$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: F6D5pRPAPC1hMjhynWEImNVoYTxrvaBCzlr+bmdWWuA= Subject key identifier: B8:A0:88:78:19:34:1F:32:26:B7:EB:7C:3B:A2:97:AF:46:DE:D9:1A Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 150C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 1504 Signing time: Sat 10 May 2025 16:43:40 +0000 Manifest this update: Sat 10 May 2025 16:43:40 +0000 Manifest next update: Sat 17 May 2025 16:43:40 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: nZVBt7AMU8Tc7bUa9Jqhn65+k39sYJNah0Nz4SvHDfk=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5388 (0x150c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: May 10 16:43:40 2025 GMT Not After : May 17 16:43:40 2025 GMT Subject: CN=681f823c-ae70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:e5:de:ab:38:d0:ff:4f:51:c8:c6:5f:ec: af:ec:9b:5e:85:5f:9c:1e:de:4e:f9:47:2a:e1:98: 0a:af:ba:8b:7d:e2:c6:c5:63:4e:34:54:e5:a0:0e: ba:60:c3:85:3f:4f:0a:b6:44:02:91:0b:53:f4:0c: ce:17:44:87:e6:d4:ab:cd:19:cd:fd:01:f9:d2:aa: f4:d8:60:0c:cf:ff:72:13:6d:0a:da:48:65:79:db: a3:8a:13:53:83:ed:2c:5e:e4:db:15:3c:9f:01:d4: 49:e1:5f:be:14:6e:26:e8:95:c3:6d:1b:19:95:e0: 04:dc:81:e9:70:9d:d2:b6:62:46:14:56:4b:a4:dc: 3a:ea:2c:fd:31:c7:66:07:63:d2:a4:78:56:10:88: 17:32:b7:54:b9:4d:ef:43:4e:cf:a0:ac:f3:54:11: 75:e8:79:f9:a1:a2:36:f6:7b:16:de:14:39:84:5b: b9:27:8c:01:9b:ea:a1:f4:01:66:6a:4a:72:29:35: a7:d2:d3:03:80:11:0c:fc:c3:45:80:65:30:db:ed: d2:e1:5b:cf:34:a3:7f:5b:da:ee:8f:73:20:c4:3b: bb:de:ce:b5:7e:4e:49:c0:71:b6:61:eb:0c:ef:b8: 50:51:6c:92:1e:7f:ec:be:f3:77:24:3b:c4:7f:e2: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A0:88:78:19:34:1F:32:26:B7:EB:7C:3B:A2:97:AF:46:DE:D9:1A X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b9:44:7f:b0:41:1d:71:47:cf:23:c3:77:ef:a5:57:d9:9c: 87:03:02:f8:96:b3:04:39:d0:cf:78:b7:2c:2a:5f:73:a0:1b: 38:02:25:c5:23:1f:2f:58:5a:f7:5f:6c:02:a8:a8:ed:cb:5c: 2b:50:be:08:1e:bf:db:80:c3:93:01:15:5e:29:fd:8f:49:65: b5:b5:19:7b:e0:0b:f3:ce:f5:26:32:80:04:b4:75:7e:88:16: c9:c8:73:91:13:12:e1:a9:9e:e9:39:82:b6:5f:d8:b7:52:ef: 32:ff:ef:a1:32:48:98:39:20:59:6f:44:19:f2:9f:27:75:fe: 8a:7d:05:78:2b:40:2e:da:bb:91:6b:02:ea:32:28:c9:34:69: 32:2a:02:01:34:c2:bc:a6:36:da:cf:c9:29:b4:80:48:7c:d5: d1:f9:69:92:2d:27:9f:65:6a:da:87:ab:7a:bd:49:54:b0:fa: f1:a2:a6:77:8f:ee:42:4c:31:52:bc:3b:46:0d:a5:4b:56:43: fd:34:4e:a3:cb:34:e6:18:c7:96:22:9e:24:d4:c5:92:d0:c1: d2:05:01:8c:3e:a2:8a:5c:28:cc:4d:c7:3c:73:16:8e:ad:f8: ca:a6:4e:a2:91:ea:fe:e7:e8:14:5e:2b:0f:0f:74:37:2c:86: ba:3f:66:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUwNTEwMTY0MzQwWhcNMjUwNTE3MTY0MzQwWjAYMRYwFAYD VQQDEw02ODFmODIzYy1hZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Krl3qs40P9PUcjGX+yv7JtehV+cHt5O+Ucq4ZgKr7qLfeLGxWNONFTloA66 YMOFP08KtkQCkQtT9AzOF0SH5tSrzRnN/QH50qr02GAMz/9yE20K2khledujihNT g+0sXuTbFTyfAdRJ4V++FG4m6JXDbRsZleAE3IHpcJ3StmJGFFZLpNw66iz9Mcdm B2PSpHhWEIgXMrdUuU3vQ07PoKzzVBF16Hn5oaI29nsW3hQ5hFu5J4wBm+qh9AFm akpyKTWn0tMDgBEM/MNFgGUw2+3S4VvPNKN/W9ruj3MgxDu73s61fk5JwHG2YesM 77hQUWySHn/svvN3JDvEf+LbzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLigiHgZ NB8yJrfrfDuil69G3tkaMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOuUR/sEEdcUfPI8N376VX2ZyHAwL4lrMEOdDPeLcsKl9zoBs4AiXF Ix8vWFr3X2wCqKjty1wrUL4IHr/bgMOTARVeKf2PSWW1tRl74AvzzvUmMoAEtHV+ iBbJyHORExLhqZ7pOYK2X9i3Uu8y/++hMkiYOSBZb0QZ8p8ndf6KfQV4K0Au2ruR awLqMijJNGkyKgIBNMK8pjbaz8kptIBIfNXR+WmSLSefZWrah6t6vUlUsPrxoqZ3 j+5CTDFSvDtGDaVLVkP9NE6jyzTmGMeWIp4k1MWS0MHSBQGMPqKKXCjMTcc8cxaO rfjKpk6iker+5+gUXisPD3Q3LIa6P2ar -----END CERTIFICATE-----Generated at Mon May 12 15:02:47 2025 by rpki-client