$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: 3HsxfLhnG7t6Uh0bM5ZGBYP0OKg6ZxLIRrBMsC+Yz/k= Subject key identifier: DE:5F:AA:FD:94:69:2E:EF:5C:4D:C5:87:86:93:66:62:D5:19:AB:F8 Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: 06 Signing time: Sat 31 May 2025 07:43:35 +0000 Manifest this update: Sat 31 May 2025 07:43:34 +0000 Manifest next update: Sat 07 Jun 2025 07:43:34 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: Fn4YsSiQPNAIsXe3ExVr6ennKOhlDWOwRyH7N4WJ+/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: May 31 07:43:34 2025 GMT Not After : Jun 7 07:43:34 2025 GMT Subject: CN=683ab326-9392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ea:1b:3a:ee:f5:e4:0e:65:75:44:5d:4c:a3: 8b:1c:35:54:93:5d:ac:37:b2:33:0a:10:a8:ca:4f: 38:d8:ff:79:16:13:d0:4c:a1:48:a5:d5:35:f4:f2: 54:36:58:c5:64:ff:c6:86:bb:f2:64:8f:4d:6c:c3: ca:01:19:60:d7:49:c7:d0:67:fc:23:81:32:75:32: 86:78:14:93:d8:6a:4f:31:47:85:0b:48:7e:f1:8d: b7:89:b5:d0:3d:e6:e6:c7:98:2e:b6:15:b8:0f:39: 3b:0e:22:02:4e:d4:3c:15:2f:9f:3e:35:a4:b6:7d: d2:e1:31:2d:82:cf:18:87:05:44:7a:05:de:7d:7b: 85:64:56:30:b4:76:60:81:4c:a8:b8:f9:1d:4c:42: e5:7b:26:e6:fc:b7:bf:ac:fd:08:e9:0a:59:30:a3: ca:db:7f:f7:8b:16:25:38:df:4c:2a:57:27:0f:b0: 9e:e9:45:22:e9:6a:65:67:40:4a:a6:a0:af:89:74: 26:77:4e:55:8c:35:5f:88:49:2b:bb:d8:18:c1:5e: 10:e9:46:30:00:4d:2c:40:cf:6d:fc:b0:2a:3a:35: 8b:60:b1:b4:cf:28:8b:cd:2c:15:31:08:71:f5:a1: 5e:18:39:a4:a9:0b:b2:e5:90:70:f6:d8:9f:a4:6c: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5F:AA:FD:94:69:2E:EF:5C:4D:C5:87:86:93:66:62:D5:19:AB:F8 X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fd:a8:85:11:4d:fc:11:2d:7f:9f:fc:0b:47:fd:b5:34:40: 87:27:7b:55:45:b3:05:2f:b1:0b:13:0f:ec:eb:c2:35:cf:51: be:44:e2:17:a2:af:26:76:17:ef:bc:f1:85:f0:db:06:3c:f0: 14:62:e4:a4:d3:8d:af:55:fb:dc:17:51:b0:1f:1b:5b:03:60: 37:9b:7d:c3:d4:5d:a8:69:9f:26:22:12:c7:4a:14:87:af:19: 83:f6:ec:83:ce:64:85:91:9d:aa:13:f7:b0:8f:78:95:25:eb: a1:5e:83:8f:d3:aa:21:29:cb:41:a2:dd:12:63:d3:e1:0a:7f: 35:a2:f2:95:ff:e9:34:c9:8c:9d:30:9a:dc:b9:a6:bc:bc:25: 80:0c:47:a0:f0:fb:37:11:c6:b7:d5:6f:34:0a:22:eb:f9:9f: 2c:a5:0d:69:df:c0:00:0b:4e:39:ea:ac:0d:21:65:8c:0d:2e: e3:e8:b9:e7:7e:86:2d:6a:4a:6f:99:47:64:8a:80:57:44:90: 8e:36:5b:83:26:2b:b8:74:37:88:0e:c4:12:13:10:51:80:6f: 22:b8:8f:d1:53:ad:8e:90:71:76:15:0a:eb:76:11:d1:c6:a9: 38:df:a2:67:3b:ad:27:7f:8b:fd:11:14:8f:18:71:95:df:1c: 08:1a:bd:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoRENFQjlCNkQ4M0ZCMDJEQzQ1RTkyMDM1MzhBNUM4QUY2 Rjk0MUZBOTAeFw0yNTA1MzEwNzQzMzRaFw0yNTA2MDcwNzQzMzRaMBgxFjAUBgNV BAMTDTY4M2FiMzI2LTkzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX6hs67vXkDmV1RF1Mo4scNVSTXaw3sjMKEKjKTzjY/3kWE9BMoUil1TX08lQ2 WMVk/8aGu/Jkj01sw8oBGWDXScfQZ/wjgTJ1MoZ4FJPYak8xR4ULSH7xjbeJtdA9 5ubHmC62FbgPOTsOIgJO1DwVL58+NaS2fdLhMS2CzxiHBUR6Bd59e4VkVjC0dmCB TKi4+R1MQuV7Jub8t7+s/QjpClkwo8rbf/eLFiU430wqVycPsJ7pRSLpamVnQEqm oK+JdCZ3TlWMNV+ISSu72BjBXhDpRjAATSxAz238sCo6NYtgsbTPKIvNLBUxCHH1 oV4YOaSpC7LlkHD22J+kbFLrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3l+q/ZRp Lu9cTcWHhpNmYtUZq/gwHwYDVR0jBBgwFoAU3OubbYP7AtxF6SA1OKXIr2+UH6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzEyMzg0QURFMzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM091YmJZUDdBdHhGNlNBMU9LWElyMi1VSDZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzEyMzg0QURFMzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4 RjZTQTFPS1hJcjItVUg2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJz9qIURTfwRLX+f/AtH/bU0QIcne1VFswUvsQsTD+zrwjXPUb5E4hei ryZ2F++88YXw2wY88BRi5KTTja9V+9wXUbAfG1sDYDebfcPUXahpnyYiEsdKFIev GYP27IPOZIWRnaoT97CPeJUl66Feg4/TqiEpy0Gi3RJj0+EKfzWi8pX/6TTJjJ0w mty5pry8JYAMR6Dw+zcRxrfVbzQKIuv5nyylDWnfwAALTjnqrA0hZYwNLuPoued+ hi1qSm+ZR2SKgFdEkI42W4MmK7h0N4gOxBITEFGAbyK4j9FTrY6QcXYVCut2EdHG qTjfomc7rSd/i/0RFI8YcZXfHAgavaI= -----END CERTIFICATE-----Generated at Sat May 31 17:07:45 2025 by rpki-client