$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: Xrq8m08ktVRJ7KRnF8COxKWXpuDY7EtjmdfznAqfiRw= Subject key identifier: D0:C9:88:26:8E:0A:2C:1D:88:3F:19:70:12:AE:12:08:71:F0:EB:4D Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: 7C Signing time: Tue 03 Jun 2025 06:28:09 +0000 Manifest this update: Tue 03 Jun 2025 06:28:09 +0000 Manifest next update: Tue 10 Jun 2025 06:28:09 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: TF03Ik8FyKblVDsfPCaPT/ugu6L0bqd5k8fzjqDOCNw=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Jun 3 06:28:09 2025 GMT Not After : Jun 10 06:28:09 2025 GMT Subject: CN=683e95f9-078b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:19:8c:e2:93:c0:59:8d:65:b1:6f:83:1d: 0d:9d:2d:03:2e:98:4d:13:07:d2:dd:20:e6:36:38: a1:f1:27:26:6a:31:e2:70:68:b4:71:a2:cb:51:02: ec:76:20:51:76:d3:88:fb:ab:34:3d:b4:0b:a8:11: b5:4b:71:d2:fa:dc:32:10:84:3e:22:bf:54:16:f0: f4:92:89:79:29:81:dc:24:27:27:13:1d:80:3b:69: ce:9f:90:30:3c:8f:f7:21:37:18:6c:eb:41:06:34: 4d:72:62:ee:ec:59:c0:aa:95:32:c0:36:77:ef:29: 6e:39:d1:6e:41:06:a3:7b:db:bc:33:2c:7b:f8:bc: 36:e0:3e:d0:ab:ed:93:d8:15:ea:58:41:ab:7b:f8: f9:dc:09:33:ca:09:ff:c3:84:80:03:5e:22:9d:25: 7e:cd:98:af:b9:eb:98:33:05:31:39:2e:40:5b:5d: 08:d3:9b:c6:e3:7e:ec:a8:4a:39:6b:bd:9c:2e:22: e8:b1:ce:e9:f7:cc:4f:7d:cb:e7:43:7e:94:e8:d8: 91:fe:bf:6e:ce:9f:80:c8:43:5f:02:fa:29:70:4e: 93:8c:d8:4c:20:ae:3a:10:5e:b9:44:bc:f4:93:e4: 01:10:34:a0:12:a8:16:88:a5:f7:ee:19:85:fe:3f: 73:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C9:88:26:8E:0A:2C:1D:88:3F:19:70:12:AE:12:08:71:F0:EB:4D X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ae:b0:4f:af:d4:05:93:1f:c5:95:ac:e8:99:17:28:fb:eb: d2:28:c0:63:2d:f4:0f:87:ed:37:fb:b4:1e:4a:49:e5:23:a8: f0:d2:a1:20:df:ca:69:03:2b:57:c1:4a:cb:ba:72:13:7d:39: 18:7c:80:eb:b7:b8:7c:65:28:f7:1d:64:96:f8:59:83:10:9e: 7d:9a:f4:d7:5f:a8:30:1b:32:d7:dc:16:11:c6:6a:f8:2b:61: 24:e5:f5:ac:48:29:c0:df:47:0f:92:9a:f9:00:21:b6:14:7b: aa:1a:af:4e:9a:e3:b6:cf:2d:a5:49:ee:ce:a2:75:90:94:40: 21:94:f0:40:ef:f1:2f:d7:b7:96:18:f6:78:30:63:b7:03:7f: fa:56:f3:af:51:4e:39:ab:61:db:4a:12:06:f1:66:b6:12:29: 1f:89:73:97:8c:63:30:ce:c4:76:fc:80:21:f1:41:d1:f8:ae: cc:7c:bb:6c:e5:36:41:34:d4:47:c8:22:98:79:dc:f5:ac:23: aa:73:48:fc:3c:bc:3e:56:5b:4c:77:48:a5:ff:b6:89:61:36: a4:fb:1d:ad:fd:12:1f:ef:61:b0:a8:41:17:04:63:d0:45:2f: 43:57:5e:a3:1a:78:73:e6:d1:ab:3b:ca:71:6e:92:d9:e8:34: 84:96:99:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoREQ1NzQ2MEYwQzEyQkUwNTQ2MTNBMkY0Mjk2N0IwN0RB NTY4N0JGMDAeFw0yNTA2MDMwNjI4MDlaFw0yNTA2MTAwNjI4MDlaMBgxFjAUBgNV BAMTDTY4M2U5NWY5LTA3OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfZBmM4pPAWY1lsW+DHQ2dLQMumE0TB9LdIOY2OKHxJyZqMeJwaLRxostRAux2 IFF204j7qzQ9tAuoEbVLcdL63DIQhD4iv1QW8PSSiXkpgdwkJycTHYA7ac6fkDA8 j/chNxhs60EGNE1yYu7sWcCqlTLANnfvKW450W5BBqN727wzLHv4vDbgPtCr7ZPY FepYQat7+PncCTPKCf/DhIADXiKdJX7NmK+565gzBTE5LkBbXQjTm8bjfuyoSjlr vZwuIuixzun3zE99y+dDfpTo2JH+v27On4DIQ18C+ilwTpOM2EwgrjoQXrlEvPST 5AEQNKASqBaIpffuGYX+P3MvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0MmIJo4K LB2IPxlwEq4SCHHw600wHwYDVR0jBBgwFoAU3VdGDwwSvgVGE6L0KWewfaVoe/Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzVBMTgyQzdDODUy MzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2Vf QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1ZkR0R3d1N2Z1ZHRTZMMEtXZXdmYVZvZV9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzVBMTgyQzdDODUyMzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdW R0U2TDBLV2V3ZmFWb2VfQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKKusE+v1AWTH8WVrOiZFyj769IowGMt9A+H7Tf7tB5KSeUjqPDSoSDf ymkDK1fBSsu6chN9ORh8gOu3uHxlKPcdZJb4WYMQnn2a9NdfqDAbMtfcFhHGavgr YSTl9axIKcDfRw+SmvkAIbYUe6oar06a47bPLaVJ7s6idZCUQCGU8EDv8S/Xt5YY 9ngwY7cDf/pW869RTjmrYdtKEgbxZrYSKR+Jc5eMYzDOxHb8gCHxQdH4rsx8u2zl NkE01EfIIph53PWsI6pzSPw8vD5WW0x3SKX/tolhNqT7Ha39Eh/vYbCoQRcEY9BF L0NXXqMaeHPm0as7ynFuktnoNISWma4= -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:46 2025 by rpki-client