$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: nSmhOQilLgrSThR7Ob9oLvXlUkKBj+avMXQ4LoNrLTs= Subject key identifier: 4F:1B:F0:42:65:C5:56:25:D1:9E:FE:1E:65:07:EA:2F:81:FD:5B:23 Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: 62 Signing time: Tue 03 Jun 2025 06:53:44 +0000 Manifest this update: Tue 03 Jun 2025 06:53:43 +0000 Manifest next update: Tue 10 Jun 2025 06:53:43 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: lamzScfar2BAljJv6s2j/Uc5Q2RxHh5vAX1MdPam4ZU=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: JnGUEG/UELgRSrXf0UwtaiJ+4LEhgtXWroHpv/a9KQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: Jun 3 06:53:43 2025 GMT Not After : Jun 10 06:53:43 2025 GMT Subject: CN=683e9bf7-898b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:15:91:32:9a:1e:41:5b:b4:94:d7:49:da:e5: c2:16:c7:8c:60:62:7a:e7:de:f9:3a:9f:28:af:60: 17:cb:08:71:de:7f:56:a5:87:a1:53:3c:e3:b8:1b: be:cf:7b:b8:e8:a3:58:46:ed:0a:d9:23:40:c0:d6: be:41:ef:72:d6:1b:1e:27:b4:cd:56:7a:7a:8a:91: 12:a8:17:17:73:f4:9d:3d:39:4d:fe:67:d7:b0:1c: 7c:bf:6b:df:62:0b:24:8e:63:ae:60:8b:97:ab:e7: 29:be:93:07:66:0a:17:fe:3d:98:e2:26:03:2c:72: 57:98:e9:c8:d5:a9:c9:9f:4b:e7:9a:7f:ca:93:cd: 57:3c:2d:2a:23:95:7c:1c:48:40:2f:a2:fe:3f:94: a8:5f:e2:0f:e6:be:67:13:88:08:19:e4:37:d9:7f: 44:c2:2d:89:06:95:f1:2a:90:4a:e6:f4:05:75:6b: b3:a0:a9:65:33:24:a5:ff:e2:63:8a:26:45:cd:d8: 5d:11:c5:6c:50:30:f0:29:fd:77:38:8f:37:86:5a: 4f:78:d7:99:21:c0:75:3a:13:58:16:db:53:05:41: 04:b5:11:78:09:61:c9:dd:5c:b0:96:74:d3:94:f1: 99:a5:af:70:e8:55:7a:a3:7f:10:bd:2c:84:19:c1: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1B:F0:42:65:C5:56:25:D1:9E:FE:1E:65:07:EA:2F:81:FD:5B:23 X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:6c:e4:ed:95:a8:b7:bd:39:00:72:28:db:d6:d5:db:3a:f1: fc:95:a0:fd:b2:e2:39:15:e6:71:12:af:4a:32:8e:e7:94:db: f6:38:59:7c:5e:e0:a2:bc:d7:2a:3d:96:c9:65:a0:43:bf:0c: ad:86:5a:5e:62:50:36:bc:9e:ca:ab:77:51:eb:24:83:55:36: 39:7e:9e:2c:f3:c2:c3:1e:67:97:97:6f:7b:52:28:e1:4c:18: e4:ea:5e:ee:f6:80:70:c6:c1:de:0a:0c:12:b8:02:ed:8a:9b: 36:bb:ae:09:7b:0d:30:20:2e:e5:2e:e7:b2:ec:34:bb:20:ad: e2:bd:46:e6:56:ab:7d:66:9e:92:50:84:0e:f6:12:03:00:87: e3:26:95:d5:ac:c5:53:bd:40:e9:de:13:6c:1f:19:4f:d4:5a: b4:09:6b:c1:33:90:87:4a:99:69:5d:5f:9a:76:07:75:ad:88: 14:8f:e9:81:72:d1:01:2e:5f:3f:1b:ba:65:d7:c2:0b:e7:05: 23:59:ff:1d:99:bf:3b:16:45:87:8c:3a:8a:6f:cc:44:13:7b: e6:a6:fd:0b:a3:dd:ce:c1:4d:c5:8c:42:d2:cb:1a:6f:7c:5e: a9:37:92:ef:30:74:6f:e5:f1:17:db:e8:93:e3:e9:ed:4b:2f: ce:39:e4:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUQ1MzExMC8GA1UEBRMoOEY3NEMxNzU1RjE4ODcwOENDRTNBNjdERUMyODU5OTM2 NDhERjE4MzAeFw0yNTA2MDMwNjUzNDNaFw0yNTA2MTAwNjUzNDNaMBgxFjAUBgNV BAMTDTY4M2U5YmY3LTg5OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClFZEymh5BW7SU10na5cIWx4xgYnrn3vk6nyivYBfLCHHef1alh6FTPOO4G77P e7joo1hG7QrZI0DA1r5B73LWGx4ntM1WenqKkRKoFxdz9J09OU3+Z9ewHHy/a99i CySOY65gi5er5ym+kwdmChf+PZjiJgMscleY6cjVqcmfS+eaf8qTzVc8LSojlXwc SEAvov4/lKhf4g/mvmcTiAgZ5DfZf0TCLYkGlfEqkErm9AV1a7OgqWUzJKX/4mOK JkXN2F0RxWxQMPAp/Xc4jzeGWk9415khwHU6E1gW21MFQQS1EXgJYcndXLCWdNOU 8Zmlr3DoVXqjfxC9LIQZwYdTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTxvwQmXF ViXRnv4eZQfqL4H9WyMwHwYDVR0jBBgwFoAUj3TBdV8YhwjM46Z97ChZk2SN8YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RDUzL0ZDN0Q2MDg2QUM4 MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvajNUQmRWOFlod2pNNDZaOTdDaFprMlNOOFlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RDUzL0ZDN0Q2MDg2QUM4MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdq TTQ2Wjk3Q2haazJTTjhZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACRs5O2VqLe9OQByKNvW1ds68fyVoP2y4jkV5nESr0oyjueU2/Y4WXxe 4KK81yo9lslloEO/DK2GWl5iUDa8nsqrd1HrJINVNjl+nizzwsMeZ5eXb3tSKOFM GOTqXu72gHDGwd4KDBK4Au2Kmza7rgl7DTAgLuUu57LsNLsgreK9RuZWq31mnpJQ hA72EgMAh+MmldWsxVO9QOneE2wfGU/UWrQJa8EzkIdKmWldX5p2B3WtiBSP6YFy 0QEuXz8bumXXwgvnBSNZ/x2ZvzsWRYeMOopvzEQTe+am/Quj3c7BTcWMQtLLGm98 Xqk3ku8wdG/l8Rfb6JPj6e1LL8455Fo= -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:56 2025 by rpki-client