$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft File: 3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json) Hash identifier: qD3+da0p1MO77NEaIEe3RqsoNbjWwd7NYlUh8tis8DQ= Subject key identifier: 61:93:9A:EA:8D:BD:9D:5C:B3:CB:4B:DB:97:DB:5F:E1:F5:74:59:A2 Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E Certificate issuer: /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Certificate serial: 0A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft Manifest number: 0A35 Signing time: Mon 30 Jun 2025 19:54:26 +0000 Manifest this update: Mon 30 Jun 2025 19:54:25 +0000 Manifest next update: Mon 07 Jul 2025 19:54:25 +0000 Files and hashes: 1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: svij3rNcURV2ulHDWr+pci8zsYvvZ62k4WLe+E4oZ/s=) 2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: vFM8zP6/yZnn9lA/MIHAlH1VsJ7/4aQRYj46a02OHPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2624 (0xa40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Validity Not Before: Jun 30 19:54:25 2025 GMT Not After : Jul 7 19:54:25 2025 GMT Subject: CN=6862eb72-9da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:67:bc:25:57:d2:94:e3:1d:86:d9:d5:d9: 9c:2d:83:64:d4:1f:68:36:cc:a9:ac:a8:9a:86:fb: c8:53:7e:26:f5:b2:37:46:74:49:3f:31:a7:bf:14: 30:7f:ec:4a:3c:af:e9:df:98:dc:72:9f:3c:0c:8d: b7:c3:f2:fc:b6:2c:4d:99:53:71:f7:a8:f3:ec:18: 76:34:82:d8:a6:e8:2d:f1:f0:84:a0:20:fa:6e:7d: 22:6c:57:0b:ff:ab:d5:f0:e0:99:fc:c1:1e:33:7f: b6:5d:62:df:e9:4e:0e:54:b2:74:47:f5:5e:8a:98: d8:fb:92:64:5f:22:00:2f:b4:21:55:06:5a:06:b0: 0f:6b:1d:c2:5f:24:84:6e:71:e8:5e:c7:50:71:12: 1d:4a:70:62:97:9e:00:b6:7f:13:81:c3:66:38:50: 5f:f1:a4:48:f9:c7:07:f9:86:f6:29:c2:4f:fc:79: 93:30:a7:c6:a7:ac:17:64:a3:cc:cd:ab:c6:7c:d1: c5:bf:9a:63:39:04:a6:5a:7b:76:f9:52:bc:0b:ec: b4:65:28:ea:ae:c6:8a:ec:e7:57:91:28:16:8f:24: 23:ea:1e:3b:7a:8b:b1:d4:9f:e8:f8:5f:97:bb:af: 1f:ea:22:af:c6:97:7c:2c:15:85:60:f1:c1:f4:51: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:93:9A:EA:8D:BD:9D:5C:B3:CB:4B:DB:97:DB:5F:E1:F5:74:59:A2 X509v3 Authority Key Identifier: keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2d:7b:ac:fa:40:6d:90:06:63:f3:bd:ff:d1:47:47:2b:03: 6d:30:bf:72:f6:70:33:2e:64:67:8d:d8:ba:79:24:06:eb:b8: f3:32:d5:cc:d1:bc:95:72:84:07:fa:4e:12:55:42:17:ac:60: 31:3e:5a:a8:ff:66:e0:82:64:ed:cf:f8:95:20:d1:37:cc:6a: 68:8b:de:23:6a:86:ec:8a:28:46:54:eb:c2:42:bd:68:11:6a: 3a:8b:e8:e3:f8:84:ca:42:20:dd:f7:09:5b:85:ab:63:2f:69: aa:7c:7a:45:7c:15:a5:dc:79:73:07:48:20:1a:d4:b3:c4:af: 4c:eb:09:2b:57:86:00:74:c3:cb:07:4c:2a:8a:ef:ff:55:34: 33:c1:ab:20:0c:d6:1a:f0:23:26:a6:c2:c1:b0:4f:bf:bb:0a: 76:0d:d4:3b:4b:35:8d:40:a8:ac:c0:80:0f:25:01:05:74:17: 61:df:5c:54:b9:0d:25:af:23:28:af:6f:e0:bb:41:ff:82:33: 16:2c:5b:b0:1a:91:51:2c:59:63:9c:c6:c7:af:62:e9:02:c1: 5b:a0:9e:77:13:c5:2a:65:74:a5:9e:95:fa:02:e7:31:02:b2: d3:90:c1:cf:b7:1a:66:1f:e4:34:d3:50:e0:37:b5:5e:5b:98: fd:8b:1f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4MjkxMTAvBgNVBAUTKERDQ0Q1NTM1NTJCQUY4QTY1QzFBMDY2QjMzNDdGNzkz MjQ0RjU3NUUwHhcNMjUwNjMwMTk1NDI1WhcNMjUwNzA3MTk1NDI1WjAYMRYwFAYD VQQDEw02ODYyZWI3Mi05ZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutdnvCVX0pTjHYbZ1dmcLYNk1B9oNsyprKiahvvIU34m9bI3RnRJPzGnvxQw f+xKPK/p35jccp88DI23w/L8tixNmVNx96jz7Bh2NILYpugt8fCEoCD6bn0ibFcL /6vV8OCZ/MEeM3+2XWLf6U4OVLJ0R/VeipjY+5JkXyIAL7QhVQZaBrAPax3CXySE bnHoXsdQcRIdSnBil54Atn8TgcNmOFBf8aRI+ccH+Yb2KcJP/HmTMKfGp6wXZKPM zavGfNHFv5pjOQSmWnt2+VK8C+y0ZSjqrsaK7OdXkSgWjyQj6h47eoux1J/o+F+X u68f6iKvxpd8LBWFYPHB9FH/VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGTmuqN vZ1cs8tL25fbX+H1dFmiMB8GA1UdIwQYMBaAFNzNVTVSuvimXBoGazNH95MkT1de MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDgyOS85OUQ3QzZBNDZG RUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1LWmNHZ1pyTTBmM2t5UlBW MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNMVZOVks2LUtaY0dnWnJNMGYza3lSUFYxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDgyOS85OUQ3QzZBNDZGRUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1L WmNHZ1pyTTBmM2t5UlBWMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMLXus+kBtkAZj873/0UdHKwNtML9y9nAzLmRnjdi6eSQG67jzMtXM 0byVcoQH+k4SVUIXrGAxPlqo/2bggmTtz/iVINE3zGpoi94jaobsiihGVOvCQr1o EWo6i+jj+ITKQiDd9wlbhatjL2mqfHpFfBWl3HlzB0ggGtSzxK9M6wkrV4YAdMPL B0wqiu//VTQzwasgDNYa8CMmpsLBsE+/uwp2DdQ7SzWNQKiswIAPJQEFdBdh31xU uQ0lryMor2/gu0H/gjMWLFuwGpFRLFljnMbHr2LpAsFboJ53E8UqZXSlnpX6Aucx ArLTkMHPtxpmH+Q001DgN7VeW5j9ix+N -----END CERTIFICATE-----Generated at Wed Jul 2 13:24:27 2025 by rpki-client