$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: gAXGAebXTxuk8i+PfDR6kk+2f90NJW8Sp9LOcV1ZVaw= Subject key identifier: 5A:72:A6:61:31:8D:3B:92:B6:E8:F2:D1:47:9D:32:B1:06:E4:E2:FB Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1CFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1CF4 Signing time: Fri 30 May 2025 16:20:47 +0000 Manifest this update: Fri 30 May 2025 16:20:46 +0000 Manifest next update: Fri 06 Jun 2025 16:20:46 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: p/INnCMYrFpWulOczOd8qggKOxD5gi8kbfotiuleS4c=) 2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: fz4f6MmX7R6kRL2gcaEtaQrQoy9cdumfsJWJxUL1YME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7422 (0x1cfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: May 30 16:20:46 2025 GMT Not After : Jun 6 16:20:46 2025 GMT Subject: CN=6839dade-355b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:9c:3a:4d:02:5b:c3:e6:80:38:63:b0:8f: 42:7e:17:b2:79:66:a4:39:64:de:cf:a4:d5:e5:e9: 77:d8:c7:e3:8e:b2:5a:e8:6f:af:03:1a:24:b6:d3: da:4c:dd:01:f5:be:b7:cf:10:15:61:df:c4:28:41: d0:b7:b0:9d:8e:9f:b3:d7:63:0c:cf:4a:b0:1c:8f: 19:6a:87:99:fb:d2:76:e9:06:c8:65:67:a8:95:e4: 0c:9a:cf:7e:13:e3:74:11:43:1e:29:13:a5:30:06: 2c:7e:55:ca:c0:b5:f9:29:0a:66:66:95:24:c8:71: 85:ad:8a:7b:62:0f:e3:39:76:92:61:f7:0d:2b:4b: 4e:60:59:66:9a:a5:19:2c:7c:ea:4b:14:ad:0c:2c: 39:3a:65:bc:c5:b4:04:f4:44:f3:36:ef:9e:ad:fe: a9:f1:2a:2f:6e:87:8c:3b:5f:03:39:1e:24:be:2d: 54:d5:8e:f8:94:3e:45:bd:6c:7e:8f:96:e7:fd:92: d6:a2:60:4b:06:bb:de:d2:fa:a8:98:26:98:a4:39: c3:4b:52:38:69:3e:0a:ab:83:02:90:be:05:f4:cd: 9d:ab:80:af:b5:c7:40:b4:91:53:3f:77:0e:3f:8b: e2:0c:4a:5d:7d:d0:05:5e:69:fe:52:8a:4c:6d:64: a5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:72:A6:61:31:8D:3B:92:B6:E8:F2:D1:47:9D:32:B1:06:E4:E2:FB X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:50:22:ef:7a:57:e1:37:d8:e5:04:36:69:05:fc:cc:a7:2c: 37:20:28:bc:92:76:e2:08:11:7e:19:a4:36:ec:15:7c:cc:89: 1b:f2:37:8c:67:3c:bc:4a:83:62:db:fb:60:b1:3b:fb:10:41: 85:43:84:86:85:c2:92:5f:8a:e0:4b:79:f6:67:15:72:8f:f7: da:36:7e:3a:90:a5:6c:ec:51:eb:b2:ef:0a:c1:2d:3d:1d:5a: 3b:38:e2:09:ec:64:a7:1a:a7:bf:ef:b1:18:9c:00:bb:a1:b5: 5b:b9:94:5b:9a:d7:21:5c:be:85:5b:b0:62:4a:66:45:23:bd: 75:95:26:12:40:de:94:55:c5:f4:4a:ba:43:2b:0a:8b:0b:1e: 2d:46:88:fb:16:4b:93:3e:93:d0:f0:90:37:92:fe:fa:4f:55: 91:2f:ab:82:c2:e2:d1:29:61:44:af:df:ab:8a:c5:5b:4d:93: fb:a3:f2:41:54:b3:9d:4e:ce:24:a7:67:a0:ee:a3:bc:26:58: fa:90:fc:0f:f0:8e:17:2c:27:e1:cb:e5:7a:7f:74:14:25:6b: b1:b3:2e:6e:00:98:a8:fc:98:9f:f4:27:1d:5d:2d:87:3d:9c: 67:06:24:e6:13:56:a9:5b:83:24:0a:0b:cd:4d:52:77:0f:dc: f4:de:7b:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjUwNTMwMTYyMDQ2WhcNMjUwNjA2MTYyMDQ2WjAYMRYwFAYD VQQDEw02ODM5ZGFkZS0zNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPOcOk0CW8PmgDhjsI9CfheyeWakOWTez6TV5el32MfjjrJa6G+vAxokttPa TN0B9b63zxAVYd/EKEHQt7Cdjp+z12MMz0qwHI8ZaoeZ+9J26QbIZWeoleQMms9+ E+N0EUMeKROlMAYsflXKwLX5KQpmZpUkyHGFrYp7Yg/jOXaSYfcNK0tOYFlmmqUZ LHzqSxStDCw5OmW8xbQE9ETzNu+erf6p8SovboeMO18DOR4kvi1U1Y74lD5FvWx+ j5bn/ZLWomBLBrve0vqomCaYpDnDS1I4aT4Kq4MCkL4F9M2dq4CvtcdAtJFTP3cO P4viDEpdfdAFXmn+UopMbWSluQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpypmEx jTuStujy0UedMrEG5OL7MB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKUCLvelfhN9jlBDZpBfzMpyw3ICi8knbiCBF+GaQ27BV8zIkb8jeM Zzy8SoNi2/tgsTv7EEGFQ4SGhcKSX4rgS3n2ZxVyj/faNn46kKVs7FHrsu8KwS09 HVo7OOIJ7GSnGqe/77EYnAC7obVbuZRbmtchXL6FW7BiSmZFI711lSYSQN6UVcX0 SrpDKwqLCx4tRoj7FkuTPpPQ8JA3kv76T1WRL6uCwuLRKWFEr9+risVbTZP7o/JB VLOdTs4kp2eg7qO8Jlj6kPwP8I4XLCfhy+V6f3QUJWuxsy5uAJio/Jif9CcdXS2H PZxnBiTmE1apW4MkCgvNTVJ3D9z03nvv -----END CERTIFICATE-----Generated at Sat May 31 17:36:03 2025 by rpki-client