$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json) Hash identifier: GUgGHZFyB9uqvvkKPBAijx3MGMywZSoKqnOjncrTy20= Subject key identifier: A2:D1:D9:33:90:67:F3:39:D6:19:2C:E7:7A:E6:C1:B9:61:D8:A9:2A Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft Manifest number: 06C5 Signing time: Fri 30 May 2025 22:17:42 +0000 Manifest this update: Fri 30 May 2025 22:17:41 +0000 Manifest next update: Fri 06 Jun 2025 22:17:41 +0000 Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: ZKYMIGRZCsUXE9Z5PW486yLhpS2duwlOJQRsFiCWjWg=) 2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: owZNdsc75aBAEeMxk8dZOIuYb/+Ukc36obf7oLhTJGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11A, serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Validity Not Before: May 30 22:17:41 2025 GMT Not After : Jun 6 22:17:41 2025 GMT Subject: CN=683a2e86-2ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:d1:1d:95:a2:70:1b:0b:9b:ae:da:87:41: 0d:07:43:dc:3a:4c:bf:fc:98:dd:6c:03:34:b0:7a: 1b:ec:c7:7a:56:f6:d2:53:fe:c7:b6:bd:eb:0a:a2: 4d:29:b4:17:af:c7:65:78:f5:6d:54:19:f1:41:83: cc:0f:bb:d2:bf:e9:48:fb:f2:55:b2:9e:c3:68:95: b6:a2:53:ab:1d:dd:f7:8a:55:63:b4:e4:c7:aa:45: ca:05:7f:4f:bd:b0:96:b8:c7:af:71:94:82:4f:ad: 6d:ce:0f:e1:e8:ff:ec:6b:b2:26:e9:05:d6:21:a7: 8c:f6:bb:e5:fa:3b:c8:7b:47:63:79:2b:e8:4a:8e: 14:28:65:e9:a6:2a:0f:67:06:5e:2f:96:63:81:a0: c2:2f:af:dc:49:d2:92:4d:55:b8:02:58:71:15:91: 92:a9:8b:95:b7:ff:10:af:da:58:88:58:f3:6e:ce: ca:57:a9:95:7d:12:e6:c9:70:59:71:ab:72:a8:3d: c3:38:27:0b:52:94:b5:b7:d6:31:1e:18:b3:a7:3b: 99:ce:2d:b6:fd:d7:33:bd:91:87:d7:e8:03:3f:76: 12:38:ab:cd:53:1b:fc:a3:19:75:78:71:2a:82:e5: a3:a0:82:48:f6:57:55:f4:51:db:81:30:3c:d2:3b: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D1:D9:33:90:67:F3:39:D6:19:2C:E7:7A:E6:C1:B9:61:D8:A9:2A X509v3 Authority Key Identifier: keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b1:de:70:c3:f1:3c:fc:9b:bc:0e:c2:e6:50:e9:4e:b2:56: 6a:bc:9d:d7:1b:7f:8a:a3:5d:26:8a:5c:f5:bb:68:f1:92:63: 36:79:24:d2:85:cd:72:d5:7d:28:51:29:43:fa:ee:61:90:fa: 7e:24:68:50:94:0d:39:ad:d4:b5:ff:1d:74:a6:13:64:8c:ff: 24:c1:d0:b9:85:ce:b0:c6:d6:a5:97:bc:60:47:95:b7:c5:27: fb:7c:e6:9a:e8:46:4f:1f:40:bf:cd:27:27:e8:00:a7:d7:18: 6a:15:04:9f:aa:04:ae:7b:f3:e4:ce:3f:a8:70:b0:98:74:ca: b3:73:c6:32:43:45:9e:3a:06:55:7e:3e:80:39:04:b1:cd:33: 7b:f1:60:09:80:37:ac:99:db:30:73:ae:02:0f:ca:48:9c:f9: a5:d2:22:71:bd:3f:2c:a6:93:37:14:78:99:65:27:86:a2:ff: 91:a4:1e:ad:5a:dc:64:c5:b9:af:cd:c0:8b:38:96:28:ac:8d: ff:11:cf:55:da:82:56:43:ba:90:c6:83:40:b8:d3:04:f3:72: f1:9b:cd:2d:22:37:d6:dd:69:cc:67:22:39:2f:a4:2f:c4:4f: fc:cf:40:05:f7:26:5c:6d:9a:b8:5e:91:0e:0e:1f:bd:15:6d: 44:60:06:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJDOTc2NThEQTcz Mjg1MDkzRTUwHhcNMjUwNTMwMjIxNzQxWhcNMjUwNjA2MjIxNzQxWjAYMRYwFAYD VQQDEw02ODNhMmU4Ni0yZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0nRHZWicBsLm67ah0ENB0PcOky//JjdbAM0sHob7Md6VvbSU/7Htr3rCqJN KbQXr8dlePVtVBnxQYPMD7vSv+lI+/JVsp7DaJW2olOrHd33ilVjtOTHqkXKBX9P vbCWuMevcZSCT61tzg/h6P/sa7Im6QXWIaeM9rvl+jvIe0djeSvoSo4UKGXppioP ZwZeL5ZjgaDCL6/cSdKSTVW4AlhxFZGSqYuVt/8Qr9pYiFjzbs7KV6mVfRLmyXBZ catyqD3DOCcLUpS1t9YxHhizpzuZzi22/dczvZGH1+gDP3YSOKvNUxv8oxl1eHEq guWjoIJI9ldV9FHbgTA80jskowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLR2TOQ Z/M51hks53rmwblh2KkqMB8GA1UdIwQYMBaAFN6Bc+fSj+rR7DqSyXZY2nMoUJPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExQS9DMDg2RUE5ODVB MzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0SHNPcExKZGxqYWN5aFFr LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvRno1OUtQNnRIc09wTEpkbGphY3loUWstVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0 SHNPcExKZGxqYWN5aFFrLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLsd5ww/E8/Ju8DsLmUOlOslZqvJ3XG3+Ko10milz1u2jxkmM2eSTS hc1y1X0oUSlD+u5hkPp+JGhQlA05rdS1/x10phNkjP8kwdC5hc6wxtall7xgR5W3 xSf7fOaa6EZPH0C/zScn6ACn1xhqFQSfqgSue/Pkzj+ocLCYdMqzc8YyQ0WeOgZV fj6AOQSxzTN78WAJgDesmdswc64CD8pInPml0iJxvT8sppM3FHiZZSeGov+RpB6t WtxkxbmvzcCLOJYorI3/Ec9V2oJWQ7qQxoNAuNME83Lxm80tIjfW3WnMZyI5L6Qv xE/8z0AF9yZcbZq4XpEODh+9FW1EYAbj -----END CERTIFICATE-----Generated at Sat May 31 17:31:54 2025 by rpki-client