$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json) Hash identifier: 99mtdJ0d+8hmJKOjy4MGxgANSWCpBDdVPpeP7rbHYRY= Subject key identifier: 3D:18:CA:B4:A6:78:02:63:E2:AF:70:D7:0C:F1:CF:CB:E3:5E:47:07 Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft Manifest number: 0668 Signing time: Sun 08 Jun 2025 22:04:47 +0000 Manifest this update: Sun 08 Jun 2025 22:04:47 +0000 Manifest next update: Sun 15 Jun 2025 22:04:47 +0000 Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: 8s6vzUMsEXpob8VnpABorRA6A+pVSK0M6qzedG5ic44=) 2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: ut9kkhaYpPkueMT9PUXekkExmboRUtj4jv3lyVcffmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 22:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Validity Not Before: Jun 8 22:04:47 2025 GMT Not After : Jun 15 22:04:47 2025 GMT Subject: CN=684608ff-4ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3b:6b:e8:fe:6e:dc:94:23:96:84:1f:7e:8c: 60:7a:d8:1f:a2:95:f0:49:6f:66:84:d6:1e:4e:71: 8f:e0:d0:85:ef:6c:33:8b:f4:06:3c:7c:31:45:ce: bd:f5:7f:a5:93:93:4a:fe:24:56:c7:67:cc:7d:9d: 67:07:b6:66:37:52:05:3f:ce:ab:87:9d:41:a0:36: 90:70:72:e5:91:f9:76:14:9c:c3:26:d5:b5:a2:e2: d8:5b:69:ed:bf:c2:b8:b5:d2:a2:32:78:96:50:19: 88:32:5c:0b:15:bb:2a:39:56:29:45:2d:5b:b7:4e: e5:88:47:68:d7:33:df:b5:a0:63:99:ac:25:bd:68: 3c:65:4e:c0:8d:eb:42:27:75:ec:39:6a:28:80:a9: 96:86:38:ec:94:35:35:c7:35:90:55:8f:a6:54:cc: 41:86:6f:72:b4:88:88:ba:91:76:2e:23:01:bb:be: ab:bf:3f:9d:a1:2d:d6:e9:46:2e:8c:8b:d9:a8:b4: 83:44:64:2b:1a:47:e9:43:17:f5:61:0a:01:46:99: 08:2b:c7:f3:95:07:01:d6:30:2b:d0:b1:64:b6:e3: 17:53:27:71:6d:d0:3a:b3:6d:a6:9c:84:7e:52:ae: 92:c7:34:5d:ed:91:04:e1:ec:e1:85:6d:f7:fa:83: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:18:CA:B4:A6:78:02:63:E2:AF:70:D7:0C:F1:CF:CB:E3:5E:47:07 X509v3 Authority Key Identifier: keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fb:71:cb:a7:c7:a8:52:7b:70:0d:c9:64:fe:a4:53:62:4b: 03:c7:84:be:29:53:8e:e0:fb:e2:a9:ab:9b:66:fc:71:08:e0: 4c:90:ec:b9:d0:b0:f1:6e:de:98:4a:73:62:74:90:c9:95:98: 64:dd:74:61:58:c1:47:ee:ad:bc:35:5a:78:8d:34:21:a6:f3: 63:19:16:a2:8e:93:2e:52:28:67:2a:f4:aa:24:59:e0:c2:5f: 01:9f:a7:13:97:50:05:86:a5:50:c4:17:1d:24:d2:2d:06:80: ec:91:5b:34:79:34:a0:58:a0:04:bd:b2:6a:69:ba:36:34:ef: e0:36:b1:77:1d:ae:74:68:1a:ed:42:91:70:9a:20:68:1d:fe: 14:1b:f5:b8:21:96:55:96:83:e1:b2:0f:24:23:af:fc:87:37: 54:9c:48:1a:ec:f3:57:42:93:ee:e6:89:fc:1f:da:d8:86:d5: 9d:85:fe:aa:94:5c:94:b4:0b:57:af:96:75:b1:30:90:6e:0f: 7f:81:38:59:26:ec:2c:99:e0:86:cb:56:ee:48:6a:44:6e:bf: 53:36:14:e3:65:1e:42:35:7d:70:86:25:8f:20:9f:db:15:cc: e0:2f:5a:76:77:b4:f4:e9:a0:d6:4b:0f:a9:93:b9:40:b6:d9: 51:09:8d:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3 NEVERUJCQkYwHhcNMjUwNjA4MjIwNDQ3WhcNMjUwNjE1MjIwNDQ3WjAYMRYwFAYD VQQDEw02ODQ2MDhmZi00ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApztr6P5u3JQjloQffoxgetgfopXwSW9mhNYeTnGP4NCF72wzi/QGPHwxRc69 9X+lk5NK/iRWx2fMfZ1nB7ZmN1IFP86rh51BoDaQcHLlkfl2FJzDJtW1ouLYW2nt v8K4tdKiMniWUBmIMlwLFbsqOVYpRS1bt07liEdo1zPftaBjmawlvWg8ZU7AjetC J3XsOWoogKmWhjjslDU1xzWQVY+mVMxBhm9ytIiIupF2LiMBu76rvz+doS3W6UYu jIvZqLSDRGQrGkfpQxf1YQoBRpkIK8fzlQcB1jAr0LFktuMXUydxbdA6s22mnIR+ Uq6SxzRd7ZEE4ezhhW33+oOiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0YyrSm eAJj4q9w1wzxz8vjXkcHMB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1 NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf+3HLp8eoUntwDclk/qRTYksDx4S+KVOO4PviqaubZvxxCOBMkOy5 0LDxbt6YSnNidJDJlZhk3XRhWMFH7q28NVp4jTQhpvNjGRaijpMuUihnKvSqJFng wl8Bn6cTl1AFhqVQxBcdJNItBoDskVs0eTSgWKAEvbJqabo2NO/gNrF3Ha50aBrt QpFwmiBoHf4UG/W4IZZVloPhsg8kI6/8hzdUnEga7PNXQpPu5on8H9rYhtWdhf6q lFyUtAtXr5Z1sTCQbg9/gThZJuwsmeCGy1buSGpEbr9TNhTjZR5CNX1whiWPIJ/b FczgL1p2d7T06aDWSw+pk7lAttlRCY16 -----END CERTIFICATE-----Generated at Mon Jun 9 11:59:24 2025 by rpki-client