$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: LMzyBP2aDcIJ8dFN5CybNtJ2/achFhLPBBIzqtoHDg8= Subject key identifier: D6:ED:44:8D:74:AC:D2:A7:1A:BE:9B:19:47:EB:68:0C:C0:35:E6:F3 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 105D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 104F Signing time: Mon 02 Jun 2025 17:35:57 +0000 Manifest this update: Mon 02 Jun 2025 17:35:57 +0000 Manifest next update: Mon 09 Jun 2025 17:35:57 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: R26tBP9XJiVb5jZohrOGR5K8ZHYZfXm7HQhFEZxdMCw=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: 0OKa5D8R5tqflMwj5WNvymkXFrzQXgwFV3RUnRL3aD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4189 (0x105d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Jun 2 17:35:57 2025 GMT Not After : Jun 9 17:35:57 2025 GMT Subject: CN=683de0fd-f233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:02:b1:a5:cf:e7:a8:4a:b6:60:4a:f7:11: ad:8a:42:72:ba:52:51:b0:45:1d:72:a5:7f:14:a7: 7c:fa:8d:3a:b0:56:3c:7b:af:7d:9e:30:cd:6f:f6: 4b:f4:c2:0e:b5:47:54:c7:89:fc:ef:a4:75:82:d9: f0:a8:f1:fe:09:1c:ff:98:c5:a6:af:07:46:41:e6: ae:15:85:5f:43:ac:5a:23:36:7f:c8:9e:93:9b:66: 0d:b9:7f:c4:07:61:6f:1d:34:58:25:82:4e:9e:df: 81:05:a9:63:1c:f6:6b:dd:45:b8:91:ac:63:b8:6b: 78:11:3d:38:db:4d:54:8b:f9:f8:16:95:13:c9:4f: a2:13:e9:5e:a2:f1:cd:5f:e3:68:f9:93:13:96:44: 33:c1:8b:1b:ab:f2:ab:1a:d1:3e:9a:9d:24:ea:42: b3:e5:3a:8b:39:97:db:32:c2:8f:eb:2c:e7:fd:19: e2:5c:28:8e:49:e1:f3:b5:9a:c6:d3:27:ef:f7:1d: 7a:4d:fb:88:f4:46:11:8f:ce:e1:1c:3e:73:ce:1e: 40:aa:a2:a9:3b:5c:15:c1:11:6b:c2:4e:98:86:4f: eb:5c:c5:53:d1:7b:b3:74:11:6b:36:f8:18:cb:12: 84:74:a4:f1:46:05:91:f9:05:91:f5:60:30:d0:6d: cb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:44:8D:74:AC:D2:A7:1A:BE:9B:19:47:EB:68:0C:C0:35:E6:F3 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:85:ae:05:2b:58:b3:39:2a:23:ff:ce:62:a5:81:ba:af:f8: 1f:c4:2a:c6:ee:58:4c:3a:2e:4c:bc:d8:cb:23:3b:42:30:ad: 67:83:b5:a6:00:b7:72:68:4c:42:ac:cd:2d:06:6d:8e:3e:22: 81:fa:69:3f:9f:cd:6a:88:41:aa:0f:73:17:4e:e5:23:73:6e: 0d:fc:7a:9d:03:2c:8b:bc:8e:bc:bb:5d:39:62:12:79:c7:52: 49:48:03:ed:b1:41:cb:bd:f5:1f:52:4f:dc:48:12:ce:ae:85: e7:3f:dc:a5:48:6f:32:ed:f9:38:f5:b1:0d:4b:c9:0d:21:a1: 63:6f:29:59:e7:6b:e8:d3:22:e5:80:32:52:6a:7e:42:d3:47: 4d:f7:21:c2:b2:bd:c6:ae:b9:20:ef:36:8b:64:31:98:28:bc: b3:5d:7c:f4:0e:3e:82:88:ab:f9:ab:c5:b2:60:1d:3d:d7:d7: 20:d6:bf:08:ae:fa:f9:82:1a:d1:1b:00:a6:dd:50:db:1a:a6: 31:9c:09:8e:c8:c9:c5:51:a1:47:f7:0f:ee:98:07:62:a0:59: 50:0d:c0:be:0c:11:e4:59:26:fc:17:23:10:fa:45:fb:53:d2: b4:e5:68:e6:0b:ec:c8:8f:00:6f:50:17:4b:24:11:be:59:15: 7e:12:bf:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUwNjAyMTczNTU3WhcNMjUwNjA5MTczNTU3WjAYMRYwFAYD VQQDEw02ODNkZTBmZC1mMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSICsaXP56hKtmBK9xGtikJyulJRsEUdcqV/FKd8+o06sFY8e699njDNb/ZL 9MIOtUdUx4n876R1gtnwqPH+CRz/mMWmrwdGQeauFYVfQ6xaIzZ/yJ6Tm2YNuX/E B2FvHTRYJYJOnt+BBaljHPZr3UW4kaxjuGt4ET04201Ui/n4FpUTyU+iE+leovHN X+No+ZMTlkQzwYsbq/KrGtE+mp0k6kKz5TqLOZfbMsKP6yzn/RniXCiOSeHztZrG 0yfv9x16TfuI9EYRj87hHD5zzh5AqqKpO1wVwRFrwk6Yhk/rXMVT0XuzdBFrNvgY yxKEdKTxRgWR+QWR9WAw0G3LEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbtRI10 rNKnGr6bGUfraAzANebzMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLha4FK1izOSoj/85ipYG6r/gfxCrG7lhMOi5MvNjLIztCMK1ng7Wm ALdyaExCrM0tBm2OPiKB+mk/n81qiEGqD3MXTuUjc24N/HqdAyyLvI68u105YhJ5 x1JJSAPtsUHLvfUfUk/cSBLOroXnP9ylSG8y7fk49bENS8kNIaFjbylZ52vo0yLl gDJSan5C00dN9yHCsr3Grrkg7zaLZDGYKLyzXXz0Dj6CiKv5q8WyYB0919cg1r8I rvr5ghrRGwCm3VDbGqYxnAmOyMnFUaFH9w/umAdioFlQDcC+DBHkWSb8FyMQ+kX7 U9K05WjmC+zIjwBvUBdLJBG+WRV+Er+8 -----END CERTIFICATE-----Generated at Mon Jun 2 21:15:48 2025 by rpki-client