$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: VTTBOR00L6NEKViP7K67ibKr3vf7miivZf3UbQ7RDiM= Subject key identifier: 1F:1A:78:9E:2E:CB:32:97:BB:EB:5E:B3:0F:40:32:A5:87:87:9F:54 Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 0940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 093A Signing time: Wed 14 May 2025 20:22:11 +0000 Manifest this update: Wed 14 May 2025 20:22:11 +0000 Manifest next update: Wed 21 May 2025 20:22:11 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: C7Hs960nOnJFSxiZ9mt8PZ/dkc88f1AETWfDTDJVadk=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: ZywlM5GpBNObiLKXkyaLQIw8TaELpknwXgtbraf7xO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: May 14 20:22:11 2025 GMT Not After : May 21 20:22:11 2025 GMT Subject: CN=6824fb73-168e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:b4:86:0a:66:6a:b6:1a:c6:8f:72:b9:09: 68:ea:79:74:24:a9:ac:f6:ca:fc:13:41:70:5d:8f: 71:5a:53:a6:48:9c:f8:e2:d6:20:67:ee:eb:dd:90: bf:96:7e:3e:1d:c5:16:fa:15:7b:b1:12:21:c0:c7: 57:e4:3f:e3:cb:cb:c7:b6:7b:a7:7e:d2:b9:17:52: 9d:48:86:73:dc:62:a1:a0:30:a8:80:57:23:be:64: 32:64:da:db:d9:7b:6d:e2:96:1e:80:f5:43:11:82: 81:1d:95:03:95:d2:62:ca:0e:56:98:3b:eb:6f:a9: 6c:12:96:5a:17:35:9f:32:4c:86:5c:4f:92:d1:88: 1a:be:5b:b9:54:8e:41:4e:be:a7:4f:6f:34:4e:87: 66:44:f0:6b:e3:4e:c0:ab:88:e7:9e:34:00:7d:de: 35:2c:32:e5:bd:b2:9e:db:dc:63:b4:83:a8:e3:29: 1f:f8:96:51:87:1a:29:2f:8a:ed:be:ee:b3:83:17: 6f:e6:1a:d7:14:c4:6c:ce:92:c9:8d:70:5a:bb:95: 11:ec:41:d9:68:ef:22:13:7c:25:30:3e:94:2d:7c: ee:70:b5:92:3b:70:72:d3:84:23:c1:1a:06:35:aa: 4f:fd:ff:a6:ff:a3:11:e8:e3:3d:58:d7:5f:dd:c7: 1c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1A:78:9E:2E:CB:32:97:BB:EB:5E:B3:0F:40:32:A5:87:87:9F:54 X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9a:2b:16:66:cb:b1:a5:f4:9b:9f:de:1c:e9:f6:f1:ae:bf: 91:26:14:95:e9:50:59:2c:ee:2b:45:cb:4e:f5:e4:26:9b:48: d3:5f:79:91:11:21:ed:02:8a:b6:83:7a:78:ca:e8:7e:8b:33: fb:ec:a0:df:59:6e:ec:9f:35:94:84:41:56:e2:ec:e4:f8:66: 58:c4:e4:5e:c6:40:28:a5:43:14:ba:4e:d2:6e:d0:a0:9a:db: d1:7e:09:be:e1:1e:86:47:f2:cf:6d:1e:93:bf:81:16:02:ef: ec:d6:ec:78:01:0f:a3:cd:4d:6c:3a:46:4f:40:94:4f:ff:2d: ad:e7:17:24:b1:2d:19:cb:01:48:9d:91:9e:c7:eb:ea:2f:53: 1e:e7:38:68:d9:79:51:cd:07:f4:03:e1:1d:2c:c3:52:61:32: 8b:26:1b:65:f1:04:1f:f2:bb:c4:0d:ff:cc:8c:90:d4:4b:12: 32:fd:5f:fa:a9:53:58:d7:50:1f:9d:b9:cd:f5:75:24:b6:6d: 48:74:0a:e7:15:f6:bf:ef:6f:b5:10:0c:8b:f6:18:01:99:c4: c8:2e:43:b3:95:8b:4c:cf:00:05:6b:a4:c7:22:69:b7:2d:ba: 3e:0a:d8:1c:49:74:24:93:9f:30:b2:ef:5e:db:6d:e8:a9:89: e7:12:75:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjUwNTE0MjAyMjExWhcNMjUwNTIxMjAyMjExWjAYMRYwFAYD VQQDEw02ODI0ZmI3My0xNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CW0hgpmarYaxo9yuQlo6nl0JKms9sr8E0FwXY9xWlOmSJz44tYgZ+7r3ZC/ ln4+HcUW+hV7sRIhwMdX5D/jy8vHtnunftK5F1KdSIZz3GKhoDCogFcjvmQyZNrb 2Xtt4pYegPVDEYKBHZUDldJiyg5WmDvrb6lsEpZaFzWfMkyGXE+S0Ygavlu5VI5B Tr6nT280TodmRPBr407Aq4jnnjQAfd41LDLlvbKe29xjtIOo4ykf+JZRhxopL4rt vu6zgxdv5hrXFMRszpLJjXBau5UR7EHZaO8iE3wlMD6ULXzucLWSO3By04QjwRoG NapP/f+m/6MR6OM9WNdf3cccfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8aeJ4u yzKXu+tesw9AMqWHh59UMB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMmisWZsuxpfSbn94c6fbxrr+RJhSV6VBZLO4rRctO9eQmm0jTX3mR ESHtAoq2g3p4yuh+izP77KDfWW7snzWUhEFW4uzk+GZYxORexkAopUMUuk7SbtCg mtvRfgm+4R6GR/LPbR6Tv4EWAu/s1ux4AQ+jzU1sOkZPQJRP/y2t5xcksS0ZywFI nZGex+vqL1Me5zho2XlRzQf0A+EdLMNSYTKLJhtl8QQf8rvEDf/MjJDUSxIy/V/6 qVNY11AfnbnN9XUktm1IdArnFfa/72+1EAyL9hgBmcTILkOzlYtMzwAFa6THImm3 Lbo+CtgcSXQkk58wsu9e223oqYnnEnUK -----END CERTIFICATE-----Generated at Thu May 15 11:35:33 2025 by rpki-client