$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: UM1gaoqo7HVxuYlCFtbl8ODfCsp/Ba+VmvjN3WPKt14= Subject key identifier: 5C:E5:52:54:CC:76:54:70:CF:65:34:11:DD:95:A9:2B:1D:54:90:BE Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 04C6 Signing time: Fri 06 Jun 2025 23:52:29 +0000 Manifest this update: Fri 06 Jun 2025 23:52:29 +0000 Manifest next update: Fri 13 Jun 2025 23:52:29 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: C5CqRWIPaTU/u0dOEPQ/sjX0o3Isoa393abCQ1CBUew=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: K+U5H/gEB39S0MtkniCqyAbmgU8k6WO9RKiUyR91DCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: Jun 6 23:52:29 2025 GMT Not After : Jun 13 23:52:29 2025 GMT Subject: CN=68437f3d-e805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f4:5a:f0:f2:00:e4:69:d5:96:dd:4e:7b:7d: 2b:e2:41:82:20:7c:e0:ad:cd:e5:28:98:1a:5e:26: b9:d3:2f:cc:4b:a6:dc:7a:4e:32:92:eb:3c:95:ee: 97:9f:c0:8f:1a:28:8d:58:a8:c0:11:84:a1:d7:71: 25:4a:b9:78:4d:ce:56:ff:aa:7f:69:01:eb:82:90: c1:ff:63:af:c8:3e:6d:12:cd:13:83:b4:fb:83:9c: af:76:05:19:68:37:40:52:2f:ce:e3:6e:65:8f:91: c1:34:d6:58:f7:89:bc:51:27:dd:f4:e5:c5:41:98: 61:5b:92:eb:eb:e5:ad:d0:b9:f9:2c:00:05:b7:eb: 0b:4f:93:21:63:24:55:e0:6a:06:07:42:20:5f:39: 42:95:5b:e4:33:d0:32:36:f3:e3:58:88:b3:c4:b7: 43:ac:cf:a3:d8:6b:1b:6d:02:2b:d4:f8:59:da:74: 63:4d:5f:61:e3:db:88:de:96:bc:de:81:ef:31:2d: 4c:86:2f:66:d7:cf:53:fa:f8:39:80:84:7c:e8:46: a1:59:31:7a:d8:d7:ba:c4:3c:3a:c4:1f:1c:23:b8: 32:13:34:a9:4d:00:6b:a7:5b:7b:91:3b:0d:3c:bc: ad:bf:e7:07:59:0b:ae:1d:cf:73:1b:74:31:41:88: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:52:54:CC:76:54:70:CF:65:34:11:DD:95:A9:2B:1D:54:90:BE X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:18:98:7d:ec:83:06:64:09:e7:e6:8d:f7:9c:47:c7:02:19: 1a:cb:67:48:50:f1:ea:91:c0:73:53:c4:7e:83:91:bc:b6:6b: e2:f5:d2:0e:6b:78:de:56:45:a8:23:ec:e1:0c:c9:d1:1d:46: 9a:04:75:69:ac:44:fe:2f:55:2d:95:03:7b:58:89:35:52:7c: be:92:10:35:6f:46:9f:b5:03:de:25:25:ce:4e:45:cb:fa:9f: 52:85:43:c8:5c:f7:58:5e:60:1d:7b:42:09:60:30:66:89:64: b8:30:c6:62:6a:37:6f:75:e0:93:dd:41:23:9b:ba:2e:ad:56: 02:be:55:97:23:05:08:23:46:43:72:72:bc:4a:a1:f5:a7:ae: da:39:4b:eb:cf:34:e5:69:de:4c:a7:fe:bc:bf:b7:4d:fc:ce: cc:2a:98:ef:1f:45:4f:fc:d9:4b:c8:a1:83:ca:22:15:68:9f: 21:f0:17:3b:b1:ac:fa:d1:d6:53:b6:c5:49:53:a3:f6:ea:3a: b0:8d:8e:dd:dd:51:08:42:0d:2f:fa:be:31:a6:99:ac:d7:85: b3:e1:59:ba:b4:5f:af:8a:86:05:69:6a:9e:15:71:07:6e:75: 18:ac:c6:7c:cf:0f:31:f3:cf:7e:52:63:6d:24:44:9f:e4:e1: 60:e3:85:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjUwNjA2MjM1MjI5WhcNMjUwNjEzMjM1MjI5WjAYMRYwFAYD VQQDEw02ODQzN2YzZC1lODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fRa8PIA5GnVlt1Oe30r4kGCIHzgrc3lKJgaXia50y/MS6bcek4ykus8le6X n8CPGiiNWKjAEYSh13ElSrl4Tc5W/6p/aQHrgpDB/2OvyD5tEs0Tg7T7g5yvdgUZ aDdAUi/O425lj5HBNNZY94m8USfd9OXFQZhhW5Lr6+Wt0Ln5LAAFt+sLT5MhYyRV 4GoGB0IgXzlClVvkM9AyNvPjWIizxLdDrM+j2GsbbQIr1PhZ2nRjTV9h49uI3pa8 3oHvMS1Mhi9m189T+vg5gIR86EahWTF62Ne6xDw6xB8cI7gyEzSpTQBrp1t7kTsN PLytv+cHWQuuHc9zG3QxQYivcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzlUlTM dlRwz2U0Ed2VqSsdVJC+MB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARGJh97IMGZAnn5o33nEfHAhkay2dIUPHqkcBzU8R+g5G8tmvi9dIO a3jeVkWoI+zhDMnRHUaaBHVprET+L1UtlQN7WIk1Uny+khA1b0aftQPeJSXOTkXL +p9ShUPIXPdYXmAde0IJYDBmiWS4MMZiajdvdeCT3UEjm7ourVYCvlWXIwUII0ZD cnK8SqH1p67aOUvrzzTlad5Mp/68v7dN/M7MKpjvH0VP/NlLyKGDyiIVaJ8h8Bc7 saz60dZTtsVJU6P26jqwjY7d3VEIQg0v+r4xppms14Wz4Vm6tF+vioYFaWqeFXEH bnUYrMZ8zw8x889+UmNtJESf5OFg44Wk -----END CERTIFICATE-----Generated at Sat Jun 7 06:56:05 2025 by rpki-client