$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: eJvFRZizEcAnCKc6bkO2AmDWY4OZmh3BUeIlB3O3Fqw= Subject key identifier: 8C:90:C1:4C:97:8F:29:01:87:84:62:DB:33:DF:9B:56:55:3E:69:B6 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 035E Signing time: Sat 31 May 2025 01:10:03 +0000 Manifest this update: Sat 31 May 2025 01:10:03 +0000 Manifest next update: Sat 07 Jun 2025 01:10:03 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: 2hdz0HAMAVW4WUsNm6Phvm2WSpJ+5fFPLfOXEe+7jPc=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: May 31 01:10:03 2025 GMT Not After : Jun 7 01:10:03 2025 GMT Subject: CN=683a56eb-fb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:e5:c8:00:56:16:27:59:49:ed:9b:45:7a: 7d:f0:dc:a9:71:2b:8f:d2:01:ea:d8:43:ec:b6:46: ed:79:53:6e:2b:4f:75:fe:56:ac:df:20:2d:78:4c: bb:e5:a1:b6:14:f9:4e:fc:e8:ce:c5:ff:27:68:f1: fa:1d:67:72:a9:55:8c:d0:0a:e9:47:24:80:43:ed: c1:41:65:54:45:8a:4b:df:55:56:9d:fe:6c:9f:55: 2e:9e:91:a8:e8:ad:78:d1:35:ad:fb:ac:e3:c6:73: 98:e3:f4:e0:5e:40:dd:b3:14:95:4e:18:7f:02:88: aa:aa:a3:bc:dd:04:21:52:27:6a:54:74:29:87:cf: ea:12:ea:a8:6b:b5:a5:b8:7a:d3:48:9b:32:10:c1: fb:30:77:5f:48:41:a1:33:30:a5:83:74:91:57:bc: 35:8b:e3:94:dc:03:fa:7f:b4:67:dc:08:33:1f:bd: 7b:07:65:6c:5b:ef:4a:96:1a:df:0e:ae:6c:1f:b5: ee:c3:7b:8c:f7:1d:e4:7d:dc:c7:96:09:43:7c:8b: ae:1d:d3:9a:7f:ec:4f:b6:62:04:64:74:75:4c:1d: 08:fe:4f:59:0c:34:4e:06:ec:26:c3:e1:23:dc:ec: fe:20:86:29:ae:29:8f:7b:22:a0:8a:9f:99:2e:94: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:90:C1:4C:97:8F:29:01:87:84:62:DB:33:DF:9B:56:55:3E:69:B6 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:46:98:6a:ac:ff:ba:cd:b6:45:c8:7f:be:4a:ed:2b:25:73: 65:ac:60:94:28:bd:a5:7c:8f:6a:5e:8d:5f:97:a4:a8:0f:75: 0f:5a:b4:df:43:b7:0c:aa:e4:00:59:d7:2b:d5:46:82:60:91: b0:0e:eb:31:0b:2a:62:2f:23:3a:f2:fa:56:6e:cb:e3:49:87: 51:fa:55:93:2b:52:b1:e7:17:ee:ae:fe:81:85:55:fb:1f:6d: 60:40:79:15:50:0d:4f:dd:8d:c6:fb:e6:98:53:6d:d5:5f:75: 88:67:22:53:fd:1d:08:67:0b:62:d4:d4:e3:5d:54:e2:04:78: 5b:e7:75:6d:85:fb:21:94:79:8a:ca:c3:ae:07:72:24:b7:3d: 31:f8:56:08:06:82:5a:36:ea:46:ff:08:92:ac:ca:61:0c:29: 0a:41:91:f5:37:05:6d:2f:7b:5e:1e:0d:ef:08:e5:13:1e:1c: e9:46:de:23:02:ce:6e:aa:1d:8b:89:f6:8f:2d:43:cc:b3:3d: ab:f9:28:e7:ab:f6:50:7d:8e:df:a2:e2:fc:98:74:1d:a7:f8: d8:2d:97:da:a8:37:b3:5b:2f:dd:bc:84:ae:ec:b0:73:32:d4: 46:63:d2:ed:00:cc:46:e3:77:60:af:ea:94:38:5c:9d:bf:57: 80:6a:a4:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUwNTMxMDExMDAzWhcNMjUwNjA3MDExMDAzWjAYMRYwFAYD VQQDEw02ODNhNTZlYi1mYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplLlyABWFidZSe2bRXp98NypcSuP0gHq2EPstkbteVNuK091/las3yAteEy7 5aG2FPlO/OjOxf8naPH6HWdyqVWM0ArpRySAQ+3BQWVURYpL31VWnf5sn1UunpGo 6K140TWt+6zjxnOY4/TgXkDdsxSVThh/AoiqqqO83QQhUidqVHQph8/qEuqoa7Wl uHrTSJsyEMH7MHdfSEGhMzClg3SRV7w1i+OU3AP6f7Rn3AgzH717B2VsW+9Klhrf Dq5sH7Xuw3uM9x3kfdzHlglDfIuuHdOaf+xPtmIEZHR1TB0I/k9ZDDROBuwmw+Ej 3Oz+IIYprimPeyKgip+ZLpT/hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyQwUyX jykBh4Ri2zPfm1ZVPmm2MB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBRphqrP+6zbZFyH++Su0rJXNlrGCUKL2lfI9qXo1fl6SoD3UPWrTf Q7cMquQAWdcr1UaCYJGwDusxCypiLyM68vpWbsvjSYdR+lWTK1Kx5xfurv6BhVX7 H21gQHkVUA1P3Y3G++aYU23VX3WIZyJT/R0IZwti1NTjXVTiBHhb53VthfshlHmK ysOuB3Iktz0x+FYIBoJaNupG/wiSrMphDCkKQZH1NwVtL3teHg3vCOUTHhzpRt4j As5uqh2LifaPLUPMsz2r+Sjnq/ZQfY7fouL8mHQdp/jYLZfaqDezWy/dvISu7LBz MtRGY9LtAMxG43dgr+qUOFydv1eAaqQW -----END CERTIFICATE-----Generated at Sat May 31 17:54:49 2025 by rpki-client