$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json) Hash identifier: TQBi8gTa+S9S8sRlJHXpS8EvUzwWXTMpWg90s7E32+I= Subject key identifier: 87:43:DA:2C:66:86:5B:C4:AA:A4:30:CD:49:25:A6:09:D3:09:AA:86 Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft Manifest number: 021B Signing time: Sat 07 Jun 2025 02:00:00 +0000 Manifest this update: Sat 07 Jun 2025 01:59:59 +0000 Manifest next update: Sat 14 Jun 2025 01:59:59 +0000 Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: jCg9WoEmcDptbB1KIQ54Iu7jG3LS8EjxOe/NWrWYJEM=) 2: 623705DA339111ED9249064BC4F9AE02.roa (hash: 3xXR0x6j8N4PVf2/cUiVsVNe4o0Qs5z+0StILd/4bVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Validity Not Before: Jun 7 01:59:59 2025 GMT Not After : Jun 14 01:59:59 2025 GMT Subject: CN=68439d1f-00b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5d:52:1c:88:70:39:b9:45:0c:96:34:f0:6d: 0d:ee:7e:f6:a9:eb:b6:33:0d:c1:1f:63:5e:d4:dc: 38:2c:10:f2:34:73:bf:09:04:51:75:83:c0:56:7c: d1:19:82:89:3d:54:cf:4f:48:aa:4a:f0:75:26:0a: 8a:1e:96:e0:44:1e:80:7a:9c:31:b9:f4:41:c0:76: ae:4d:17:6e:fa:60:2f:30:e1:45:a2:af:fa:1e:4d: 98:95:ba:2b:3e:ed:71:7e:a4:f8:65:3f:84:80:72: 19:ca:30:0e:ef:5e:3e:f3:23:fe:29:b5:2d:56:6a: 12:d9:4c:df:b5:95:4b:f3:bf:7f:b6:3a:ae:b7:aa: fa:3d:67:04:59:92:0c:c0:bd:a0:ba:30:c5:80:84: 41:a2:ff:6a:bc:92:8e:fc:40:ea:51:81:44:3f:24: 34:44:55:dd:c6:e7:87:2e:c3:de:7d:2a:7c:b2:96: 48:09:07:39:65:32:79:c2:85:5d:e0:46:9f:6e:a6: ad:74:1f:4b:b8:08:88:3a:fd:f8:29:93:31:87:15: f6:85:01:2b:5b:b7:9b:26:22:61:5a:e8:23:67:96: e5:98:e3:13:93:cd:1d:c8:d5:97:7f:c8:c4:fc:d3: ba:a4:3e:ed:59:5e:ad:e5:f5:f7:f4:e5:af:95:65: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:43:DA:2C:66:86:5B:C4:AA:A4:30:CD:49:25:A6:09:D3:09:AA:86 X509v3 Authority Key Identifier: keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:10:95:bf:31:0c:07:65:57:b5:cb:7b:0e:5d:a7:ea:cc:ac: c2:aa:7a:7b:40:bd:86:69:b2:af:fc:ba:13:19:d5:70:6b:31: 7a:bc:16:6e:18:82:48:15:78:b9:49:16:90:b9:58:26:4f:0d: f0:44:1d:c2:55:30:91:39:2a:de:e9:8f:79:85:74:70:de:18: 47:88:fb:23:8d:ab:84:5b:8b:24:a1:0c:86:34:41:d0:34:78: f0:65:f1:55:da:c5:28:0d:f8:0f:dd:15:5e:45:f2:26:a3:36: 6d:8b:a5:5b:ff:b5:2d:fb:98:b5:71:8c:b5:d9:29:24:64:d9: 5f:0c:28:3f:3e:76:e2:1a:00:ea:e9:df:66:1f:32:15:b8:b7: a5:47:49:fc:44:fc:ea:15:0d:3e:65:c5:14:f6:50:60:5f:e3: 05:34:6e:9e:75:f6:ae:8c:52:6d:fc:0d:e8:5f:9d:9d:19:fe: 61:75:06:58:4a:91:a4:f1:48:ba:7e:cb:1f:be:98:4c:38:9e: b2:03:4e:ee:19:ff:d7:06:83:45:91:66:46:e7:48:c1:19:c5: 9c:23:9f:3f:76:e2:c0:fd:b6:f0:c9:cb:7b:2a:36:3a:5b:02: 4b:77:83:6f:71:e1:9d:6e:5e:a1:bc:b1:ec:4f:67:94:9a:06: 06:3d:4a:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2 OTFEQzA2MTUwHhcNMjUwNjA3MDE1OTU5WhcNMjUwNjE0MDE1OTU5WjAYMRYwFAYD VQQDEw02ODQzOWQxZi0wMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA511SHIhwOblFDJY08G0N7n72qeu2Mw3BH2Ne1Nw4LBDyNHO/CQRRdYPAVnzR GYKJPVTPT0iqSvB1JgqKHpbgRB6AepwxufRBwHauTRdu+mAvMOFFoq/6Hk2Ylbor Pu1xfqT4ZT+EgHIZyjAO714+8yP+KbUtVmoS2UzftZVL879/tjqut6r6PWcEWZIM wL2gujDFgIRBov9qvJKO/EDqUYFEPyQ0RFXdxueHLsPefSp8spZICQc5ZTJ5woVd 4EafbqatdB9LuAiIOv34KZMxhxX2hQErW7ebJiJhWugjZ5blmOMTk80dyNWXf8jE /NO6pD7tWV6t5fX39OWvlWXF4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdD2ixm hlvEqqQwzUklpgnTCaqGMB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFNS9GNUUzNEU2NDMzOEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFP Ul9BYnlMOTRRN2RwSGNCaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHEJW/MQwHZVe1y3sOXafqzKzCqnp7QL2GabKv/LoTGdVwazF6vBZu GIJIFXi5SRaQuVgmTw3wRB3CVTCROSre6Y95hXRw3hhHiPsjjauEW4skoQyGNEHQ NHjwZfFV2sUoDfgP3RVeRfImozZti6Vb/7Ut+5i1cYy12SkkZNlfDCg/PnbiGgDq 6d9mHzIVuLelR0n8RPzqFQ0+ZcUU9lBgX+MFNG6edfaujFJt/A3oX52dGf5hdQZY SpGk8Ui6fssfvphMOJ6yA07uGf/XBoNFkWZG50jBGcWcI58/duLA/bbwyct7KjY6 WwJLd4NvceGdbl6hvLHsT2eUmgYGPUpF -----END CERTIFICATE-----Generated at Sat Jun 7 14:41:43 2025 by rpki-client