$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: 9UUF0HglG5SKs8qw+BUs146nX53+r/GfFxvduzpJreY= Subject key identifier: 52:5E:35:11:FE:71:35:DA:87:A8:C5:8E:C2:25:F6:37:69:6B:AC:AA Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 162D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 1617 Signing time: Fri 30 May 2025 16:57:01 +0000 Manifest this update: Fri 30 May 2025 16:57:00 +0000 Manifest next update: Fri 06 Jun 2025 16:57:00 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: yu9lyHX2PQlRSavqnGgJVT3ra1iWckvWE4F4VVwAyM8=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5677 (0x162d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: May 30 16:57:00 2025 GMT Not After : Jun 6 16:57:00 2025 GMT Subject: CN=6839e35d-4c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:6d:39:20:f3:95:a2:8d:71:ec:0d:af:bd: 53:d2:db:f6:7f:a3:71:b2:5d:10:20:02:7c:f0:ee: 1c:7e:33:32:85:fe:c2:76:b6:8b:b0:ee:f4:3c:aa: de:d4:e5:57:a2:4a:11:aa:db:bf:67:b1:6f:a4:dd: fa:f2:84:56:0d:b5:d4:47:8f:20:7f:24:c1:87:27: 79:3d:a2:22:71:4e:ab:41:ec:67:13:a1:75:66:c3: bf:ef:d0:7b:14:91:f4:89:a7:50:64:d8:19:83:53: 1f:c4:4c:74:bf:84:f3:46:74:23:98:8c:67:bd:38: 88:b3:b0:d1:95:fa:65:78:15:83:f1:cf:11:a7:af: 49:23:85:6d:f9:44:72:0f:ef:35:f4:7c:09:24:fc: ea:1f:94:88:39:7e:99:08:f4:8f:bc:f7:41:18:c7: bc:2b:87:3c:8c:9e:03:6c:d6:92:05:ef:bb:d1:12: 2f:0c:93:95:7b:a9:8b:be:85:9b:fd:95:2c:9e:5b: e4:ea:95:07:2e:40:07:29:7f:b2:9d:a7:a8:bc:a5: 90:9b:c5:e4:be:a0:73:d8:c7:78:ec:bb:8d:90:63: db:b2:0e:7e:25:35:57:ec:ac:95:16:7b:54:4b:90: c3:00:ef:67:78:b6:ce:a0:ce:65:1a:59:04:e3:b4: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:35:11:FE:71:35:DA:87:A8:C5:8E:C2:25:F6:37:69:6B:AC:AA X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dd:20:00:19:ba:6c:a7:c5:2e:06:ae:3d:6a:67:46:f4:82: af:3f:74:03:5e:79:83:0b:d4:63:0c:bd:99:a6:35:41:f9:90: 2e:44:b5:d9:d9:bd:f8:c2:89:f6:65:f4:ce:d3:42:5c:3d:34: bd:1b:60:af:46:c6:39:4e:cb:1b:6d:3c:e1:2d:30:ff:cc:c7: 4c:f7:e3:71:c2:1d:cc:75:d3:2e:d9:dd:c3:08:e5:f0:bf:ff: 11:f2:a3:82:d6:b1:12:4e:5d:cc:7e:08:df:e7:9c:17:c0:c8: be:8b:2f:1c:82:d7:7f:9b:ed:b4:84:5b:48:89:eb:12:fa:d4: 09:7c:8b:a3:1e:b1:d6:f9:10:03:24:1a:22:bf:a7:17:82:ef: f3:2f:fe:0b:11:60:c8:8a:20:1c:cd:ca:8d:96:b9:5b:b9:ba: 8e:5f:e4:74:f4:83:4e:90:1a:a6:4c:b3:e3:0c:e9:d2:fd:d1: 75:48:8d:e1:05:4e:24:8b:c7:f8:81:75:3b:39:92:3a:74:e6: 0d:c4:a0:9d:77:5d:c2:ad:9d:b4:de:01:6b:dc:5e:86:30:a6: 0d:7d:87:db:d9:ac:4f:b0:54:55:6f:52:7a:54:ff:50:ef:09: 78:0d:5d:81:f7:73:c1:ce:1b:55:f1:c2:61:19:67:e0:a6:87: c5:88:9c:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUwNTMwMTY1NzAwWhcNMjUwNjA2MTY1NzAwWjAYMRYwFAYD VQQDEw02ODM5ZTM1ZC00YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVltOSDzlaKNcewNr71T0tv2f6Nxsl0QIAJ88O4cfjMyhf7CdraLsO70PKre 1OVXokoRqtu/Z7FvpN368oRWDbXUR48gfyTBhyd5PaIicU6rQexnE6F1ZsO/79B7 FJH0iadQZNgZg1MfxEx0v4TzRnQjmIxnvTiIs7DRlfpleBWD8c8Rp69JI4Vt+URy D+819HwJJPzqH5SIOX6ZCPSPvPdBGMe8K4c8jJ4DbNaSBe+70RIvDJOVe6mLvoWb /ZUsnlvk6pUHLkAHKX+ynaeovKWQm8XkvqBz2Md47LuNkGPbsg5+JTVX7KyVFntU S5DDAO9neLbOoM5lGlkE47QhzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJeNRH+ cTXah6jFjsIl9jdpa6yqMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK3SAAGbpsp8UuBq49amdG9IKvP3QDXnmDC9RjDL2ZpjVB+ZAuRLXZ 2b34won2ZfTO00JcPTS9G2CvRsY5TssbbTzhLTD/zMdM9+Nxwh3MddMu2d3DCOXw v/8R8qOC1rESTl3Mfgjf55wXwMi+iy8cgtd/m+20hFtIiesS+tQJfIujHrHW+RAD JBoiv6cXgu/zL/4LEWDIiiAczcqNlrlbubqOX+R09INOkBqmTLPjDOnS/dF1SI3h BU4ki8f4gXU7OZI6dOYNxKCdd13CrZ203gFr3F6GMKYNfYfb2axPsFRVb1J6VP9Q 7wl4DV2B93PBzhtV8cJhGWfgpofFiJyO -----END CERTIFICATE-----Generated at Sat May 31 16:25:47 2025 by rpki-client