$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: sllSBvnHk3w0jEJQA4B538oJ/6qSHVjFkdkxCwQl0zY= Subject key identifier: 4F:B4:47:5F:3D:EC:34:AB:7F:04:F4:5A:9B:D6:21:B4:3A:E2:9C:E4 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0C7C Signing time: Fri 30 May 2025 18:34:59 +0000 Manifest this update: Fri 30 May 2025 18:34:59 +0000 Manifest next update: Fri 06 Jun 2025 18:34:59 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: E207K5L6IzGg6X/4Gxea6kp5TSnWWSzZqy/S8XwlUXo=) 2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: /m7E0Dw/anD8qYNxCWedW44uleLaVBkf0eBmZ6XFvMk=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: rZ4CQjG/7W0/b4/xy8McSOxNbiTi926f91iRcbtKHeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: May 30 18:34:59 2025 GMT Not After : Jun 6 18:34:59 2025 GMT Subject: CN=6839fa53-de0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:cf:45:df:20:21:c9:7b:04:3d:ec:ed:ca: 01:15:7f:a8:99:7e:c5:6f:30:66:f2:ea:f3:11:aa: 1e:9d:93:a3:ca:ab:58:1e:f5:4b:6d:f6:ab:b1:1d: af:a1:6c:a1:e4:f0:b0:1a:b0:82:03:0a:8e:e4:e2: d9:28:41:f1:a6:34:4e:64:e9:37:b0:81:2e:91:83: 6b:26:b5:2b:57:55:ad:58:64:e3:09:7e:e3:1f:f2: c6:d9:75:9c:5f:8b:34:94:cb:49:57:41:0d:10:15: 05:b3:0b:d7:a3:d6:d8:b8:98:d7:71:35:f9:c6:e3: 98:ac:47:db:14:4a:b6:91:88:1f:90:8c:d9:07:23: 39:24:bb:f8:25:9a:94:d0:07:98:96:8c:f9:a7:fb: cc:0e:55:7e:d7:8f:99:a4:5b:3e:f4:a3:eb:4d:77: 3b:0c:12:ec:2b:f3:b9:93:7d:3e:ed:75:a9:f4:be: 48:cf:74:fc:e3:06:61:97:7f:65:4d:52:ef:5d:a7: 7f:f7:2f:e3:6a:bf:a2:b8:e6:43:7f:88:5e:22:91: 8a:a7:e6:d5:8e:83:f8:2c:67:5f:e7:18:17:3b:51: 78:c2:95:ed:1a:3d:85:31:1a:c9:fc:2b:f8:5c:f2: d9:92:12:58:1c:29:96:0c:e8:b2:50:b7:d2:c9:01: 71:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:47:5F:3D:EC:34:AB:7F:04:F4:5A:9B:D6:21:B4:3A:E2:9C:E4 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:89:8b:fa:7a:87:00:a4:f7:0f:1a:ce:25:53:7d:47:c7:1e: f3:0f:4d:ef:3f:df:7b:d5:be:66:a6:a4:8f:bb:79:93:00:e6: 45:26:88:5b:6c:e3:c7:92:d0:e0:83:f0:0c:e2:7f:8a:19:88: 08:70:f9:3f:eb:9d:38:91:91:c7:6a:83:50:5b:ea:90:7d:bd: fe:63:64:45:da:ba:58:26:3b:fc:b4:d7:47:ac:25:48:fd:c8: f1:c1:2f:20:15:5c:57:1a:c8:de:46:18:1a:ac:ec:7f:46:29: f3:02:9a:57:0e:f2:1f:42:ac:90:c7:98:30:55:5f:00:53:74: 50:9d:c2:c4:4a:9a:c6:ea:53:1a:53:66:67:f8:d9:3c:c2:b1: 14:dd:19:a1:76:48:6e:0d:d0:ef:a4:e9:e8:13:8f:6c:50:65: a4:de:5b:fd:9c:9f:f9:58:db:b3:e5:ff:1f:d4:9d:df:ab:45: 4e:aa:4c:3b:31:1a:cc:43:23:6a:97:f1:b0:92:ae:08:b8:ad: 70:92:36:8d:e5:86:c6:74:75:21:73:a8:4f:7b:7b:7c:f9:33: c6:54:a9:05:e6:7d:0f:08:c5:3c:d3:85:4c:55:de:b9:0c:ff: 36:ce:e6:f5:fb:ce:a9:ed:5a:1a:a9:ac:35:cc:ef:8a:02:23: e1:8b:af:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjUwNTMwMTgzNDU5WhcNMjUwNjA2MTgzNDU5WjAYMRYwFAYD VQQDEw02ODM5ZmE1My1kZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt//PRd8gIcl7BD3s7coBFX+omX7FbzBm8urzEaoenZOjyqtYHvVLbfarsR2v oWyh5PCwGrCCAwqO5OLZKEHxpjROZOk3sIEukYNrJrUrV1WtWGTjCX7jH/LG2XWc X4s0lMtJV0ENEBUFswvXo9bYuJjXcTX5xuOYrEfbFEq2kYgfkIzZByM5JLv4JZqU 0AeYloz5p/vMDlV+14+ZpFs+9KPrTXc7DBLsK/O5k30+7XWp9L5Iz3T84wZhl39l TVLvXad/9y/jar+iuOZDf4heIpGKp+bVjoP4LGdf5xgXO1F4wpXtGj2FMRrJ/Cv4 XPLZkhJYHCmWDOiyULfSyQFxcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+0R189 7DSrfwT0WpvWIbQ64pzkMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXiYv6eocApPcPGs4lU31Hxx7zD03vP9971b5mpqSPu3mTAOZFJohb bOPHktDgg/AM4n+KGYgIcPk/6504kZHHaoNQW+qQfb3+Y2RF2rpYJjv8tNdHrCVI /cjxwS8gFVxXGsjeRhgarOx/RinzAppXDvIfQqyQx5gwVV8AU3RQncLESprG6lMa U2Zn+Nk8wrEU3RmhdkhuDdDvpOnoE49sUGWk3lv9nJ/5WNuz5f8f1J3fq0VOqkw7 MRrMQyNql/Gwkq4IuK1wkjaN5YbGdHUhc6hPe3t8+TPGVKkF5n0PCMU804VMVd65 DP82zub1+86p7Voaqaw1zO+KAiPhi6+a -----END CERTIFICATE-----Generated at Sat May 31 17:42:43 2025 by rpki-client