$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json) Hash identifier: hAaz4bD6ni9bV5IyT2hsbFxpWSXSdYr5fFysHtfvSRs= Subject key identifier: A3:E6:06:17:7A:79:A3:D4:0B:60:C4:E8:71:FB:3F:81:CD:59:58:55 Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft Manifest number: 07DF Signing time: Mon 12 May 2025 20:50:57 +0000 Manifest this update: Mon 12 May 2025 20:50:57 +0000 Manifest next update: Mon 19 May 2025 20:50:57 +0000 Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: 0sYGZOEkMDSOxbLTKJPt49HCcSI/2VcRjOLA/lXZ638=) 2: 187415DE3E6F11EEA236AD17C4F9AE02.roa (hash: oCp4PWI4KP913wPG7fBsv0AeBkh1JffMER8sLvsvQsc=) 3: 39DE80CE3E6F11EEA7233D2CC4F9AE02.roa (hash: 47zwqpP9eAhOCqvzUy9fMqxxS+0iNoZWW8K5tbmry+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Validity Not Before: May 12 20:50:57 2025 GMT Not After : May 19 20:50:57 2025 GMT Subject: CN=68225f31-7f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:82:42:18:9a:c3:38:13:5e:8e:ed:4c:0c: 98:57:f5:bf:eb:9d:65:ad:ea:1c:95:f6:70:60:59: 43:dc:e6:79:7b:15:e4:96:24:33:5b:45:52:3a:d7: c8:5c:c7:f5:63:91:3c:a5:f3:3e:53:cc:1c:d2:8f: 3b:8e:e0:c9:bb:71:9a:cf:56:10:13:0d:08:6b:0a: ef:7b:b8:6b:56:09:eb:e3:b9:77:77:9a:1e:30:aa: 84:0f:1f:20:52:6a:73:3c:7e:f1:ba:51:b7:fb:bf: e5:5f:9a:9f:4f:84:45:3c:fb:62:97:48:17:04:b6: 0c:b5:cd:a7:99:a8:6e:e6:5d:d6:a2:35:46:95:60: b3:bc:d7:54:1e:e8:e8:82:d3:31:3a:02:70:6d:23: 2d:d3:82:e0:08:91:02:ea:5e:e1:c2:2f:f9:95:68: f4:fb:e8:d0:ae:0b:36:d9:3e:9f:83:8e:fc:dc:fc: c9:a1:c9:93:a9:95:f2:e6:48:d2:28:b3:d6:4c:16: a9:e6:70:c8:38:63:45:df:43:1d:92:62:14:15:5c: 32:81:be:77:d5:2b:a2:bf:26:2c:ff:37:30:cf:52: ad:01:63:3d:5d:ae:2a:f0:e7:98:eb:51:cc:72:95: 20:0d:1b:f3:1e:06:55:82:c2:06:a3:00:93:33:fd: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E6:06:17:7A:79:A3:D4:0B:60:C4:E8:71:FB:3F:81:CD:59:58:55 X509v3 Authority Key Identifier: keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:80:de:0e:5f:b7:7c:f6:dc:87:9b:6b:18:78:e3:07:67:91: 0a:5f:15:16:7b:52:34:5c:30:1d:98:50:61:62:f5:65:6b:22: 5a:03:16:03:f2:ba:ff:1f:ae:95:5f:34:7b:30:58:ab:0e:93: 8b:27:e2:6a:b8:03:fa:d8:fb:30:0c:af:c3:d6:3b:03:45:3a: 3d:1f:b6:e2:7a:3c:cd:a3:1a:7b:87:42:85:91:e7:43:20:5e: f3:ee:fe:af:20:f4:c4:b9:d2:4c:f9:7a:09:ad:60:c7:22:56: 6c:55:9d:c3:c6:00:36:46:b8:62:db:4e:f0:64:c0:dc:3d:47: ea:e3:83:52:ba:51:f5:db:89:d4:6c:46:1d:fe:a4:9c:91:25: 23:31:07:81:0b:89:f7:aa:9d:7e:55:23:00:68:b0:82:d5:ff: 2b:e2:5b:ee:89:c4:a4:d5:f3:d5:db:e7:d6:48:e3:c9:0a:38: f3:c1:f7:81:7c:72:a3:38:15:31:bb:dd:9b:59:c7:4d:ce:bf: a2:40:c2:0c:41:39:62:dd:75:9b:2f:78:fa:0a:a4:f2:93:19: 0c:a8:15:e1:94:85:76:b7:40:b6:a1:4e:76:0a:b4:ed:38:cf: 29:71:54:fa:5a:cc:6c:ed:9f:ba:5e:5c:29:db:d2:31:ab:ac: a9:69:ed:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG RUU0MDZDMTgwHhcNMjUwNTEyMjA1MDU3WhcNMjUwNTE5MjA1MDU3WjAYMRYwFAYD VQQDEw02ODIyNWYzMS03ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswCCQhiawzgTXo7tTAyYV/W/651lreoclfZwYFlD3OZ5exXkliQzW0VSOtfI XMf1Y5E8pfM+U8wc0o87juDJu3Gaz1YQEw0Iawrve7hrVgnr47l3d5oeMKqEDx8g UmpzPH7xulG3+7/lX5qfT4RFPPtil0gXBLYMtc2nmahu5l3WojVGlWCzvNdUHujo gtMxOgJwbSMt04LgCJEC6l7hwi/5lWj0++jQrgs22T6fg4783PzJocmTqZXy5kjS KLPWTBap5nDIOGNF30MdkmIUFVwygb531SuivyYs/zcwz1KtAWM9Xa4q8OeY61HM cpUgDRvzHgZVgsIGowCTM/1YKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPmBhd6 eaPUC2DE6HH7P4HNWVhVMB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE4Qi83RTBDRUVGQUVFQjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2 M2plREVxZFotc3ItNUFiQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsgN4OX7d89tyHm2sYeOMHZ5EKXxUWe1I0XDAdmFBhYvVlayJaAxYD 8rr/H66VXzR7MFirDpOLJ+JquAP62PswDK/D1jsDRTo9H7biejzNoxp7h0KFkedD IF7z7v6vIPTEudJM+XoJrWDHIlZsVZ3DxgA2Rrhi207wZMDcPUfq44NSulH124nU bEYd/qSckSUjMQeBC4n3qp1+VSMAaLCC1f8r4lvuicSk1fPV2+fWSOPJCjjzwfeB fHKjOBUxu92bWcdNzr+iQMIMQTli3XWbL3j6CqTykxkMqBXhlIV2t0C2oU52CrTt OM8pcVT6Wsxs7Z+6Xlwp29Ixq6ypae0i -----END CERTIFICATE-----Generated at Wed May 14 21:41:52 2025 by rpki-client