$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: zU1YsbLXkpYRWIerpQ5RmFc/B1MeR9pXSIMiDYz3Fu4= Subject key identifier: 2C:17:D8:9E:68:2B:A3:8B:FF:06:1C:43:1D:29:CD:59:9E:27:D9:4A Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 348F Signing time: Thu 12 Jun 2025 14:48:54 +0000 Manifest this update: Thu 12 Jun 2025 14:48:54 +0000 Manifest next update: Thu 19 Jun 2025 14:48:54 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: QTFb1zdSFgyEqgJtzdeK/diVpb2QHdVid1CSwYWmMJU=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: 6tys2kBORt2e9LfTgwSygjIdDqVtnmqGXLJS1SjEsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Jun 12 14:48:54 2025 GMT Not After : Jun 19 14:48:54 2025 GMT Subject: CN=684ae8d6-21f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:57:d9:86:a6:c6:91:24:9d:d0:e0:68:9f: 82:a6:9e:dc:2b:04:34:bd:56:b8:b3:bd:3c:2b:f0: 83:ee:38:89:fc:61:7c:32:12:43:6e:7a:9d:da:6f: 96:6a:c1:9d:98:50:2f:a2:76:f1:d0:40:04:23:1b: 6e:54:d1:fc:29:0f:31:ec:35:78:5d:f7:32:de:29: 84:6c:ba:47:21:72:0e:6c:73:09:1b:61:0e:1e:56: ad:8e:82:53:21:d5:e0:69:b5:ac:7b:5c:4a:e0:8f: 6f:f2:b3:b6:2c:30:ba:3c:8b:e1:0c:04:f6:25:6c: 3e:c8:32:8d:83:20:62:af:33:ef:d3:cc:7c:7f:0b: 4a:ec:be:9c:2a:0d:1a:b8:13:d8:ea:f2:05:5b:24: 1a:ef:ce:96:bb:00:b0:94:6f:70:31:c3:90:8d:f4: 81:c8:df:04:1c:b6:b5:4e:8c:99:c4:de:a5:7e:be: ef:de:b5:cf:82:b1:54:2c:2d:09:8e:cd:55:93:85: 80:bf:be:25:50:49:f4:2b:99:9b:32:d7:6b:f4:48: 82:bf:c1:34:ba:6f:b0:3f:de:e9:6a:72:93:f1:3e: 20:43:e4:b1:24:66:0e:51:a1:20:f3:22:d2:54:2c: 92:3b:66:4d:5f:86:13:9f:33:db:b0:19:69:2d:79: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:D8:9E:68:2B:A3:8B:FF:06:1C:43:1D:29:CD:59:9E:27:D9:4A X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:dc:ca:65:f0:56:3a:cd:59:1a:52:42:70:2b:e0:a0:cc:4c: a0:dc:66:5a:8d:be:45:d9:37:07:13:d2:36:bd:6e:25:c0:84: 61:e4:30:74:5c:31:5c:2f:3e:fa:82:a5:ec:b4:85:d8:e7:77: a2:66:30:1d:d2:33:bc:e7:0f:2a:00:3c:f4:1d:1d:05:39:d1: 11:c8:1c:12:92:97:92:51:9b:58:90:5b:30:7b:9b:15:13:21: b6:8b:c2:2a:0d:46:68:56:1b:5a:ec:77:38:51:3f:f4:a7:f8: 81:7d:97:39:fd:0b:9f:c1:44:0a:3e:73:9a:fa:69:94:54:19: d0:ca:74:34:66:a2:dc:8c:f6:62:b8:2b:ed:e7:60:69:75:48: d6:7e:db:4f:6f:09:b3:39:d7:8a:2b:e7:56:c2:25:57:4f:e9: 2d:d0:23:b6:48:d0:a5:68:ad:d6:d9:45:91:2e:27:40:de:92: f8:83:5c:a9:4f:a7:4b:84:41:a9:5b:08:47:a2:da:d4:69:f3: e0:9d:f1:d3:e5:1f:ee:68:92:9c:4d:67:92:4e:c2:06:01:95: 5d:32:91:0e:47:da:61:07:a3:c1:64:82:13:4d:6d:11:07:6e: 32:cb:f2:df:03:6a:39:62:c0:a3:55:5e:36:61:2f:4e:2f:cf: 8e:25:f4:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjUwNjEyMTQ0ODU0WhcNMjUwNjE5MTQ0ODU0WjAYMRYwFAYD VQQDEw02ODRhZThkNi0yMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3xX2YamxpEkndDgaJ+Cpp7cKwQ0vVa4s708K/CD7jiJ/GF8MhJDbnqd2m+W asGdmFAvonbx0EAEIxtuVNH8KQ8x7DV4Xfcy3imEbLpHIXIObHMJG2EOHlatjoJT IdXgabWse1xK4I9v8rO2LDC6PIvhDAT2JWw+yDKNgyBirzPv08x8fwtK7L6cKg0a uBPY6vIFWyQa786WuwCwlG9wMcOQjfSByN8EHLa1ToyZxN6lfr7v3rXPgrFULC0J js1Vk4WAv74lUEn0K5mbMtdr9EiCv8E0um+wP97panKT8T4gQ+SxJGYOUaEg8yLS VCySO2ZNX4YTnzPbsBlpLXmiYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwX2J5o K6OL/wYcQx0pzVmeJ9lKMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW3Mpl8FY6zVkaUkJwK+CgzEyg3GZajb5F2TcHE9I2vW4lwIRh5DB0 XDFcLz76gqXstIXY53eiZjAd0jO85w8qADz0HR0FOdERyBwSkpeSUZtYkFswe5sV EyG2i8IqDUZoVhta7Hc4UT/0p/iBfZc5/QufwUQKPnOa+mmUVBnQynQ0ZqLcjPZi uCvt52BpdUjWfttPbwmzOdeKK+dWwiVXT+kt0CO2SNClaK3W2UWRLidA3pL4g1yp T6dLhEGpWwhHotrUafPgnfHT5R/uaJKcTWeSTsIGAZVdMpEOR9phB6PBZIITTW0R B24yy/LfA2o5YsCjVV42YS9OL8+OJfSR -----END CERTIFICATE-----Generated at Sat Jun 14 10:03:24 2025 by rpki-client