$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: lgVcg4A9InXGnFx3lnmuuXtoELfDWrmmg89SyRxkNmQ= Subject key identifier: 8C:89:38:0E:EC:8D:48:A3:9F:0C:E2:BD:E8:A9:51:F4:68:0A:18:22 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1EAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1E96 Signing time: Thu 12 Jun 2025 16:01:14 +0000 Manifest this update: Thu 12 Jun 2025 16:01:13 +0000 Manifest next update: Thu 19 Jun 2025 16:01:13 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: lYiT/SuxU1tAZNQQEmZNcIWvYbKcwD/rRcIjjJ7Qahk=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: h0HyLn8ocWGb9KjF4xTUCCRX3RLDUFI2FgHziz/KxqQ=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7853 (0x1ead) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Jun 12 16:01:13 2025 GMT Not After : Jun 19 16:01:13 2025 GMT Subject: CN=684af9c9-6389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9b:ec:bb:65:37:b3:13:61:31:9d:df:cf:c9: f1:3a:c4:04:ec:43:f6:c2:2f:fa:49:ce:f0:65:bd: 78:59:cf:3b:03:a1:72:2d:9b:28:66:fa:cf:ec:73: 2d:38:f5:0b:90:7c:ab:fb:ea:5b:62:dd:54:60:af: be:bd:20:2e:44:55:c5:e9:43:45:f7:bf:61:ee:f9: 8d:0d:33:34:94:da:c6:ad:d4:74:5c:52:df:a8:ef: c9:2d:23:bd:0e:a0:8a:a1:e5:8c:d2:84:29:7f:91: c0:3c:5d:1e:e4:7d:36:ae:3e:37:4b:eb:c6:9a:83: e1:04:de:c5:e4:7e:1d:f5:31:2d:02:28:af:90:ec: 6e:a6:10:d0:ee:6e:4e:eb:6d:2e:33:0e:99:85:2a: 0e:25:ce:dc:94:49:34:cc:a2:00:e8:2c:cd:74:ac: c7:c9:f3:31:fb:d0:ff:d8:07:71:bd:f9:26:bc:71: 0e:07:af:38:70:d2:ac:ff:95:6a:c5:da:b1:f1:8b: ad:65:9c:30:c3:c4:e6:59:80:df:07:17:7f:e2:d1: 0b:42:2d:cb:a3:3c:92:8a:c2:d2:da:32:03:19:96: 61:a8:55:00:3c:1c:4e:15:7d:25:91:4c:ad:30:72: 78:81:71:ae:7b:fc:b4:f6:ed:0a:70:a2:97:c3:ea: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:38:0E:EC:8D:48:A3:9F:0C:E2:BD:E8:A9:51:F4:68:0A:18:22 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5d:b4:a2:e0:72:83:2a:28:3a:ec:20:7c:e2:ec:7b:88:2f: 1d:ca:1e:da:36:69:90:2c:e8:62:c1:ae:51:f4:0c:37:19:2c: 2d:94:3d:4c:db:0f:fc:23:c9:8b:8a:6a:08:d3:35:72:ae:1c: c9:94:0f:f0:1a:1b:16:4b:2b:bf:61:7e:4c:0e:b0:22:3d:a0: 8f:4d:19:f7:da:1e:66:55:34:8e:d7:4a:49:53:67:c9:87:1e: d5:52:32:36:46:91:24:8d:eb:62:07:75:88:37:fb:14:e7:03: 45:00:00:66:78:f9:49:9c:d1:1d:40:d9:f5:87:d1:bd:52:61: 50:ae:dd:0a:f0:d3:d4:b2:ca:ce:12:4b:7d:e8:b2:d4:e0:e9: fe:6c:24:29:74:ae:a4:bb:a9:f2:4a:ac:a8:eb:39:79:2e:0c: 6b:eb:93:c3:84:76:83:35:9c:d0:86:8b:bf:7c:b4:f1:61:7d: 87:4b:6d:c4:3c:0a:7e:a7:71:38:47:19:2e:59:9e:6e:8f:79: 51:aa:54:c7:57:2e:36:a0:0f:10:04:ff:fd:40:d3:9d:2a:33: 28:63:fb:e7:de:e9:84:7e:b9:bc:d8:2d:d1:eb:5e:df:0c:e0: 92:36:b3:be:a0:7d:50:ea:43:49:22:44:9b:9f:9f:6f:d2:b2: 83:c2:5d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjUwNjEyMTYwMTEzWhcNMjUwNjE5MTYwMTEzWjAYMRYwFAYD VQQDEw02ODRhZjljOS02Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45vsu2U3sxNhMZ3fz8nxOsQE7EP2wi/6Sc7wZb14Wc87A6FyLZsoZvrP7HMt OPULkHyr++pbYt1UYK++vSAuRFXF6UNF979h7vmNDTM0lNrGrdR0XFLfqO/JLSO9 DqCKoeWM0oQpf5HAPF0e5H02rj43S+vGmoPhBN7F5H4d9TEtAiivkOxuphDQ7m5O 620uMw6ZhSoOJc7clEk0zKIA6CzNdKzHyfMx+9D/2AdxvfkmvHEOB684cNKs/5Vq xdqx8YutZZwww8TmWYDfBxd/4tELQi3LozySisLS2jIDGZZhqFUAPBxOFX0lkUyt MHJ4gXGue/y09u0KcKKXw+prewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyJOA7s jUijnwziveipUfRoChgiMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7XbSi4HKDKig67CB84ux7iC8dyh7aNmmQLOhiwa5R9Aw3GSwtlD1M 2w/8I8mLimoI0zVyrhzJlA/wGhsWSyu/YX5MDrAiPaCPTRn32h5mVTSO10pJU2fJ hx7VUjI2RpEkjetiB3WIN/sU5wNFAABmePlJnNEdQNn1h9G9UmFQrt0K8NPUssrO Ekt96LLU4On+bCQpdK6ku6nySqyo6zl5Lgxr65PDhHaDNZzQhou/fLTxYX2HS23E PAp+p3E4RxkuWZ5uj3lRqlTHVy42oA8QBP/9QNOdKjMoY/vn3umEfrm82C3R617f DOCSNrO+oH1Q6kNJIkSbn59v0rKDwl0T -----END CERTIFICATE-----Generated at Sat Jun 14 15:36:51 2025 by rpki-client