$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: vM0IcjBD07fy0EUY+vZqBJ2nHWu2ISVSuelKNupo6/0= Subject key identifier: 96:11:58:08:E4:4E:82:F6:02:D5:F6:5D:1C:2A:5E:AF:10:7E:42:6F Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: 0106 Signing time: Sun 01 Jun 2025 04:46:51 +0000 Manifest this update: Sun 01 Jun 2025 04:46:50 +0000 Manifest next update: Sun 08 Jun 2025 04:46:50 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: WxOTIVlQb1wN4oYKgCBmwFxCZOz5S2h/6qIAYyScvo0=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: Jun 1 04:46:50 2025 GMT Not After : Jun 8 04:46:50 2025 GMT Subject: CN=683bdb3b-cb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:c4:bb:c4:44:63:48:43:b9:cc:d8:c0:85: d0:d2:18:63:9c:4a:8a:7b:84:39:c2:81:50:32:3f: 09:40:42:5b:25:5f:89:19:e0:98:e8:6e:0d:d6:c5: 8d:aa:fc:b1:3a:8b:cb:a4:bc:1a:ea:96:ee:17:81: 3e:45:9b:b0:a8:24:57:7a:5c:27:c1:7e:d5:0c:81: b3:cd:c1:39:8d:0b:8e:86:60:e7:4e:0e:25:0c:ec: 7e:12:2e:b7:9e:56:54:33:b2:79:a9:03:9a:bd:c4: dc:e8:21:4e:96:62:d5:2f:0d:cd:59:b8:15:90:20: 5e:d1:15:18:81:e8:37:34:3e:be:e1:3a:31:13:0b: 65:17:6e:16:92:6b:fc:ed:53:e0:55:f1:c0:3b:3f: fe:40:b8:3a:aa:92:cf:93:64:9e:07:a6:03:f1:b1: 33:84:6b:ec:7d:b1:4e:c4:6e:dc:c6:25:6f:11:0e: 39:8a:75:c7:43:44:4d:6b:33:7d:f8:30:c7:68:a2: ef:fe:79:4c:d0:63:43:b2:e8:ce:e3:d3:9d:09:2d: 87:df:da:cc:fb:0e:84:4a:f7:74:1f:a6:cb:e6:0d: 00:15:61:30:71:3a:00:f1:15:fd:0d:2a:dd:a9:5c: e5:c7:d2:1c:b0:21:93:17:8d:00:ae:86:a9:86:57: 32:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:58:08:E4:4E:82:F6:02:D5:F6:5D:1C:2A:5E:AF:10:7E:42:6F X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7b:d1:0c:a1:38:09:70:b6:6d:08:4d:fe:39:34:59:1b:7c: c1:9a:61:ec:ba:9a:84:a9:51:f0:73:90:c2:f9:46:a8:e9:50: fe:7c:e8:c5:fe:00:57:fc:84:bb:6c:61:a2:ef:87:d0:fa:3c: 8a:48:12:6d:2e:39:48:70:32:33:f8:aa:6f:e0:41:88:ca:6b: 17:c2:52:d5:44:97:f7:37:27:5c:9b:cc:61:c6:a4:f0:79:0b: 11:e6:48:36:66:02:e8:ab:00:e8:93:09:26:65:e8:7c:0c:ac: 85:44:2c:7b:ed:88:b2:d2:fb:a6:bd:6d:be:a1:eb:9b:56:09: f1:bb:c8:32:a4:49:9e:3b:73:5d:a2:59:32:39:4f:9b:77:05: 19:99:17:53:0b:e8:b2:94:2d:f6:fb:d2:83:68:62:68:66:a1: 01:1d:93:86:a4:1d:1e:6d:c4:4d:be:cc:37:77:6f:d2:c6:ad: 86:35:75:7c:88:b3:b3:2e:96:49:1f:da:41:d4:94:b5:2b:ab: ff:d1:09:49:dc:e8:40:1b:08:f4:aa:f7:05:43:b0:75:75:07: ab:b6:41:ad:87:87:21:30:a3:8d:2c:6c:a3:57:ad:6c:03:bb: 0e:4d:b4:88:11:17:e8:90:d4:3d:5d:aa:07:27:ee:08:7f:d2: 21:30:6c:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUwNjAxMDQ0NjUwWhcNMjUwNjA4MDQ0NjUwWjAYMRYwFAYD VQQDEw02ODNiZGIzYi1jYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n/Eu8REY0hDuczYwIXQ0hhjnEqKe4Q5woFQMj8JQEJbJV+JGeCY6G4N1sWN qvyxOovLpLwa6pbuF4E+RZuwqCRXelwnwX7VDIGzzcE5jQuOhmDnTg4lDOx+Ei63 nlZUM7J5qQOavcTc6CFOlmLVLw3NWbgVkCBe0RUYgeg3ND6+4ToxEwtlF24Wkmv8 7VPgVfHAOz/+QLg6qpLPk2SeB6YD8bEzhGvsfbFOxG7cxiVvEQ45inXHQ0RNazN9 +DDHaKLv/nlM0GNDsujO49OdCS2H39rM+w6ESvd0H6bL5g0AFWEwcToA8RX9DSrd qVzlx9IcsCGTF40AroaphlcyDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYRWAjk ToL2AtX2XRwqXq8QfkJvMB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATe9EMoTgJcLZtCE3+OTRZG3zBmmHsupqEqVHwc5DC+Uao6VD+fOjF /gBX/IS7bGGi74fQ+jyKSBJtLjlIcDIz+Kpv4EGIymsXwlLVRJf3Nydcm8xhxqTw eQsR5kg2ZgLoqwDokwkmZeh8DKyFRCx77Yiy0vumvW2+oeubVgnxu8gypEmeO3Nd olkyOU+bdwUZmRdTC+iylC32+9KDaGJoZqEBHZOGpB0ebcRNvsw3d2/Sxq2GNXV8 iLOzLpZJH9pB1JS1K6v/0QlJ3OhAGwj0qvcFQ7B1dQertkGth4chMKONLGyjV61s A7sOTbSIERfokNQ9XaoHJ+4If9IhMGxZ -----END CERTIFICATE-----Generated at Mon Jun 2 19:21:40 2025 by rpki-client