$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: rFw+5WtYfoaowN+XCC4UeOZbXmQbkZli0yV2tXj7jR0= Subject key identifier: 8A:AC:95:B7:95:19:FD:CA:51:D2:7C:F0:0E:9B:FD:14:CF:E9:DF:77 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1BC6 Signing time: Wed 14 May 2025 16:18:47 +0000 Manifest this update: Wed 14 May 2025 16:18:46 +0000 Manifest next update: Wed 21 May 2025 16:18:46 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: R81S21coui5FnuZTXXHjcDP7mOtoE403YeKfKOq1yco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7110 (0x1bc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: May 14 16:18:46 2025 GMT Not After : May 21 16:18:46 2025 GMT Subject: CN=6824c266-918d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:99:7c:c5:f2:c0:5c:e0:15:a1:1e:49:37: e0:17:e7:fe:cb:01:2f:c1:f9:30:9b:19:11:16:9f: 5e:1e:67:83:2d:86:4f:8a:d3:3c:f6:d9:c3:e1:7f: ec:2d:06:59:7b:db:10:ce:ee:a2:ee:6e:96:ea:0e: 07:b0:f8:a9:5d:46:7f:95:3c:b3:ba:c7:50:28:83: 10:70:11:71:92:cc:36:66:3a:b9:09:f9:6f:73:34: c8:06:6c:f6:14:38:60:c2:46:e5:0d:73:79:6d:37: 5e:74:c1:b0:41:66:03:37:00:b8:71:81:8b:c3:f9: a9:bf:04:ff:65:fd:aa:ae:13:26:2b:18:10:6f:1f: f1:1f:52:72:2d:7e:68:04:7e:9a:b9:b6:4d:7a:7f: c2:c0:b9:8b:d3:73:49:f1:48:ed:bb:54:5f:7f:d6: b5:0c:61:b5:20:e7:8a:62:de:bc:73:f7:5a:47:a0: 8f:2c:37:45:45:4d:45:ba:72:27:81:7c:dc:c8:8a: f9:68:48:e1:c4:28:4a:2c:eb:7e:05:96:ef:94:37: 43:e7:c6:5a:a4:6f:42:f9:98:bb:ee:b6:5f:e4:30: c5:40:d4:86:b4:3b:b4:e9:bc:09:2c:7f:45:94:62: 61:ac:23:ee:9b:74:89:4a:e1:8b:07:16:d3:48:3d: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:95:B7:95:19:FD:CA:51:D2:7C:F0:0E:9B:FD:14:CF:E9:DF:77 X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:97:9d:42:a5:24:03:e2:ca:18:62:20:f9:f1:a0:5e:a4:74: 21:c4:59:9d:d8:29:56:a9:80:7e:17:88:74:5d:70:23:4e:e8: c3:f0:e6:1b:75:f4:a2:27:5f:3e:f2:02:15:39:df:f4:8a:a5: 58:ee:5d:5b:11:c3:92:a4:08:2d:97:6b:b4:6b:eb:98:ec:ce: 17:05:12:78:aa:a6:3f:50:00:50:26:ae:ce:2c:de:ce:67:84: 7a:23:ee:c6:11:cd:65:c3:61:8c:22:34:62:4f:52:6e:1c:61: a5:59:72:00:3e:e3:ab:d0:98:1c:bd:5b:e3:2f:db:4f:a3:e2: bb:ec:f6:ed:36:e2:5a:49:bd:94:46:7c:35:30:96:99:e9:2e: f2:af:9c:f3:9b:04:06:2c:e5:3a:80:61:3b:f0:b2:ee:db:a9: dd:14:51:e0:fd:9c:67:9e:6e:02:eb:27:8a:b9:1b:fc:a8:02: 40:04:3a:1e:80:51:72:bb:86:7a:0a:f5:6b:93:77:da:6c:92: 9a:43:cd:3f:d0:b5:47:b2:f1:4d:62:1a:c1:dc:60:cf:fc:3c: b6:0a:85:34:19:b6:40:27:51:37:93:cb:2d:93:9a:36:7c:04: b1:0d:34:36:7a:6d:d3:b6:3c:dd:82:2e:4f:52:67:23:7e:cc: f6:4c:bb:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUwNTE0MTYxODQ2WhcNMjUwNTIxMTYxODQ2WjAYMRYwFAYD VQQDEw02ODI0YzI2Ni05MThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KGZfMXywFzgFaEeSTfgF+f+ywEvwfkwmxkRFp9eHmeDLYZPitM89tnD4X/s LQZZe9sQzu6i7m6W6g4HsPipXUZ/lTyzusdQKIMQcBFxksw2Zjq5CflvczTIBmz2 FDhgwkblDXN5bTdedMGwQWYDNwC4cYGLw/mpvwT/Zf2qrhMmKxgQbx/xH1JyLX5o BH6aubZNen/CwLmL03NJ8Ujtu1Rff9a1DGG1IOeKYt68c/daR6CPLDdFRU1FunIn gXzcyIr5aEjhxChKLOt+BZbvlDdD58ZapG9C+Zi77rZf5DDFQNSGtDu06bwJLH9F lGJhrCPum3SJSuGLBxbTSD1HkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqslbeV Gf3KUdJ88A6b/RTP6d93MB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAl51CpSQD4soYYiD58aBepHQhxFmd2ClWqYB+F4h0XXAjTujD8OYb dfSiJ18+8gIVOd/0iqVY7l1bEcOSpAgtl2u0a+uY7M4XBRJ4qqY/UABQJq7OLN7O Z4R6I+7GEc1lw2GMIjRiT1JuHGGlWXIAPuOr0JgcvVvjL9tPo+K77PbtNuJaSb2U Rnw1MJaZ6S7yr5zzmwQGLOU6gGE78LLu26ndFFHg/Zxnnm4C6yeKuRv8qAJABDoe gFFyu4Z6CvVrk3fabJKaQ80/0LVHsvFNYhrB3GDP/Dy2CoU0GbZAJ1E3k8stk5o2 fASxDTQ2em3Ttjzdgi5PUmcjfsz2TLs6 -----END CERTIFICATE-----Generated at Thu May 15 12:19:02 2025 by rpki-client