$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: QrLQgV3t1yMc9bpB5jAs25OLtCtcb+H0OHkkQeMs6p8= Subject key identifier: 68:8B:9C:AD:4F:9A:B1:26:2A:B1:F8:32:84:15:11:E7:89:39:99:2D Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2C91 Signing time: Sat 10 May 2025 15:28:47 +0000 Manifest this update: Sat 10 May 2025 15:28:46 +0000 Manifest next update: Sat 17 May 2025 15:28:46 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: Y7MhiO4GonUW+B4at+cw8zIJu+f4pFq/uuGEBsyA7WU=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: skjzRKV2yiK6mRZi2jO6tjX3v0zfq/yBAWOKemHERmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11430 (0x2ca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: May 10 15:28:46 2025 GMT Not After : May 17 15:28:46 2025 GMT Subject: CN=681f70af-0550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:7d:36:6a:a1:ed:80:3f:55:81:2c:10:71: 0e:2d:a2:24:81:73:b2:a5:03:3d:36:06:de:f5:1e: 02:ce:3d:6e:1a:c0:e9:23:15:dd:4b:77:d7:4d:7a: 6b:4d:ef:2e:15:ea:d9:8a:96:2e:cc:ad:47:64:83: d2:b1:08:68:76:b3:07:db:af:d0:ce:92:aa:7e:51: ef:09:29:c6:88:4e:a9:33:63:31:b3:3f:92:67:20: 96:44:cc:85:1f:7c:5d:8e:de:be:d2:d4:d8:3d:0e: 00:2c:05:18:f9:93:24:bc:ab:ce:e7:0c:7f:90:ef: c4:3e:9b:d5:87:6e:10:57:08:a2:fc:6f:f0:a2:aa: 16:09:00:ec:2e:79:be:e9:92:9b:f0:fd:92:ae:64: f1:83:2b:3c:9d:ee:f5:e5:28:c2:e2:a4:41:c7:38: 6e:0a:63:6f:df:03:b0:36:7d:c2:41:b0:6c:60:dc: bd:fd:56:e3:e3:c9:db:84:0e:a3:e7:ca:a7:fb:7d: 4b:56:7a:a4:d5:c7:1e:06:ea:a0:99:0b:ce:34:0a: 7d:55:e7:d9:9b:d4:69:23:6c:6e:88:a4:fe:f0:24: 8f:0e:da:66:e6:c4:5f:02:1a:3c:90:bd:b3:75:01: 3b:4c:9c:4c:aa:5d:49:6c:bb:e4:7b:24:58:3d:1a: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8B:9C:AD:4F:9A:B1:26:2A:B1:F8:32:84:15:11:E7:89:39:99:2D X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:65:b9:93:33:60:ce:f9:28:7b:25:31:03:25:84:52:6c:1a: 18:96:78:3a:74:04:3d:25:8f:6f:c9:1e:ef:61:9e:56:c3:3a: f5:00:b0:1b:13:87:1e:e7:0b:13:5d:13:54:c6:ac:55:09:0f: ff:a1:5f:b3:be:f7:b2:67:71:6c:43:4c:c0:18:97:20:61:24: 8e:81:d4:14:83:ce:5e:92:90:25:aa:e9:a0:74:ec:e2:4a:eb: ec:5d:56:78:03:89:b4:6f:99:0f:c4:57:04:48:d7:3e:93:f9: af:8b:6e:96:65:22:ac:2e:a6:a9:ab:d2:71:53:9f:0e:23:1a: 30:14:cb:82:40:fc:b7:e0:73:d2:0a:2e:b2:90:66:c6:40:f3: 64:31:ee:c2:70:15:06:aa:58:f7:dd:0c:63:1e:aa:0f:a0:8d: d5:71:ca:78:16:77:63:13:d1:21:b4:cf:18:89:6b:28:6e:88: 36:d4:1a:f9:78:8a:bb:6e:f6:1b:be:99:15:8e:3d:2e:4f:d4: 6a:8b:79:b3:c1:df:9d:86:a4:02:f0:78:9e:9f:7b:90:1f:4c: a1:61:8b:8a:26:9a:82:86:5a:d7:46:7e:2d:ea:a6:ce:88:8d: 83:28:77:6a:95:d5:94:57:05:03:ab:21:76:18:dd:3e:62:e8: 01:4b:10:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUwNTEwMTUyODQ2WhcNMjUwNTE3MTUyODQ2WjAYMRYwFAYD VQQDEw02ODFmNzBhZi0wNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7F9Nmqh7YA/VYEsEHEOLaIkgXOypQM9Ngbe9R4Czj1uGsDpIxXdS3fXTXpr Te8uFerZipYuzK1HZIPSsQhodrMH26/QzpKqflHvCSnGiE6pM2Mxsz+SZyCWRMyF H3xdjt6+0tTYPQ4ALAUY+ZMkvKvO5wx/kO/EPpvVh24QVwii/G/woqoWCQDsLnm+ 6ZKb8P2SrmTxgys8ne715SjC4qRBxzhuCmNv3wOwNn3CQbBsYNy9/Vbj48nbhA6j 58qn+31LVnqk1cceBuqgmQvONAp9VefZm9RpI2xuiKT+8CSPDtpm5sRfAho8kL2z dQE7TJxMql1JbLvkeyRYPRpG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiLnK1P mrEmKrH4MoQVEeeJOZktMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBZbmTM2DO+Sh7JTEDJYRSbBoYlng6dAQ9JY9vyR7vYZ5Wwzr1ALAb E4ce5wsTXRNUxqxVCQ//oV+zvveyZ3FsQ0zAGJcgYSSOgdQUg85ekpAlqumgdOzi SuvsXVZ4A4m0b5kPxFcESNc+k/mvi26WZSKsLqapq9JxU58OIxowFMuCQPy34HPS Ci6ykGbGQPNkMe7CcBUGqlj33QxjHqoPoI3Vccp4FndjE9EhtM8YiWsobog21Br5 eIq7bvYbvpkVjj0uT9Rqi3mzwd+dhqQC8Hien3uQH0yhYYuKJpqChlrXRn4t6qbO iI2DKHdqldWUVwUDqyF2GN0+YugBSxAY -----END CERTIFICATE-----Generated at Sun May 11 16:55:00 2025 by rpki-client