$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: EYNCf+5lBbV5h+r/isRUqW1cKEB1qddlSBTz4OBlWFE= Subject key identifier: E2:D0:59:8C:61:31:29:98:B1:C7:16:41:46:4B:4E:1F:B4:AC:C7:A4 Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: 05 Signing time: Tue 03 Jun 2025 08:05:49 +0000 Manifest this update: Tue 03 Jun 2025 08:05:48 +0000 Manifest next update: Tue 10 Jun 2025 08:05:48 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: cJWxZfal5H4IUvA2AcXHnlNM0VkG0vJ+PoGQNYbFoGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Jun 3 08:05:48 2025 GMT Not After : Jun 10 08:05:48 2025 GMT Subject: CN=683eacdd-1430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:15:34:df:2f:b9:6c:8c:34:48:9e:27:f1: 62:a3:e9:dc:1e:fb:45:67:6f:97:c8:b9:65:84:f1: 64:70:a6:65:f2:22:ee:20:ca:98:e5:5b:b3:9c:f7: d7:be:fd:58:34:e6:55:c5:4a:d8:8b:a6:76:9c:02: 54:2f:6f:1a:fd:07:26:9b:de:d8:32:d2:90:ff:58: 10:6b:d6:c6:b6:0b:07:a3:5f:78:f3:c3:a4:54:1e: b7:7d:83:cf:25:09:ca:d9:57:80:15:62:bf:90:8a: e1:30:ab:09:d1:f3:be:0c:c3:a6:99:e2:ff:49:07: b7:2d:0f:44:b6:75:f6:d5:9b:b7:62:cc:7e:3e:69: f8:46:a9:4b:a6:cf:8f:4f:f6:58:dd:85:50:0e:4b: be:46:16:8a:72:9d:ee:45:c8:cb:6c:2a:b6:4e:84: ed:da:56:b9:d8:20:d9:97:da:ee:6d:3d:fa:e5:26: 1f:38:b5:01:d8:fc:e8:31:95:f7:bd:f6:2f:9a:6a: 36:6c:58:c3:ee:c1:f4:69:8c:82:d3:de:a0:8e:2c: 0c:5c:29:07:bb:1c:35:12:58:d9:64:7e:cc:82:8e: 5b:ce:a6:8d:78:62:2a:9a:0b:f7:85:ca:0f:22:62: e3:d4:ed:40:56:1f:2f:79:fc:a1:30:f4:6f:03:fe: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D0:59:8C:61:31:29:98:B1:C7:16:41:46:4B:4E:1F:B4:AC:C7:A4 X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fb:3e:1d:a0:4c:cd:ec:cb:d5:af:5b:95:07:c2:42:21:70: 8c:fe:53:b5:33:cc:79:ab:2c:1a:f9:f9:24:21:93:09:48:89: 4d:21:e9:63:ff:95:3d:33:45:b3:1a:22:10:50:41:99:0b:98: a8:e6:62:41:dd:b3:60:83:3a:c2:da:cc:f3:15:64:4a:18:48: 57:34:ba:11:c9:56:99:82:1c:36:c1:02:4c:7b:57:8e:93:ec: 90:a7:62:5a:3d:74:41:fb:c8:99:5f:eb:52:b7:ba:47:fb:01: d1:76:ac:53:f3:2e:59:50:f7:4c:4a:25:54:d4:84:52:0f:df: 94:f8:60:eb:89:6d:7c:af:93:a1:79:ad:82:bb:84:c0:9a:f8: 31:ef:d0:75:08:1e:b0:d2:ed:ae:b5:8b:e3:f9:95:49:ae:d5: f3:e1:c0:77:26:a9:3a:06:4e:02:f0:44:6c:d6:55:67:30:3a: 39:b1:b7:8c:64:a6:34:e8:ad:bb:b3:cc:77:77:a9:22:cb:40: 5a:b6:43:b4:ff:6c:98:5f:05:f8:e5:c0:0b:60:8e:ee:81:12: 70:26:e0:b5:b7:75:d2:01:32:05:64:38:5e:6d:f6:8e:f2:f5: 4e:ee:6c:ee:61:72:2d:e3:10:c3:9a:08:b0:02:6d:2b:b8:31: e9:4d:a7:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoREVBNjNFMzEwMUJGMTU5OTAyMEE0MDgzRkExQzNEOTY0 QjIxMzBDMDAeFw0yNTA2MDMwODA1NDhaFw0yNTA2MTAwODA1NDhaMBgxFjAUBgNV BAMTDTY4M2VhY2RkLTE0MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfABU03y+5bIw0SJ4n8WKj6dwe+0Vnb5fIuWWE8WRwpmXyIu4gypjlW7Oc99e+ /Vg05lXFStiLpnacAlQvbxr9Byab3tgy0pD/WBBr1sa2CwejX3jzw6RUHrd9g88l CcrZV4AVYr+QiuEwqwnR874Mw6aZ4v9JB7ctD0S2dfbVm7dizH4+afhGqUumz49P 9ljdhVAOS75GFopyne5FyMtsKrZOhO3aVrnYINmX2u5tPfrlJh84tQHY/Ogxlfe9 9i+aajZsWMPuwfRpjILT3qCOLAxcKQe7HDUSWNlkfsyCjlvOpo14YiqaC/eFyg8i YuPU7UBWHy95/KEw9G8D/rJ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4tBZjGEx KZixxxZBRktOH7Ssx6QwHwYDVR0jBBgwFoAU3qY+MQG/FZkCCkCD+hw9lkshMMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0NCMTRCRjI2M0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1N QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3FZLU1RR19GWmtDQ2tDRC1odzlsa3NoTU1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0NCMTRCRjI2M0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyLzNxWS1NUUdfRlpr Q0NrQ0QtaHc5bGtzaE1NQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADz7Ph2gTM3sy9WvW5UHwkIhcIz+U7UzzHmrLBr5+SQhkwlIiU0h6WP/ lT0zRbMaIhBQQZkLmKjmYkHds2CDOsLazPMVZEoYSFc0uhHJVpmCHDbBAkx7V46T 7JCnYlo9dEH7yJlf61K3ukf7AdF2rFPzLllQ90xKJVTUhFIP35T4YOuJbXyvk6F5 rYK7hMCa+DHv0HUIHrDS7a61i+P5lUmu1fPhwHcmqToGTgLwRGzWVWcwOjmxt4xk pjTorbuzzHd3qSLLQFq2Q7T/bJhfBfjlwAtgju6BEnAm4LW3ddIBMgVkOF5t9o7y 9U7ubO5hci3jEMOaCLACbSu4MelNp1I= -----END CERTIFICATE-----Generated at Tue Jun 3 23:49:00 2025 by rpki-client