$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json) Hash identifier: /1LUmDBcQUQ9paQp3EBppMQcHzt3VzSIWFuvwsu3PB4= Subject key identifier: F1:42:F4:03:2C:C2:70:0A:12:A6:61:56:89:43:F6:F7:94:D4:EA:2A Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft Manifest number: 0673 Signing time: Fri 30 May 2025 22:39:32 +0000 Manifest this update: Fri 30 May 2025 22:39:31 +0000 Manifest next update: Fri 06 Jun 2025 22:39:31 +0000 Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: +Y+XlwEyZgSNNSRF+1WTVsz8GBj7iX8NvXy3pHW8b50=) 2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: FOS9hpfhSMJ/5W+e+NFkrecUhC86TAOPH0uxsIPYP4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Validity Not Before: May 30 22:39:31 2025 GMT Not After : Jun 6 22:39:31 2025 GMT Subject: CN=683a33a3-1324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:4a:26:64:b9:1e:8a:ae:6d:d5:6f:39:a7: 26:15:07:2d:66:f1:9e:07:55:9f:67:f1:81:2d:5a: 67:7f:7e:f2:0f:84:ed:5c:20:6a:f4:dd:0e:de:7c: a1:9d:0c:e3:a9:bb:e2:cf:4f:56:26:ef:c3:39:65: c3:59:9a:ab:3b:71:1b:2c:33:18:50:33:ec:6a:5d: 67:f0:01:1b:83:d7:01:17:c9:03:92:53:36:62:8b: 88:04:d7:1a:f6:7c:21:39:e3:38:ac:18:89:9a:c8: 9b:4e:46:8f:93:c0:26:73:68:e5:10:cd:cd:e0:28: d1:f6:23:07:56:7d:c5:bb:3f:28:d1:7b:89:88:1d: 67:8e:a4:5d:65:09:d3:d4:a2:27:6f:6c:69:ab:3d: 4a:ce:e5:c8:8c:6e:a7:b3:00:a8:a7:4e:27:39:67: 2a:15:35:db:81:2d:83:6b:19:c4:6c:cd:88:0c:50: 07:97:71:69:ee:c0:af:bb:b6:e7:d7:f7:fc:32:2c: a2:1c:77:f2:69:0b:b9:22:0c:35:84:39:84:1b:d3: 67:a1:af:ab:32:ee:1e:aa:55:14:df:f0:8b:3a:3d: 78:0b:c4:df:b8:07:eb:f3:ff:ea:9f:9d:75:89:e5: 16:bf:d2:bc:25:db:6c:04:6b:76:36:6e:b1:94:78: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:F4:03:2C:C2:70:0A:12:A6:61:56:89:43:F6:F7:94:D4:EA:2A X509v3 Authority Key Identifier: keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:11:e8:a2:87:65:ef:43:de:0b:73:9f:1c:61:25:e8:84:e8: 94:7d:35:c5:ab:1f:64:a9:5c:07:6c:17:bb:9d:a5:0f:39:4b: c2:fa:79:2c:df:cb:f4:02:df:85:88:16:55:69:68:ed:e0:cc: f0:72:8c:39:b7:fc:88:43:e5:3b:14:88:37:8c:30:9e:43:99: d1:ab:80:6f:23:d1:6d:41:4f:9a:8c:58:7f:af:eb:ba:4b:a5: 13:c9:01:8c:4e:3f:90:ec:e9:47:c1:7d:ef:14:ca:73:c3:89: 72:20:3b:76:5d:88:d3:18:28:33:fe:2c:d9:de:ec:ae:c5:7a: d6:51:cd:ab:a2:bf:47:e1:08:dd:9d:44:c0:bd:8c:a4:f6:5b: d4:a2:f3:79:81:4c:2f:1b:42:a9:9d:f3:a4:cd:4c:a2:4a:dd: e8:84:01:69:36:e6:60:23:c4:a7:b8:93:18:5f:2a:51:3a:de: 34:3c:22:b8:b8:02:0b:2c:f9:56:84:b0:9f:ec:ff:31:28:77: 3a:2a:c9:30:17:e8:ca:04:51:a7:b0:a4:0f:58:e0:7e:9f:9e: 88:2e:22:8a:84:1d:96:88:6f:9a:66:0e:2a:43:17:ba:5d:fe: 9e:e4:69:da:3b:d1:a4:27:f7:99:b5:01:9b:dc:60:7b:41:e1: 98:c9:6f:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5 NTZBN0Q5RTMwHhcNMjUwNTMwMjIzOTMxWhcNMjUwNjA2MjIzOTMxWjAYMRYwFAYD VQQDEw02ODNhMzNhMy0xMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu1KJmS5HoqubdVvOacmFQctZvGeB1WfZ/GBLVpnf37yD4TtXCBq9N0O3nyh nQzjqbviz09WJu/DOWXDWZqrO3EbLDMYUDPsal1n8AEbg9cBF8kDklM2YouIBNca 9nwhOeM4rBiJmsibTkaPk8Amc2jlEM3N4CjR9iMHVn3Fuz8o0XuJiB1njqRdZQnT 1KInb2xpqz1KzuXIjG6nswCop04nOWcqFTXbgS2DaxnEbM2IDFAHl3Fp7sCvu7bn 1/f8MiyiHHfyaQu5Igw1hDmEG9Nnoa+rMu4eqlUU3/CLOj14C8TfuAfr8//qn511 ieUWv9K8JdtsBGt2Nm6xlHhDrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFC9AMs wnAKEqZhVolD9veU1OoqMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1 dkg3UFo1czdMVHlWYW4yZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGEeiih2XvQ94Lc58cYSXohOiUfTXFqx9kqVwHbBe7naUPOUvC+nks 38v0At+FiBZVaWjt4Mzwcow5t/yIQ+U7FIg3jDCeQ5nRq4BvI9FtQU+ajFh/r+u6 S6UTyQGMTj+Q7OlHwX3vFMpzw4lyIDt2XYjTGCgz/izZ3uyuxXrWUc2ror9H4Qjd nUTAvYyk9lvUovN5gUwvG0KpnfOkzUyiSt3ohAFpNuZgI8SnuJMYXypROt40PCK4 uAILLPlWhLCf7P8xKHc6KskwF+jKBFGnsKQPWOB+n56ILiKKhB2WiG+aZg4qQxe6 Xf6e5GnaO9GkJ/eZtQGb3GB7QeGYyW/d -----END CERTIFICATE-----Generated at Sat May 31 17:50:38 2025 by rpki-client