$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: W2d5B5XLKI79ubogq1BwSTh1AmHv7fJ/lfAq2NBBfB4= Subject key identifier: DA:10:8A:69:87:06:65:A1:4A:D5:EE:BB:1E:D6:42:C7:94:93:82:8E Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 0166 Signing time: Sat 31 May 2025 03:37:33 +0000 Manifest this update: Sat 31 May 2025 03:37:33 +0000 Manifest next update: Sat 07 Jun 2025 03:37:33 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: mzyfey19MidcTqAneuVWOHuNiPo0C/rg0jHiJBozCDk=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: rH0gRhN/HJ8HJHVTL+JV1bpQN/J5hF8E0YYPa3z7lJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: May 31 03:37:33 2025 GMT Not After : Jun 7 03:37:33 2025 GMT Subject: CN=683a797d-4f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:ec:02:fb:36:06:d9:e3:c4:34:fc:c1:e6: 29:77:10:e3:ca:33:f3:ea:6a:ba:91:a9:c3:1b:c3: b6:f4:67:b0:56:99:72:42:47:22:df:be:6d:2d:27: db:54:9f:2b:a3:c9:86:9b:54:06:b3:2d:94:29:68: a1:23:cd:b8:58:f4:71:72:06:07:2a:95:db:12:e7: 16:30:e8:b3:11:7c:79:73:7b:dd:0f:ad:39:4c:a7: 85:14:5f:b1:53:3b:cf:de:09:b6:47:8b:a3:44:b7: 61:27:d6:82:95:93:81:95:7e:ae:3d:82:d0:33:fb: 06:00:0d:c0:73:2e:ee:81:dd:5d:a3:ce:82:e6:89: 46:22:d4:77:a6:04:c5:a4:bf:ec:0b:25:f5:00:c7: b4:a4:d0:27:80:ff:41:4e:8a:62:06:b9:09:a9:46: c1:7b:c0:9c:a1:c3:ac:dc:82:32:90:d1:6e:aa:79: 74:c7:26:5c:14:fc:0b:48:46:94:f0:bd:5f:fc:e8: 70:a8:a6:c2:de:3a:4f:2e:68:98:51:3a:c2:73:52: 43:3f:b6:0e:3d:fa:c6:ff:db:25:21:d9:21:fa:3f: 88:ad:0a:62:47:1d:46:e6:58:8a:b7:11:c1:f0:f9: 7b:3b:07:09:98:35:b3:32:ce:2e:e5:6e:48:3b:0e: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:10:8A:69:87:06:65:A1:4A:D5:EE:BB:1E:D6:42:C7:94:93:82:8E X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f3:a1:62:25:f2:15:04:70:0a:2a:a2:cd:f5:31:4a:7b:f7: 5e:da:6b:df:bf:18:5e:9c:da:e9:b3:82:d7:41:6c:38:69:4f: fb:ff:46:35:fb:f2:74:b2:88:b1:b4:62:74:1d:41:55:f6:25: d6:c0:4b:70:0c:07:37:0b:6f:1b:68:af:e3:aa:f2:b0:a7:84: eb:cf:ee:2a:7a:79:46:2e:04:f5:40:07:e2:7b:b1:0d:fa:54: 15:87:67:83:b9:98:f9:15:76:60:7c:86:93:d2:d7:28:ad:3b: 10:73:2f:a9:ef:68:20:58:2b:f4:64:e6:0b:11:cf:b9:53:29: cf:15:da:c4:cd:8f:b1:7f:65:5f:09:a3:af:13:44:b7:ab:55: ef:d8:ee:49:f0:67:ff:70:ba:fb:87:ee:2d:3d:15:b8:5c:2c: 7a:7c:5d:d2:20:85:52:1e:3e:2a:7e:31:b3:9a:3d:3e:c9:e2: f2:cd:e1:a4:de:ea:bc:dd:df:ef:62:95:59:66:93:42:bc:9c: 80:65:53:f6:3e:7f:ce:86:f4:8c:5f:c4:5b:63:6c:cc:e3:c1: 1f:1a:09:6b:13:74:b4:a5:cc:a8:c0:aa:ef:7b:3b:1e:eb:04: b1:aa:81:03:17:9e:ae:fb:15:de:c4:06:a2:7b:84:86:18:e3: 21:09:5b:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjUwNTMxMDMzNzMzWhcNMjUwNjA3MDMzNzMzWjAYMRYwFAYD VQQDEw02ODNhNzk3ZC00ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/PsAvs2BtnjxDT8weYpdxDjyjPz6mq6kanDG8O29GewVplyQkci375tLSfb VJ8ro8mGm1QGsy2UKWihI824WPRxcgYHKpXbEucWMOizEXx5c3vdD605TKeFFF+x UzvP3gm2R4ujRLdhJ9aClZOBlX6uPYLQM/sGAA3Acy7ugd1do86C5olGItR3pgTF pL/sCyX1AMe0pNAngP9BTopiBrkJqUbBe8CcocOs3IIykNFuqnl0xyZcFPwLSEaU 8L1f/OhwqKbC3jpPLmiYUTrCc1JDP7YOPfrG/9slIdkh+j+IrQpiRx1G5liKtxHB 8Pl7OwcJmDWzMs4u5W5IOw4G4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoQimmH BmWhStXuux7WQseUk4KOMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB86FiJfIVBHAKKqLN9TFKe/de2mvfvxhenNrps4LXQWw4aU/7/0Y1 +/J0soixtGJ0HUFV9iXWwEtwDAc3C28baK/jqvKwp4Trz+4qenlGLgT1QAfie7EN +lQVh2eDuZj5FXZgfIaT0tcorTsQcy+p72ggWCv0ZOYLEc+5UynPFdrEzY+xf2Vf CaOvE0S3q1Xv2O5J8Gf/cLr7h+4tPRW4XCx6fF3SIIVSHj4qfjGzmj0+yeLyzeGk 3uq83d/vYpVZZpNCvJyAZVP2Pn/OhvSMX8RbY2zM48EfGglrE3S0pcyowKrvezse 6wSxqoEDF56u+xXexAaie4SGGOMhCVtt -----END CERTIFICATE-----Generated at Sat May 31 16:35:58 2025 by rpki-client