$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: w90ba5OvL37BomLwNi0eYXMjdEGuLrstXn6oQaB94do= Subject key identifier: B2:F7:6E:7C:6D:09:BD:EB:92:16:B9:60:B3:0C:97:9C:05:D0:10:A9 Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 037E Signing time: Tue 13 May 2025 00:41:39 +0000 Manifest this update: Tue 13 May 2025 00:41:38 +0000 Manifest next update: Tue 20 May 2025 00:41:38 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: 4V+BRAC/gSYChwRHbhJZyTpYy5Zd3DjM7g9UHe0XQ3U=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vZ/WaADoEuy2hBBHTZfwXR0fuTeB5hZjwEti8AL2NUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: May 13 00:41:38 2025 GMT Not After : May 20 00:41:38 2025 GMT Subject: CN=68229543-7011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ae:c2:50:07:d2:93:2f:96:69:6b:37:a2:3b: 87:ce:34:ba:9c:a9:23:32:5b:90:22:39:8e:26:eb: 8f:fc:bb:a9:36:08:10:4d:16:63:c6:ea:6b:c8:4a: 0e:d4:f7:7a:fe:1f:03:f3:8e:ba:0d:b3:36:72:e3: 75:db:dd:55:83:57:31:01:3a:1a:f0:89:81:85:c9: 75:2b:5d:79:e7:54:d2:ec:8a:42:a2:65:94:2a:4f: 9a:63:85:4b:4b:e4:1e:55:fd:1e:17:69:b4:0d:c3: 7c:b5:9f:cb:56:e4:6f:00:74:2e:5b:c8:41:e9:44: 3c:f2:b6:84:2a:9b:56:af:09:e1:c0:f0:36:c7:c2: 35:ae:b6:69:01:55:e0:a5:4b:d0:b5:ae:98:c9:33: 8d:19:76:e1:4d:f4:7c:35:de:5c:52:d3:70:56:c9: a0:1f:fd:17:b5:af:9a:d2:2b:1c:9a:10:ac:6f:96: bc:a9:b2:77:1d:84:72:6d:6f:d0:75:8d:fb:48:2f: c5:36:e5:32:2b:93:90:15:9d:99:aa:51:4f:21:98: 34:08:be:08:1c:8c:54:66:e5:26:84:da:07:4d:44: 18:64:38:55:d3:5c:fe:34:ad:cd:e8:41:41:0b:9d: f7:38:51:5d:f0:e6:87:31:e7:a1:e6:b1:42:f7:0a: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F7:6E:7C:6D:09:BD:EB:92:16:B9:60:B3:0C:97:9C:05:D0:10:A9 X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:32:75:e1:17:1a:7a:48:30:65:d1:71:c3:84:fc:a4:78:77: 6e:11:40:fd:cb:2a:1a:37:da:47:b8:57:75:5c:7e:aa:78:19: 6d:a2:ae:2e:b5:b1:42:df:a2:66:b1:62:78:c3:fc:b5:a3:3f: 8b:60:b9:d3:eb:bd:e0:3a:c5:99:bf:87:27:33:66:ae:0a:05: 97:63:b5:f1:a8:da:33:a0:a5:76:93:e4:f9:1c:2b:35:2c:d5: 9b:a6:07:85:71:95:8d:6a:f1:dd:3c:05:52:51:ae:10:91:a5: 67:c6:57:ef:3b:ea:72:e4:84:cf:6f:ab:7f:06:54:bb:7f:21: ac:13:28:f4:21:55:cb:20:cd:cf:d1:6e:da:63:81:f4:c2:2a: d6:d8:44:23:54:63:68:99:f2:97:57:5a:70:a5:f0:db:7b:5a: 19:34:ca:c0:b3:2a:53:11:8f:45:21:61:4f:b8:96:51:04:a9: 35:0f:04:b3:3a:12:cd:74:80:a2:98:ab:57:e1:26:19:05:bd: d0:18:66:dc:71:72:fa:21:08:d4:f7:39:20:91:82:09:a1:84: 13:81:39:c6:22:84:b3:1c:21:f7:15:da:f4:37:a6:77:c4:29: c5:e3:b3:5c:24:57:62:5b:d7:48:2f:5b:9c:63:22:ca:c7:36: 08:17:ce:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjUwNTEzMDA0MTM4WhcNMjUwNTIwMDA0MTM4WjAYMRYwFAYD VQQDEw02ODIyOTU0My03MDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6q7CUAfSky+WaWs3ojuHzjS6nKkjMluQIjmOJuuP/LupNggQTRZjxupryEoO 1Pd6/h8D8466DbM2cuN1291Vg1cxAToa8ImBhcl1K11551TS7IpComWUKk+aY4VL S+QeVf0eF2m0DcN8tZ/LVuRvAHQuW8hB6UQ88raEKptWrwnhwPA2x8I1rrZpAVXg pUvQta6YyTONGXbhTfR8Nd5cUtNwVsmgH/0Xta+a0iscmhCsb5a8qbJ3HYRybW/Q dY37SC/FNuUyK5OQFZ2ZqlFPIZg0CL4IHIxUZuUmhNoHTUQYZDhV01z+NK3N6EFB C533OFFd8OaHMeeh5rFC9wo28QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL3bnxt Cb3rkha5YLMMl5wF0BCpMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4MnXhFxp6SDBl0XHDhPykeHduEUD9yyoaN9pHuFd1XH6qeBltoq4u tbFC36JmsWJ4w/y1oz+LYLnT673gOsWZv4cnM2auCgWXY7XxqNozoKV2k+T5HCs1 LNWbpgeFcZWNavHdPAVSUa4QkaVnxlfvO+py5ITPb6t/BlS7fyGsEyj0IVXLIM3P 0W7aY4H0wirW2EQjVGNomfKXV1pwpfDbe1oZNMrAsypTEY9FIWFPuJZRBKk1DwSz OhLNdICimKtX4SYZBb3QGGbccXL6IQjU9zkgkYIJoYQTgTnGIoSzHCH3Fdr0N6Z3 xCnF47NcJFdiW9dIL1ucYyLKxzYIF86E -----END CERTIFICATE-----Generated at Tue May 13 14:12:54 2025 by rpki-client