$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: 2c5LZjSHil22dC9Bj50EoWvpr0N1UD0+ooDPYkggj74= Subject key identifier: D7:8B:A2:B6:D5:6E:F6:13:83:7C:9D:BB:D7:6F:DE:6B:09:D0:7A:8F Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 03FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 03FB Signing time: Sat 31 May 2025 00:38:45 +0000 Manifest this update: Sat 31 May 2025 00:38:44 +0000 Manifest next update: Sat 07 Jun 2025 00:38:44 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: vJPEftQfMzP1cp56NEm8aLg/zG/K5q3DwQ+lZmvljMQ=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2+LI0FBQeI2/dX1G7Td9+baIQ/+USHCLEosOYsTW+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1020 (0x3fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: May 31 00:38:44 2025 GMT Not After : Jun 7 00:38:44 2025 GMT Subject: CN=683a4f94-efe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:1d:cb:45:8c:8f:08:ba:69:52:11:b4:69: 9f:4d:11:c5:78:b5:6f:93:cf:53:c1:22:0c:cc:49: 36:ff:69:52:bc:03:da:72:a4:e7:2f:47:6b:c3:fb: 6d:ec:91:03:38:f4:b6:74:6f:55:e6:a9:61:5a:97: 63:c3:e7:af:4f:0c:46:fc:c3:c6:90:02:4f:be:d9: d0:ac:71:1d:77:7a:66:a0:61:ff:ad:8f:d3:cb:a7: 92:c7:d3:99:d0:84:79:4f:d5:ad:cc:61:9c:e7:3e: 0a:a6:f6:91:84:5b:6a:d2:c2:fd:2a:3a:0b:8e:a6: a2:36:6e:82:cd:55:a9:ca:78:ee:db:30:c3:a4:1d: 35:e7:bb:7b:77:2b:5b:96:23:64:77:d4:a6:0b:9e: 99:18:70:d5:6a:89:d1:61:31:da:1a:e3:ae:ac:82: 11:b3:50:31:2d:6b:6e:3d:0d:40:ec:85:0c:b9:56: c9:4d:f0:6a:87:6d:ca:05:9b:b8:d7:56:ba:00:d1: db:b8:25:21:8d:5d:d5:9d:e8:b1:39:7c:46:44:a3: 80:60:b8:96:dc:32:69:c5:f1:8d:58:f4:77:59:76: 7d:6e:e3:07:a6:ca:95:94:11:93:69:1c:28:a6:1f: 90:fd:d1:f8:1a:c1:a1:aa:f7:cb:dc:af:d0:11:59: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8B:A2:B6:D5:6E:F6:13:83:7C:9D:BB:D7:6F:DE:6B:09:D0:7A:8F X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:7a:5d:5f:41:f1:26:b8:07:76:d7:5f:9c:8e:8f:0c:11:1e: f8:17:26:57:4e:5f:2f:2e:1e:15:80:af:a1:59:38:89:7d:b4: 41:52:29:d7:70:da:6d:a4:37:1a:6c:a9:31:e7:1c:b6:5c:8c: f4:85:89:94:13:b2:8b:8a:26:9c:b9:32:d2:10:27:79:ba:15: 7e:d9:cf:0c:82:d9:a6:f0:7d:d6:fb:65:6c:85:8b:e6:9a:fd: 24:24:4f:72:e6:c1:b3:f9:f3:d9:9d:ac:3d:58:f1:00:2d:4a: 0f:bc:96:30:5e:cd:1d:8d:d0:65:44:1b:d7:e7:f0:50:ab:8a: 91:d0:15:d0:1d:e4:41:52:8c:01:26:ac:8b:f4:66:ae:6e:c2: 77:9b:6e:00:69:ad:2d:27:fc:57:45:36:0a:6c:94:0a:9b:96: c7:d7:ba:79:a7:44:ad:c8:a7:ed:4e:43:f5:73:0a:68:50:07: ab:28:0d:22:6d:c2:60:ae:e2:1e:d4:64:9c:8a:93:2d:7b:31: a9:9a:7e:3d:6e:bf:7f:86:6b:88:b2:1c:b9:68:77:db:b2:e2: be:d5:81:20:06:ef:56:9a:b1:06:76:5c:8a:16:92:b4:30:fe: e2:65:d0:90:91:f7:ea:53:d6:ea:db:c0:07:b8:35:b1:52:c4: ec:51:b8:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjUwNTMxMDAzODQ0WhcNMjUwNjA3MDAzODQ0WjAYMRYwFAYD VQQDEw02ODNhNGY5NC1lZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+gdy0WMjwi6aVIRtGmfTRHFeLVvk89TwSIMzEk2/2lSvAPacqTnL0drw/tt 7JEDOPS2dG9V5qlhWpdjw+evTwxG/MPGkAJPvtnQrHEdd3pmoGH/rY/Ty6eSx9OZ 0IR5T9WtzGGc5z4KpvaRhFtq0sL9KjoLjqaiNm6CzVWpynju2zDDpB0157t7dytb liNkd9SmC56ZGHDVaonRYTHaGuOurIIRs1AxLWtuPQ1A7IUMuVbJTfBqh23KBZu4 11a6ANHbuCUhjV3VneixOXxGRKOAYLiW3DJpxfGNWPR3WXZ9buMHpsqVlBGTaRwo ph+Q/dH4GsGhqvfL3K/QEVkIOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeLorbV bvYTg3ydu9dv3msJ0HqPMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTel1fQfEmuAd211+cjo8MER74FyZXTl8vLh4VgK+hWTiJfbRBUinX cNptpDcabKkx5xy2XIz0hYmUE7KLiiacuTLSECd5uhV+2c8Mgtmm8H3W+2VshYvm mv0kJE9y5sGz+fPZnaw9WPEALUoPvJYwXs0djdBlRBvX5/BQq4qR0BXQHeRBUowB JqyL9GaubsJ3m24Aaa0tJ/xXRTYKbJQKm5bH17p5p0StyKftTkP1cwpoUAerKA0i bcJgruIe1GScipMtezGpmn49br9/hmuIshy5aHfbsuK+1YEgBu9WmrEGdlyKFpK0 MP7iZdCQkffqU9bq28AHuDWxUsTsUbg1 -----END CERTIFICATE-----Generated at Sat May 31 17:46:30 2025 by rpki-client