$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: g9MPPwmvjq056snvhmwY1I21D072tfpvGffwCYyi5yk= Subject key identifier: BF:86:98:AC:6B:D3:F6:0E:F6:58:5D:01:59:10:87:6F:B1:97:BF:EE Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 79 Signing time: Sat 31 May 2025 06:24:51 +0000 Manifest this update: Sat 31 May 2025 06:24:51 +0000 Manifest next update: Sat 07 Jun 2025 06:24:51 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: Z1h2BQ6XG2YO1mE0CnQXmEEVsThtUmE97qpxVJrYHjg=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: ymXlk9RJfi9V2KzOznS96G8RXYI7jJ6rpj+phG/GZks=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: SX03ccnLTHDWWqP2dXM+ZAcRiPmXaj3vkOlikMISxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: May 31 06:24:51 2025 GMT Not After : Jun 7 06:24:51 2025 GMT Subject: CN=683aa0b3-6876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:91:51:e0:08:d9:8d:08:fe:35:48:73:ea: b1:f4:56:5f:74:bb:0d:44:85:47:4a:fb:bb:eb:76: 57:66:98:49:c2:f3:05:84:93:95:64:47:c5:87:ec: d1:3d:d8:e7:ea:ba:7d:3c:18:29:bc:b2:ab:a7:76: 49:a9:de:bb:ea:4f:77:f8:2b:63:0f:93:79:a9:5f: e6:94:6f:bd:b5:4c:f4:95:bd:eb:fd:56:bd:e1:f0: 87:94:f1:0c:ea:26:0a:79:37:e1:3e:d2:6e:24:ae: e8:91:a9:be:59:50:0b:9c:c6:30:4c:48:19:a6:c0: ad:cc:8f:56:a8:0c:fc:c3:e1:8a:a6:96:bf:ec:30: 3f:cf:36:f1:b2:e3:3b:9b:98:bb:fc:73:38:17:72: 5b:41:3f:2f:3c:42:89:b0:1b:d9:e8:d1:62:b4:08: 93:81:5e:26:53:d1:b1:1f:24:16:7e:b8:6d:55:7c: f4:df:60:69:84:9c:b2:23:2f:60:20:07:d8:3b:29: 20:e0:ac:0e:30:27:87:49:af:63:e9:64:f3:aa:2d: 3d:aa:2e:ed:68:4b:91:e5:40:1c:1c:a3:b9:32:59: 2a:46:2a:47:ae:68:6a:ff:8a:61:ee:86:9d:94:98: db:30:70:95:80:fc:7b:67:09:69:22:10:55:06:01: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:86:98:AC:6B:D3:F6:0E:F6:58:5D:01:59:10:87:6F:B1:97:BF:EE X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:86:0c:a1:48:4e:66:a7:fa:31:fe:94:ef:55:55:4f:00:28: 7c:2f:a8:1b:a5:fb:3b:37:1e:ef:79:4f:7f:32:74:a8:2c:92: 2f:ff:f4:b1:5a:c7:79:dc:9b:e7:df:81:fc:16:2b:ba:be:fd: 02:e1:62:06:fe:17:09:c4:8e:79:ba:5f:bb:99:bb:24:b3:d9: 7b:d9:73:ed:3e:fb:21:1d:88:69:9e:33:1b:84:20:1c:bb:f7: 85:4b:b2:52:74:e8:f5:8b:fc:5f:67:20:84:a8:0e:86:ca:35: 6c:30:98:16:8b:91:76:6d:09:0c:1b:6c:d4:d6:43:c7:82:44: c7:60:fb:7d:62:9b:86:d6:d4:21:8f:e8:c8:7f:57:8d:d2:f5: b5:62:a3:cc:97:94:f0:d9:27:31:ff:95:b6:9d:58:1b:e7:2f: 46:1c:fa:c8:4e:5c:2a:56:5e:7f:98:a7:ec:b2:09:a0:ad:b5: 94:31:d5:66:55:d7:59:6f:81:cf:46:d1:1d:e2:e9:66:1c:e4: df:81:a5:3b:ea:2c:bd:11:b3:e5:ad:81:0c:86:5f:c3:e7:c8: 35:f9:3b:ce:e2:8c:7f:3f:43:0d:17:bd:17:e8:02:5f:56:4d: cb:7b:cf:90:86:15:99:36:20:a0:2f:1d:42:b3:61:9a:ea:1f: 3d:7e:41:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjUwNTMxMDYyNDUxWhcNMjUwNjA3MDYyNDUxWjAYMRYwFAYD VQQDEw02ODNhYTBiMy02ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykiRUeAI2Y0I/jVIc+qx9FZfdLsNRIVHSvu763ZXZphJwvMFhJOVZEfFh+zR Pdjn6rp9PBgpvLKrp3ZJqd676k93+CtjD5N5qV/mlG+9tUz0lb3r/Va94fCHlPEM 6iYKeTfhPtJuJK7okam+WVALnMYwTEgZpsCtzI9WqAz8w+GKppa/7DA/zzbxsuM7 m5i7/HM4F3JbQT8vPEKJsBvZ6NFitAiTgV4mU9GxHyQWfrhtVXz032BphJyyIy9g IAfYOykg4KwOMCeHSa9j6WTzqi09qi7taEuR5UAcHKO5MlkqRipHrmhq/4ph7oad lJjbMHCVgPx7ZwlpIhBVBgHSKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+GmKxr 0/YO9lhdAVkQh2+xl7/uMB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbhgyhSE5mp/ox/pTvVVVPACh8L6gbpfs7Nx7veU9/MnSoLJIv//Sx Wsd53Jvn34H8Fiu6vv0C4WIG/hcJxI55ul+7mbsks9l72XPtPvshHYhpnjMbhCAc u/eFS7JSdOj1i/xfZyCEqA6GyjVsMJgWi5F2bQkMG2zU1kPHgkTHYPt9YpuG1tQh j+jIf1eN0vW1YqPMl5Tw2Scx/5W2nVgb5y9GHPrITlwqVl5/mKfssgmgrbWUMdVm VddZb4HPRtEd4ulmHOTfgaU76iy9EbPlrYEMhl/D58g1+TvO4ox/P0MNF70X6AJf Vk3Le8+QhhWZNiCgLx1Cs2Ga6h89fkGR -----END CERTIFICATE-----Generated at Sat May 31 17:45:07 2025 by rpki-client