$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft File: 1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json) Hash identifier: 59GfohtIoOwxzhYa4SHO+usnUaCjuqdvBRV5epRFm88= Subject key identifier: 4C:F8:4F:3B:5E:09:E9:55:34:FB:6C:B9:D9:7F:51:E8:3A:89:1B:52 Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft Manifest number: 03FA Signing time: Thu 15 May 2025 00:41:38 +0000 Manifest this update: Thu 15 May 2025 00:41:37 +0000 Manifest next update: Thu 22 May 2025 00:41:37 +0000 Files and hashes: 1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: lqBQ+j1piZRXH4lfJzI09xeipoMJxY2Uxsj/IsKmvg8=) 2: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: 85cGKhcFvfLsa3fKkS4OSkRQ0VqdCtjeFSWGED/065w=) 3: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: AFhkaTS9H9SYq32LCGLZ0ybHnkII09gZHj0VVB5f314=) 4: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=) 5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: 1tRgJ3aPzibyR+z50Gw9nZnYt8M73G+bJYsVfkg2zT8=) 6: F563D916248D11EF93237035C4F9AE02.roa (hash: B9+ujxo3UgWLMG+B0g5KGVMUgAJmIzvebILB++raaNc=) 7: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: K8HM6DIcOQOpn7mr5HRxJGQ+LZPGnSM+a9C5ehvgnkk=) 8: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 7nV+jajMliwqjNqYG+S6G7SOAx0aeStohPloUPjdM80=) 9: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: ML8bUrH07kWDsJzW00Kjv/Bk94cyav3h3f9sQ1/S5a0=) 10: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: 4TUF4fCsd6U4sl8CKjbb5lEPYX8IdLYlZccOBdKP5o0=) 11: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: 5jFOXz91ZZ50fpVnfRxRJl436xHddATVpaygKT2CLho=) 12: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: gOJa8cYlazWQ7UQ+EjuycM05p/sMIN86mUAHCGBMKow=) 13: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: zGN2nOJQWd9Hxkuu+Xvwm7K9HCh0xLUXhnRjE+idexs=) 14: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: BczitAlbCQvjk6wnUERPJgdefO0W2XIU7kagZ/uo8Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Validity Not Before: May 15 00:41:37 2025 GMT Not After : May 22 00:41:37 2025 GMT Subject: CN=68253841-3166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:30:e0:1a:3f:68:7d:f7:11:59:66:c3:68: 3b:c6:17:a8:97:3d:07:65:c0:e7:a4:cc:f7:a9:c7: 40:ff:28:67:88:0d:43:41:1f:ca:d2:bf:4d:e3:15: 04:e7:83:2d:20:d3:1e:36:4d:a8:92:1f:88:49:62: dd:59:5d:ca:66:62:63:f4:f3:83:bc:60:eb:af:b3: c8:63:f0:4b:5e:1e:bc:7a:1b:d8:91:91:01:28:38: d6:d9:f3:cd:8f:35:54:70:c4:53:01:36:ac:a0:21: 25:b6:8e:7a:91:ec:2b:32:74:00:c8:5a:91:a0:ed: 4b:04:e8:de:87:55:8e:56:bb:59:ab:ae:54:85:8a: f2:8b:34:27:9f:0a:40:ef:29:18:0a:31:fd:8e:16: d3:5a:7c:4e:eb:5d:cb:d9:9a:21:b1:a4:23:17:d1: 56:2f:8d:0b:2a:ce:44:ad:f6:54:09:90:b9:78:b7: 82:a9:9f:a5:10:4b:e5:13:d8:39:98:09:57:b2:7b: 04:e0:98:a5:8e:11:38:69:db:05:c1:b8:11:4d:77: 79:c7:8b:79:b5:51:dd:e1:31:57:31:d7:84:2c:a6: f9:f1:81:94:cf:32:c8:55:fc:83:c3:38:d3:18:a0: a5:f1:20:c5:4f:92:b9:c9:25:48:cd:ea:9c:50:80: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F8:4F:3B:5E:09:E9:55:34:FB:6C:B9:D9:7F:51:E8:3A:89:1B:52 X509v3 Authority Key Identifier: keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:65:87:f8:46:d6:01:a3:dd:c1:0d:de:88:44:86:ae:8c:8d: 4a:37:c8:cc:25:55:b4:57:06:91:2b:e0:87:84:21:4e:cb:5d: a0:21:d3:57:aa:34:4a:05:a7:06:b3:dc:f3:c6:d3:28:fd:37: 73:22:8f:37:53:87:9f:b8:10:c0:78:d8:a1:c5:e6:57:81:d3: b1:78:4b:20:db:d8:b3:b3:03:f2:eb:d9:e6:bd:b5:16:42:c6: da:61:61:15:65:55:ca:29:e0:a3:2b:7b:3c:ef:2c:48:c4:d2: dc:f5:0d:bd:08:83:47:b2:e0:33:c0:5a:c3:e7:c7:e5:5d:df: d5:26:1e:c4:4d:be:7c:c7:81:ad:24:ff:41:73:63:47:bf:36: 92:69:10:f0:6f:68:93:2c:15:ff:aa:03:5f:7d:e6:5f:4e:4e: 14:a9:8d:7a:6f:6e:a1:ea:6c:7b:fc:f8:e1:35:4c:50:91:eb: 38:3f:a0:3b:af:01:4b:3e:e6:8e:ca:fe:1d:d0:96:01:ea:7a: a7:b6:96:de:41:2d:1f:83:6f:ba:07:2b:9e:62:48:24:8d:f4: c2:55:dd:ec:9a:07:bd:03:76:24:21:42:46:8b:a9:f5:44:86: 3f:16:82:59:17:4f:25:7a:8f:e9:37:aa:4e:87:af:ff:95:73: 53:31:69:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF NjdCQTRCQTYwHhcNMjUwNTE1MDA0MTM3WhcNMjUwNTIyMDA0MTM3WjAYMRYwFAYD VQQDEw02ODI1Mzg0MS0zMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunIw4Bo/aH33EVlmw2g7xheolz0HZcDnpMz3qcdA/yhniA1DQR/K0r9N4xUE 54MtINMeNk2okh+ISWLdWV3KZmJj9PODvGDrr7PIY/BLXh68ehvYkZEBKDjW2fPN jzVUcMRTATasoCElto56kewrMnQAyFqRoO1LBOjeh1WOVrtZq65UhYryizQnnwpA 7ykYCjH9jhbTWnxO613L2ZohsaQjF9FWL40LKs5ErfZUCZC5eLeCqZ+lEEvlE9g5 mAlXsnsE4JiljhE4adsFwbgRTXd5x4t5tVHd4TFXMdeELKb58YGUzzLIVfyDwzjT GKCl8SDFT5K5ySVIzeqcUIB5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEz4Tzte CelVNPtsudl/Ueg6iRtSMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJDQS9FQzFFRTY1MjhBNTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxs ZjQ4SE95VVNVYXJtZTZTNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgZYf4RtYBo93BDd6IRIaujI1KN8jMJVW0VwaRK+CHhCFOy12gIdNX qjRKBacGs9zzxtMo/TdzIo83U4efuBDAeNihxeZXgdOxeEsg29izswPy69nmvbUW QsbaYWEVZVXKKeCjK3s87yxIxNLc9Q29CINHsuAzwFrD58flXd/VJh7ETb58x4Gt JP9Bc2NHvzaSaRDwb2iTLBX/qgNffeZfTk4UqY16b26h6mx7/PjhNUxQkes4P6A7 rwFLPuaOyv4d0JYB6nqntpbeQS0fg2+6ByueYkgkjfTCVd3smge9A3YkIUJGi6n1 RIY/FoJZF08leo/pN6pOh6//lXNTMWkG -----END CERTIFICATE-----Generated at Thu May 15 12:43:49 2025 by rpki-client