$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: Lnguieaa4/8Da90/sEsfSnQ/4S9V40j9fWEjSEO4SFU= Subject key identifier: 04:53:16:CC:5F:E0:E7:B6:44:15:51:60:DD:67:D6:BC:11:28:55:25 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 085A Signing time: Mon 02 Jun 2025 14:47:34 +0000 Manifest this update: Mon 02 Jun 2025 14:47:33 +0000 Manifest next update: Mon 09 Jun 2025 14:47:33 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: vMCnGEBmheCiEDSN1m/b6uDfdEXUKhqva2L954DTwQI=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: qF9QEK3QPpy3Uy+0VtrwIu1I68i1XFjo3G0NKyyWueo=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: 1TGK4JO2Zf1/5yi9BJnBuBHhCgKzzBchGgX4YKczTW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jun 2 14:47:33 2025 GMT Not After : Jun 9 14:47:33 2025 GMT Subject: CN=683db986-aaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:e7:b8:6f:e0:c9:e0:6d:19:1e:85:89:72: 8d:d5:32:56:24:1d:36:e4:84:c4:27:bd:3a:fc:4c: fe:15:1f:2b:c3:33:f7:c1:82:39:3e:f0:db:8d:d1: aa:1b:dd:e1:42:28:46:1d:7f:19:9d:6a:65:1c:0b: 67:2f:ad:7e:f3:25:4c:76:6a:ed:da:97:a8:b5:6f: 7d:78:ab:e0:a1:b2:a4:f5:6c:46:01:2e:ec:8f:e2: ad:5d:c8:ae:17:bd:da:cc:0f:d5:6b:d5:6e:a5:e7: f1:d6:96:dd:9e:f1:8c:bb:31:38:a4:ad:cc:ce:47: ae:99:0a:49:df:37:5b:f2:53:86:76:7d:ae:6c:da: 02:27:f0:91:36:fc:00:0f:54:99:61:fb:7c:fd:e4: 4b:13:6e:cc:94:ed:78:d1:97:b3:81:79:ac:56:da: 60:44:a7:5d:b4:8b:43:d2:f0:7b:bf:11:18:2a:1c: d1:52:f0:58:36:09:89:89:af:18:aa:c3:e2:6a:b0: de:df:8a:6a:1b:2d:75:2b:ab:8c:cc:ef:11:78:85: af:c6:29:02:b0:94:bd:1b:4d:07:ac:68:f9:99:d3: 89:5a:71:d1:e0:ca:b3:ab:50:38:c3:09:df:40:b3: 98:50:0a:dd:e9:3c:8f:e7:c5:d9:43:02:6c:03:4d: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:16:CC:5F:E0:E7:B6:44:15:51:60:DD:67:D6:BC:11:28:55:25 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ba:b1:cd:8d:12:04:41:8f:3e:1d:1d:e1:72:64:f3:29:ae: bd:b5:dd:bc:27:86:1a:35:88:24:fb:d6:e9:8d:30:74:04:c4: 49:58:a2:85:d5:91:1b:f5:15:51:85:8d:be:94:2b:36:a8:2e: 53:1f:85:4b:de:a8:25:f2:b6:42:63:49:12:f5:24:30:40:aa: cf:f3:9a:9c:4b:6e:7d:8b:11:b0:c5:f9:d6:38:87:8b:67:00: 21:dc:1e:a7:a8:bd:cb:e6:17:cc:11:c8:2c:f3:fa:9b:6f:65: 0e:dd:7c:7e:61:10:d1:c7:4d:a7:ce:5d:b4:22:66:fb:3e:7d: ca:34:08:96:8a:f2:23:ca:d6:af:43:2d:7f:e4:d1:65:36:c2: 3f:86:3c:a4:5a:38:6e:4a:8c:ee:a4:93:25:15:eb:b4:94:69: f0:c7:c5:19:48:71:16:72:d1:33:7f:de:03:c3:7a:f0:9d:69: 70:ee:e2:29:34:82:76:32:f8:7a:fb:09:1f:20:39:e8:e8:33: f4:4a:cf:35:62:18:73:61:3f:53:b7:ca:da:bd:27:80:07:c5: 00:c7:c5:77:c4:71:dd:60:e3:2a:29:4c:47:9d:b3:57:d6:3d: 22:7b:8d:10:64:b3:69:8f:f9:75:7e:e4:99:de:b8:81:75:f6: e2:27:31:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwNjAyMTQ0NzMzWhcNMjUwNjA5MTQ0NzMzWjAYMRYwFAYD VQQDEw02ODNkYjk4Ni1hYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5bnuG/gyeBtGR6FiXKN1TJWJB025ITEJ706/Ez+FR8rwzP3wYI5PvDbjdGq G93hQihGHX8ZnWplHAtnL61+8yVMdmrt2peotW99eKvgobKk9WxGAS7sj+KtXciu F73azA/Va9Vupefx1pbdnvGMuzE4pK3MzkeumQpJ3zdb8lOGdn2ubNoCJ/CRNvwA D1SZYft8/eRLE27MlO140ZezgXmsVtpgRKddtItD0vB7vxEYKhzRUvBYNgmJia8Y qsPiarDe34pqGy11K6uMzO8ReIWvxikCsJS9G00HrGj5mdOJWnHR4Mqzq1A4wwnf QLOYUArd6TyP58XZQwJsA00oQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARTFsxf 4Oe2RBVRYN1n1rwRKFUlMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaurHNjRIEQY8+HR3hcmTzKa69td28J4YaNYgk+9bpjTB0BMRJWKKF 1ZEb9RVRhY2+lCs2qC5TH4VL3qgl8rZCY0kS9SQwQKrP85qcS259ixGwxfnWOIeL ZwAh3B6nqL3L5hfMEcgs8/qbb2UO3Xx+YRDRx02nzl20Imb7Pn3KNAiWivIjytav Qy1/5NFlNsI/hjykWjhuSozupJMlFeu0lGnwx8UZSHEWctEzf94Dw3rwnWlw7uIp NIJ2Mvh6+wkfIDno6DP0Ss81YhhzYT9Tt8ravSeAB8UAx8V3xHHdYOMqKUxHnbNX 1j0ie40QZLNpj/l1fuSZ3riBdfbiJzGS -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:09 2025 by rpki-client