$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: B8baYj47BSE+6qE43HCMV6nnQM1A3YanohzVRhUCs5k= Subject key identifier: FF:62:09:5D:8D:DB:A5:49:A7:5B:99:C4:82:C2:9D:AD:6B:1E:37:A4 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 349D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3497 Signing time: Sun 08 Jun 2025 14:33:45 +0000 Manifest this update: Sun 08 Jun 2025 14:33:45 +0000 Manifest next update: Sun 15 Jun 2025 14:33:45 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: P9Cn9JypPePyzFgGduUwQPQ+Ll9nDYKErR8os5/jXPk=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco=) 3: 673DC29606B011EFA665703AC4F9AE02.roa (hash: F5Zy7dXCYPL9clQFpPmuH37XP7Qhuqmf+NBAd1W/CM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 14:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13469 (0x349d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Jun 8 14:33:45 2025 GMT Not After : Jun 15 14:33:45 2025 GMT Subject: CN=68459f49-cf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0c:af:e5:81:4a:f7:72:dd:42:08:af:44:49: 7a:37:4d:44:e0:c9:ba:f5:56:53:dc:e4:46:04:41: 86:ca:2a:fd:3c:b1:a5:d9:76:88:0e:01:b8:69:ba: 18:87:4a:c6:03:50:08:4d:73:c8:53:5d:86:c6:ef: c4:50:c8:f7:bb:7f:55:c4:27:31:49:44:ef:71:61: 0e:45:e0:31:b5:66:1b:13:73:78:1a:01:95:fa:68: 07:c4:c3:43:0f:1c:2b:e2:d4:fb:c1:b9:20:8e:ae: 14:ec:8c:3b:32:93:22:b4:db:87:6e:cf:42:4f:e9: 3d:59:92:f6:2f:1b:1d:4f:e9:60:a1:62:3b:e6:ce: 0c:bf:68:58:bd:07:ae:b7:ae:d5:97:eb:4d:e0:c6: 19:fc:63:c4:92:cd:11:7a:75:d9:1a:3c:b8:07:43: d7:6e:6d:1b:fa:c5:0f:2e:5e:bc:3a:27:88:bd:c1: fa:1c:1f:9e:48:78:6a:f8:00:26:43:ac:e1:35:ca: 1b:66:d6:13:e3:fe:be:b8:78:55:f9:d6:cc:ac:7d: 8e:a2:80:78:f9:a4:d3:f5:8f:c4:19:61:da:a2:36: e6:e8:43:d5:bf:1b:da:f4:24:af:f9:a4:ce:6b:f0: ec:56:b8:4a:76:a2:11:4a:1b:3d:44:5b:58:7a:38: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:62:09:5D:8D:DB:A5:49:A7:5B:99:C4:82:C2:9D:AD:6B:1E:37:A4 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4e:c0:a3:a8:51:29:2d:94:13:92:ec:1f:35:cb:b3:e7:0d: c5:2a:06:f9:d1:66:c9:7c:43:f6:86:8d:35:30:f3:25:03:69: 17:a4:19:75:b2:6f:d0:86:34:8a:b5:93:1f:ee:ed:6e:31:6d: be:9b:ae:e6:fb:80:11:33:0b:fe:c0:e8:0c:f8:93:c0:ee:ff: 1e:ce:65:a3:31:f7:54:e5:b9:6a:e1:ba:56:3c:66:65:1d:b5: 78:24:74:68:16:09:38:cf:45:83:9e:72:f0:b8:be:72:6a:86: 62:47:e1:e5:86:43:06:34:4a:1b:83:93:9f:cc:d5:cb:76:41: b2:6a:b0:ec:9a:f9:11:3f:a5:f2:55:4d:8b:32:8b:3f:d2:06: 44:2d:0b:f5:2b:98:99:2f:63:58:fe:0f:4e:cd:75:32:09:11: f7:51:fd:42:59:fd:56:97:2d:16:68:53:69:24:59:ac:3f:73: 08:fd:55:7c:33:85:04:05:9b:46:4d:e1:7f:74:78:11:4d:b6: 61:8c:4b:a7:fe:12:0c:c6:dd:a3:cc:f7:84:a6:b2:b1:b9:b5: 85:93:f5:c1:8a:da:00:f6:85:45:78:cf:23:82:ed:7d:3d:a7: cc:2b:f4:0d:37:4c:8c:15:ca:b4:71:dd:cc:b6:f8:b2:c9:83: 4b:f7:9b:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUwNjA4MTQzMzQ1WhcNMjUwNjE1MTQzMzQ1WjAYMRYwFAYD VQQDEw02ODQ1OWY0OS1jZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7gyv5YFK93LdQgivREl6N01E4Mm69VZT3ORGBEGGyir9PLGl2XaIDgG4aboY h0rGA1AITXPIU12Gxu/EUMj3u39VxCcxSUTvcWEOReAxtWYbE3N4GgGV+mgHxMND Dxwr4tT7wbkgjq4U7Iw7MpMitNuHbs9CT+k9WZL2LxsdT+lgoWI75s4Mv2hYvQeu t67Vl+tN4MYZ/GPEks0RenXZGjy4B0PXbm0b+sUPLl68OieIvcH6HB+eSHhq+AAm Q6zhNcobZtYT4/6+uHhV+dbMrH2OooB4+aTT9Y/EGWHaojbm6EPVvxva9CSv+aTO a/DsVrhKdqIRShs9RFtYejjhDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9iCV2N 26VJp1uZxILCna1rHjekMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdTsCjqFEpLZQTkuwfNcuz5w3FKgb50WbJfEP2ho01MPMlA2kXpBl1 sm/QhjSKtZMf7u1uMW2+m67m+4ARMwv+wOgM+JPA7v8ezmWjMfdU5blq4bpWPGZl HbV4JHRoFgk4z0WDnnLwuL5yaoZiR+HlhkMGNEobg5OfzNXLdkGyarDsmvkRP6Xy VU2LMos/0gZELQv1K5iZL2NY/g9OzXUyCRH3Uf1CWf1Wly0WaFNpJFmsP3MI/VV8 M4UEBZtGTeF/dHgRTbZhjEun/hIMxt2jzPeEprKxubWFk/XBitoA9oVFeM8jgu19 PafMK/QNN0yMFcq0cd3MtviyyYNL95sj -----END CERTIFICATE-----Generated at Mon Jun 9 20:15:40 2025 by rpki-client