifest next update: Sun 08 Jun 2025 07:02:07 +0000 Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: 6SZHJMNN1TFmtEHmmAJ6lTD7K7mx2x8fcQRwsafG+x0=) 2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Validity Not Before: Jun 1 07:02:07 2025 GMT Not After : Jun 8 07:02:07 2025 GMT Subject: CN=683bfaf0-51d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:ee:ba:01:ad:da:5a:be:8b:31:70:04:d2: 79:6e:22:9a:9d:69:bd:54:99:22:b0:ce:f3:47:98: d9:fe:d6:d2:f5:0c:36:fe:f4:3d:ce:a2:ba:8d:f5: ec:5f:ed:24:42:a3:be:49:0f:91:47:60:55:eb:6f: 74:f7:49:99:db:68:9d:4e:0f:2b:4e:48:e5:4b:c0: 7f:a7:67:f5:ca:75:67:3d:60:5f:7d:df:93:7a:d2: c9:af:2b:c1:ce:5a:31:94:53:ed:ae:8b:82:0d:e6: b5:d5:fa:90:ed:dd:36:56:10:a7:38:de:7f:2a:19: a0:da:34:3f:f9:dc:7d:aa:a7:60:1d:45:11:70:a6: 8e:d2:77:ce:80:60:34:17:9e:03:56:4a:4d:6d:22: 2a:f3:27:02:23:fc:90:8a:30:06:0d:e3:f9:e8:7f: 4c:7e:92:0b:ce:78:17:6b:cc:f5:3d:0f:98:56:91: dd:3b:60:aa:86:a8:1a:19:55:6e:ca:b4:f6:68:2c: bb:d6:d0:ad:a8:50:9b:8f:49:c1:34:20:42:ff:78: b5:6b:5b:a5:79:89:75:5d:9b:5b:d7:d4:2a:b0:0e: 52:bc:49:e8:0e:99:13:cf:c2:89:90:b8:05:7d:cb: 0b:a8:4a:b1:e4:c1:12:fb:7d:59:37:24:d1:0c:82: 36:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F3:D0:1A:6B:47:FF:D8:89:AA:16:36:22:A1:4E:00:05:49:9E:63 X509v3 Authority Key Identifier: keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:15:25:04:be:f3:5c:4b:59:67:01:e6:f9:a8:b7:dd:f9:7d: 73:c7:f1:4b:24:d6:93:77:8b:07:78:b9:18:89:69:07:aa:79: 43:76:6d:d6:24:1a:12:80:5d:94:84:96:5f:8b:c8:92:cf:63: 03:b6:45:fa:2e:0f:9e:6e:88:90:22:9b:d4:1e:48:b8:38:54: d1:6c:5c:fb:87:7b:7f:35:f1:c6:ad:c7:71:e2:52:51:2d:b1: 36:e7:a7:a3:dc:8a:84:27:68:c4:7e:37:ff:03:c4:42:3d:33: e5:b6:93:6b:f5:24:d4:de:e4:4e:1b:f1:2a:47:28:ae:ca:5b: 00:b6:4f:5f:65:d5:0b:2f:e6:c7:5e:65:96:9c:14:58:69:58: 65:96:c6:ab:3b:44:0e:5f:c3:67:4b:bb:3d:56:68:ad:03:fd: 33:91:95:ee:ef:1e:60:3b:76:8a:64:1a:18:6f:15:64:7f:b7: e6:1b:6f:15:e1:5d:fc:c4:fa:38:bc:c1:6b:85:9a:44:67:2d: 4b:fb:5c:3d:69:44:a7:a6:76:d1:ae:a8:67:29:f4:d3:8c:e4: 32:b4:8b:7c:5c:05:e8:e3:86:3c:a3:bd:c5:77:69:8d:49:b7: e9:9d:ee:d4:c2:83:35:96:ef:1b:fa:01:44:42:49:61:43:31: d2:97:42:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDEyNTExMC8GA1UEBRMoNkY3N0MxOUYxMUQzMkFBQUE0MkUyNjkxNkY3NDgyRUZC OEY5N0ExQzAeFw0yNTA2MDEwNzAyMDdaFw0yNTA2MDgwNzAyMDdaMBgxFjAUBgNV BAMTDTY4M2JmYWYwLTUxZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYhe66Aa3aWr6LMXAE0nluIpqdab1UmSKwzvNHmNn+1tL1DDb+9D3OorqN9exf 7SRCo75JD5FHYFXrb3T3SZnbaJ1ODytOSOVLwH+nZ/XKdWc9YF9935N60smvK8HO WjGUU+2ui4IN5rXV+pDt3TZWEKc43n8qGaDaND/53H2qp2AdRRFwpo7Sd86AYDQX ngNWSk1tIirzJwIj/JCKMAYN4/nof0x+kgvOeBdrzPU9D5hWkd07YKqGqBoZVW7K tPZoLLvW0K2oUJuPScE0IEL/eLVrW6V5iXVdm1vX1CqwDlK8SegOmRPPwomQuAV9 ywuoSrHkwRL7fVk3JNEMgjabAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtPPQGmtH /9iJqhY2IqFOAAVJnmMwHwYDVR0jBBgwFoAUb3fBnxHTKqqkLiaRb3SC77j5ehww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMTI1L0Y1Rjc4NzhBQ0Mx MDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fxa0xpYVJiM1NDNzdqNWVo dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjNmQm54SFRLcXFrTGlhUmIzU0M3N2o1ZWh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MTI1L0Y1Rjc4NzhBQ0MxMDExRUY4NzM5NkE2RUM0RjlBRTAyL2IzZkJueEhUS3Fx a0xpYVJiM1NDNzdqNWVody5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALUVJQS+81xLWWcB5vmot935fXPH8Usk1pN3iwd4uRiJaQeqeUN2bdYk GhKAXZSEll+LyJLPYwO2RfouD55uiJAim9QeSLg4VNFsXPuHe3818catx3HiUlEt sTbnp6PcioQnaMR+N/8DxEI9M+W2k2v1JNTe5E4b8SpHKK7KWwC2T19l1Qsv5sde ZZacFFhpWGWWxqs7RA5fw2dLuz1WaK0D/TORle7vHmA7dopkGhhvFWR/t+YbbxXh XfzE+ji8wWuFmkRnLUv7XD1pRKemdtGuqGcp9NOM5DK0i3xcBejjhjyjvcV3aY1J t+md7tTCgzWW7xv6AURCSWFDMdKXQpk= -----END CERTIFICATE-----Generated at Mon Jun 2 19:33:23 2025 by rpki-client