$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json) Hash identifier: EiQp/YAFTrATMUtjMG1lldKSNspU7/HacinlXxoMYCI= Subject key identifier: 29:3C:7E:A8:C3:B4:71:D7:42:05:2D:2A:E7:3F:CF:E9:97:B0:EC:2F Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft Manifest number: 42 Signing time: Tue 13 May 2025 06:42:48 +0000 Manifest this update: Tue 13 May 2025 06:42:47 +0000 Manifest next update: Tue 20 May 2025 06:42:47 +0000 Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: X6aR/UEo84akkqMg8n/sc2Mrfej09ybDLyaHI3hopiw=) 2: 5EDC5882D3BB11EF80C3AF80C4F9AE02.roa (hash: PJbzNrEkpbuhikAan3mFGxS/ZJai+blTb1hTbzhhLXc=) 3: 5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa (hash: QSPivy5RJK48HHT2SlrvrCH9DPiTCFPajDEwNKBnEww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: May 13 06:42:47 2025 GMT Not After : May 20 06:42:47 2025 GMT Subject: CN=6822e9e8-ce30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:a0:a6:a3:fe:ef:bf:54:9b:66:97:d8:1d: 25:a7:1c:93:f3:6f:c4:72:6b:fb:6e:b8:84:0d:e3: 95:03:e0:92:55:d9:51:66:3d:af:19:2b:9c:e4:18: 3a:49:33:61:d4:c6:2b:9b:e0:4d:33:90:17:39:4f: 37:ea:4c:5d:47:4c:3d:0b:49:d3:32:0b:db:4f:0c: 48:57:41:7f:5b:19:df:9a:b3:fc:1d:22:82:65:96: 63:49:1e:a6:80:58:9a:17:9a:e4:a0:cc:db:b4:15: fb:da:fe:74:f0:56:14:9e:0e:43:1c:23:a7:e0:98: 95:08:6d:b5:5b:35:1c:7a:92:2a:65:02:26:d4:a8: 76:48:f6:85:bc:9c:cd:83:8f:50:2a:1e:c6:d5:7b: 01:85:e2:01:1b:76:4b:e6:c2:c6:0b:d4:c1:d9:2a: 30:12:f0:f7:de:e6:b9:6e:91:9c:5e:d4:04:25:25: 9f:d4:61:58:8a:75:7f:60:0b:dd:14:92:c7:c6:ff: 42:cb:ff:f5:c4:6c:fa:8b:e4:4c:b7:d1:b7:a7:fd: 10:1d:2b:ea:11:09:1f:0c:51:93:72:91:d7:15:ba: 73:7e:36:7d:2d:c4:49:7f:12:29:02:54:6f:c2:79: f1:cb:91:7d:ac:c5:a5:2c:16:f4:cb:db:34:0a:0c: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3C:7E:A8:C3:B4:71:D7:42:05:2D:2A:E7:3F:CF:E9:97:B0:EC:2F X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:9a:fb:3c:c6:22:41:41:39:d4:2a:ce:58:aa:3f:60:8f:13: ed:f9:62:57:ff:af:0b:41:f3:9a:15:02:4a:18:53:f0:c8:4f: d6:54:27:ec:9a:e1:6f:23:e3:a3:4c:0b:73:a7:c3:b4:27:bf: 8d:f5:44:27:93:15:b6:38:5b:68:d1:9f:e6:3c:f7:5f:0b:5f: de:57:a7:42:88:20:40:93:ec:e1:6e:cf:82:50:f5:1c:1e:af: 49:7b:ac:49:96:93:b5:f7:22:8f:0b:a7:f0:d8:ae:57:b2:73: 7a:e7:c0:42:5d:83:8d:6f:28:8f:47:9b:22:f7:e2:b5:fd:1b: 57:c2:26:16:8e:a3:a8:06:c6:cf:5e:4c:9f:82:ce:64:fb:c1: 4b:d7:5b:d4:6f:b3:b6:38:af:10:d7:81:6d:77:7f:25:36:31: 63:89:46:c8:ed:b7:7d:ce:b6:32:9d:e2:b7:f0:00:ca:d4:1e: d1:2b:21:a2:be:c9:95:c8:8f:50:c6:38:df:26:5b:17:89:74: fd:0c:b6:1e:5f:d1:9c:cc:ea:fc:6a:ad:a8:d2:f8:e7:c2:a2: db:c2:e8:1d:af:81:6f:61:28:02:ac:36:9c:4c:5d:c7:1d:d8: 55:37:3d:4d:70:7d:b7:08:5f:b9:16:02:21:87:2c:5c:24:2d: 15:ab:d8:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0VFQjExMC8GA1UEBRMoREVGMzMxN0NCRDE0RDdEQkFBMjdCRkZFM0ZFNUE3QjhB NkVEQ0ZCOTAeFw0yNTA1MTMwNjQyNDdaFw0yNTA1MjAwNjQyNDdaMBgxFjAUBgNV BAMTDTY4MjJlOWU4LWNlMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDauKCmo/7vv1SbZpfYHSWnHJPzb8Rya/tuuIQN45UD4JJV2VFmPa8ZK5zkGDpJ M2HUxiub4E0zkBc5TzfqTF1HTD0LSdMyC9tPDEhXQX9bGd+as/wdIoJllmNJHqaA WJoXmuSgzNu0Ffva/nTwVhSeDkMcI6fgmJUIbbVbNRx6kiplAibUqHZI9oW8nM2D j1AqHsbVewGF4gEbdkvmwsYL1MHZKjAS8Pfe5rlukZxe1AQlJZ/UYViKdX9gC90U ksfG/0LL//XEbPqL5Ey30ben/RAdK+oRCR8MUZNykdcVunN+Nn0txEl/EikCVG/C efHLkX2sxaUsFvTL2zQKDA7PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKTx+qMO0 cddCBS0q5z/P6Zew7C8wHwYDVR0jBBgwFoAU3vMxfL0U19uqJ7/+P+WnuKbtz7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RUVCL0Y1N0M5NEIwRDNC QTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3ZNeGZMMFUxOXVxSjdfLVAtV251S2J0ejdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RUVCL0Y1N0M5NEIwRDNCQTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1 cUo3Xy1QLVdudUtidHo3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKWa+zzGIkFBOdQqzliqP2CPE+35Ylf/rwtB85oVAkoYU/DIT9ZUJ+ya 4W8j46NMC3Onw7Qnv431RCeTFbY4W2jRn+Y8918LX95Xp0KIIECT7OFuz4JQ9Rwe r0l7rEmWk7X3Io8Lp/DYrleyc3rnwEJdg41vKI9HmyL34rX9G1fCJhaOo6gGxs9e TJ+CzmT7wUvXW9Rvs7Y4rxDXgW13fyU2MWOJRsjtt33OtjKd4rfwAMrUHtErIaK+ yZXIj1DGON8mWxeJdP0Mth5f0ZzM6vxqrajS+OfCotvC6B2vgW9hKAKsNpxMXccd 2FU3PU1wfbcIX7kWAiGHLFwkLRWr2Jw= -----END CERTIFICATE-----Generated at Wed May 14 22:57:13 2025 by rpki-client