$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: YM5HRx7sBAi9ktS3IVISkEss23vh0LWv9E0dDiEtEvo= Subject key identifier: 8F:16:87:09:84:3D:42:3A:DA:43:64:CB:2F:D2:D1:DC:A7:1F:CF:5E Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0BE4 Signing time: Fri 16 May 2025 19:01:13 +0000 Manifest this update: Fri 16 May 2025 19:01:12 +0000 Manifest next update: Fri 23 May 2025 19:01:12 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: yZRLpJiMrkxECy8tKNt6/CtImzmvNozLXMPmgp4UOcE=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: QTmQ+b0TWigH3ktAvPS5L4JGC6TmpCstJJc/am/VnB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: May 16 19:01:12 2025 GMT Not After : May 23 19:01:12 2025 GMT Subject: CN=68278b78-0dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:e2:71:73:b2:f2:1e:cb:cd:66:15:31:cf: b1:55:aa:91:85:91:96:f5:67:b6:72:d9:2a:0f:73: 0b:89:00:ab:e9:b8:d9:8c:6f:d4:77:c6:84:18:37: 2c:bb:b1:e7:5e:0b:0f:07:86:29:bc:aa:6a:7e:39: 55:f5:b3:0c:67:61:94:20:80:a6:22:7c:13:46:bb: 2f:c4:46:38:bc:ea:f4:7a:7c:d6:97:e6:8a:45:a8: 64:7b:ba:bb:fe:5d:69:ee:f7:c8:52:b7:31:2d:08: d7:84:bd:1c:94:9c:de:9f:8f:cf:c1:f9:03:53:ad: 08:f9:f4:e4:c7:da:86:2f:38:23:0e:1a:19:81:e0: 61:4d:79:f6:5c:0e:0f:69:9f:9e:04:8c:4d:4c:8c: e0:bd:fe:5b:c5:80:a8:52:ec:b5:0c:11:51:e8:60: 37:85:b4:d6:20:14:88:aa:e1:ea:eb:b3:9a:4a:8a: 82:89:66:5e:4c:12:ce:7c:77:d7:87:ba:70:ba:23: 7b:bf:6c:97:bb:3f:f4:d8:ae:67:78:f3:6a:31:fd: c0:35:40:8c:d4:e8:a0:53:8a:8f:19:41:98:12:5a: d2:d7:f5:11:17:8c:40:6a:56:7c:3b:b2:e7:c3:a7: 4d:68:5d:0a:66:bc:f9:00:f2:c4:f5:d0:a6:20:3b: 2a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:16:87:09:84:3D:42:3A:DA:43:64:CB:2F:D2:D1:DC:A7:1F:CF:5E X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3e:13:f6:e4:9c:fb:43:aa:3b:d1:6f:ab:28:40:f6:50:ea: 44:e0:8b:a1:08:e3:24:74:f9:a5:15:52:51:23:74:3b:86:96: 74:f1:16:c3:b1:93:35:a3:61:b3:18:c7:9c:f1:99:cf:a3:b7: 7a:c1:33:a8:d1:e7:14:43:4a:f0:31:af:aa:c6:a2:e6:8b:9b: cc:1f:f0:0f:a9:3a:28:71:c7:5f:66:2b:7e:5c:e5:26:ad:fa: 26:f8:bd:5e:e4:30:0f:92:8e:f6:da:98:d2:68:19:e4:36:ee: c3:80:bb:81:aa:6f:21:92:21:99:68:18:d6:a0:a1:2b:bd:c8: 61:5f:fd:00:2a:f1:36:8e:33:be:21:9f:1c:e9:e8:8a:99:22: e7:6c:ef:78:df:18:ad:c9:4e:7c:e2:84:ac:5f:ea:b5:ba:65: 7e:4b:71:a6:d2:fd:0c:2a:a8:09:13:42:96:52:c5:a5:49:3b: 90:60:e8:25:55:8e:f8:da:34:91:1c:5a:ec:34:2d:f1:22:d7: 05:48:ac:be:2e:7d:63:30:48:c5:04:67:8e:6c:00:8f:8a:2a: 72:ef:b9:b0:bb:6c:9d:a8:60:32:b3:41:60:ef:89:e0:43:f2: 64:1a:21:8e:87:c2:35:5c:59:26:2e:9b:14:4a:f3:08:1c:73: 9d:da:cd:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjUwNTE2MTkwMTEyWhcNMjUwNTIzMTkwMTEyWjAYMRYwFAYD VQQDEw02ODI3OGI3OC0wZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbnicXOy8h7LzWYVMc+xVaqRhZGW9We2ctkqD3MLiQCr6bjZjG/Ud8aEGDcs u7HnXgsPB4YpvKpqfjlV9bMMZ2GUIICmInwTRrsvxEY4vOr0enzWl+aKRahke7q7 /l1p7vfIUrcxLQjXhL0clJzen4/PwfkDU60I+fTkx9qGLzgjDhoZgeBhTXn2XA4P aZ+eBIxNTIzgvf5bxYCoUuy1DBFR6GA3hbTWIBSIquHq67OaSoqCiWZeTBLOfHfX h7pwuiN7v2yXuz/02K5nePNqMf3ANUCM1OigU4qPGUGYElrS1/URF4xAalZ8O7Ln w6dNaF0KZrz5APLE9dCmIDsqlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8WhwmE PUI62kNkyy/S0dynH89eMB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKPhP25Jz7Q6o70W+rKED2UOpE4IuhCOMkdPmlFVJRI3Q7hpZ08RbD sZM1o2GzGMec8ZnPo7d6wTOo0ecUQ0rwMa+qxqLmi5vMH/APqTooccdfZit+XOUm rfom+L1e5DAPko722pjSaBnkNu7DgLuBqm8hkiGZaBjWoKErvchhX/0AKvE2jjO+ IZ8c6eiKmSLnbO943xityU584oSsX+q1umV+S3Gm0v0MKqgJE0KWUsWlSTuQYOgl VY742jSRHFrsNC3xItcFSKy+Ln1jMEjFBGeObACPiipy77mwu2ydqGAys0Fg74ng Q/JkGiGOh8I1XFkmLpsUSvMIHHOd2s2a -----END CERTIFICATE-----Generated at Sat May 17 02:06:27 2025 by rpki-client