$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: QDjAQck91b3JTD8zY5xrCeJY80tVqk+FgbRoFzKzR+0= Subject key identifier: CC:CB:43:D2:EA:15:9E:71:3F:9E:12:11:15:43:97:8D:AD:3E:79:8C Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 1163 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 115C Signing time: Mon 02 Jun 2025 17:25:42 +0000 Manifest this update: Mon 02 Jun 2025 17:25:42 +0000 Manifest next update: Mon 09 Jun 2025 17:25:42 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: pSA42PSq5bHARJbrm4c73XNmgMZFY/B0nHIn6NXXEEg=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4451 (0x1163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Jun 2 17:25:42 2025 GMT Not After : Jun 9 17:25:42 2025 GMT Subject: CN=683dde96-b907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:a8:24:43:a2:f2:a3:71:ac:b6:0d:a6:c4: 5d:3c:4a:90:5b:17:02:d5:32:6f:58:e4:c2:5f:be: ea:e5:1a:e6:3a:40:cc:85:0a:cd:0a:3e:9d:44:64: 3f:2e:3f:c6:ca:7c:98:7f:89:a5:4e:75:cb:7b:4b: 49:46:ad:ba:67:ed:57:7a:a6:dd:5f:b1:90:78:f2: b1:d2:59:3b:2f:ba:e3:2c:c9:43:63:fd:a8:85:a2: 52:9e:6f:6e:2d:c8:97:94:b7:15:02:b4:f0:84:17: ad:64:2d:c8:21:ac:82:3a:55:81:8c:71:16:98:4d: ee:40:a8:33:97:f3:d6:5b:c7:09:68:cb:7c:78:48: 0e:b3:ca:b2:49:8a:a6:1f:3a:de:c1:35:fa:0d:2f: 37:80:74:9e:db:8f:65:5d:19:40:c6:a4:c1:d6:94: b7:55:e3:6b:a3:6c:60:79:11:f0:72:7a:c7:d8:3a: c5:51:df:f6:c8:f6:15:d4:34:21:c5:80:91:32:55: db:90:4a:3d:03:6a:5c:0f:a0:6e:79:c8:4f:70:ec: 5e:98:44:91:df:b4:95:11:db:b8:82:fc:1c:c2:ea: f9:79:45:4e:87:58:73:8f:18:da:94:4b:6b:43:d3: a2:63:51:c1:89:12:89:7f:91:6b:90:f9:95:44:ce: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CB:43:D2:EA:15:9E:71:3F:9E:12:11:15:43:97:8D:AD:3E:79:8C X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:37:75:31:ef:6f:a0:06:83:93:5d:02:4a:a2:71:0e:db:67: 3c:51:10:b2:1f:04:b4:3b:9a:9a:36:9b:e2:87:0f:c8:61:aa: f1:34:cd:ff:19:76:11:b4:a1:1e:8b:56:27:6c:fd:90:1d:ae: 77:ab:92:d2:b6:25:6e:7e:d2:be:07:19:bf:f8:57:b7:62:24: ac:ed:71:1f:64:4d:92:69:bc:03:98:54:cc:26:d7:b0:d9:05: 9f:24:d7:ed:72:c6:c3:14:05:af:d7:26:87:7a:79:b4:0e:a1: 5c:1a:59:da:af:6b:63:0c:00:80:9f:96:5f:d4:8d:d6:52:46: bd:2e:3e:40:2f:33:18:bc:38:60:40:25:25:eb:59:1f:58:1e: 0d:a5:6d:bc:4b:96:8d:c4:8e:02:d8:85:28:b9:60:54:d7:b8: 02:af:70:37:f2:9b:76:57:bb:18:ae:87:6c:4c:ae:f5:3e:73: 54:8e:54:85:a9:43:c1:36:69:2f:65:b2:0f:44:6c:aa:df:32: 2b:4e:9e:26:9d:f9:77:23:9e:ce:de:1f:8c:e8:1a:8b:d5:2c: cb:70:9f:c8:6c:f0:c7:ce:52:3a:d4:78:7d:72:aa:d2:05:66: 2c:57:2c:75:eb:a8:36:27:d3:d9:f7:bc:7a:43:e0:d5:04:1c: 63:36:7b:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUwNjAyMTcyNTQyWhcNMjUwNjA5MTcyNTQyWjAYMRYwFAYD VQQDEw02ODNkZGU5Ni1iOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWuoJEOi8qNxrLYNpsRdPEqQWxcC1TJvWOTCX77q5RrmOkDMhQrNCj6dRGQ/ Lj/GynyYf4mlTnXLe0tJRq26Z+1XeqbdX7GQePKx0lk7L7rjLMlDY/2ohaJSnm9u LciXlLcVArTwhBetZC3IIayCOlWBjHEWmE3uQKgzl/PWW8cJaMt8eEgOs8qySYqm HzrewTX6DS83gHSe249lXRlAxqTB1pS3VeNro2xgeRHwcnrH2DrFUd/2yPYV1DQh xYCRMlXbkEo9A2pcD6BuechPcOxemESR37SVEdu4gvwcwur5eUVOh1hzjxjalEtr Q9OiY1HBiRKJf5FrkPmVRM4dywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzLQ9Lq FZ5xP54SERVDl42tPnmMMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2N3Ux72+gBoOTXQJKonEO22c8URCyHwS0O5qaNpvihw/IYarxNM3/ GXYRtKEei1YnbP2QHa53q5LStiVuftK+Bxm/+Fe3YiSs7XEfZE2SabwDmFTMJtew 2QWfJNftcsbDFAWv1yaHenm0DqFcGlnar2tjDACAn5Zf1I3WUka9Lj5ALzMYvDhg QCUl61kfWB4NpW28S5aNxI4C2IUouWBU17gCr3A38pt2V7sYrodsTK71PnNUjlSF qUPBNmkvZbIPRGyq3zIrTp4mnfl3I57O3h+M6BqL1SzLcJ/IbPDHzlI61Hh9cqrS BWYsVyx166g2J9PZ97x6Q+DVBBxjNnsU -----END CERTIFICATE-----Generated at Mon Jun 2 20:56:50 2025 by rpki-client