$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: ems3Vxh91P9EOhWFSM/ePDG+3gMWc+d5jY9GhcWp4XE= Subject key identifier: 6F:7B:C1:2D:1B:34:88:40:4B:93:54:B2:23:58:43:6D:1A:E3:3A:D1 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0875 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 084B Signing time: Mon 12 May 2025 14:44:31 +0000 Manifest this update: Mon 12 May 2025 14:44:31 +0000 Manifest next update: Mon 19 May 2025 14:44:31 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: iPndgqdBK7vJO4Ky5RkWFWfqNMTme8mt07ghvVS0p5U=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: 1n8TN0elhXHHBL8i9K1T+oGXrUVuH0sd4JxY2m2xOlU=) 3: 664604CCD8E211ED913C4684C4F9AE02.roa (hash: bF+cQvGTN6hj6Su+AW4ebeZcP3ajFMubLlVPlkZn8CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: May 12 14:44:31 2025 GMT Not After : May 19 14:44:31 2025 GMT Subject: CN=6822094f-ecfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:00:6a:b1:9f:b4:dc:27:63:bc:36:02:b4: ca:d5:32:51:24:2c:4d:b1:99:84:6c:f7:70:27:c5: 79:0f:ae:a7:1f:ac:3c:f8:bb:a0:8f:44:56:00:d7: dc:a8:4b:96:82:f9:9c:37:b0:2f:69:b2:1a:f6:a0: 4b:79:bb:c0:67:7d:4a:20:af:e8:0b:ba:9a:8d:eb: ee:be:3c:e2:7b:0d:ad:44:c0:ec:98:8a:28:8c:ab: b6:ef:77:8f:77:e1:25:fe:72:0b:c3:5e:78:fd:77: 87:72:64:3c:12:42:ca:de:27:cd:c1:57:db:48:05: 25:65:a0:45:8d:97:32:7a:d9:fa:06:fa:f0:31:d3: d3:be:ad:9f:96:75:30:a7:ce:26:52:5c:ab:20:aa: 90:46:75:6f:2f:58:9b:4a:3e:eb:11:65:e5:10:7a: f9:32:4b:12:fa:7e:03:57:77:06:95:5b:d3:75:51: 4f:cb:be:f2:93:fe:88:df:62:2f:0c:bd:be:67:9f: 90:57:94:67:c6:26:2a:fa:75:00:f3:e7:af:ec:86: fc:5b:50:7d:5a:24:26:bd:67:60:e9:10:07:a4:70: e4:35:42:15:4a:4f:87:c4:2d:37:2a:77:61:69:5f: 27:d1:19:5c:18:a0:c1:9d:e9:6f:56:0d:7d:4e:5c: 0e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7B:C1:2D:1B:34:88:40:4B:93:54:B2:23:58:43:6D:1A:E3:3A:D1 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:83:23:1b:0b:91:a0:d2:cf:b5:87:cb:94:2e:35:97:83:1b: 5d:c0:b8:05:2e:b9:df:a3:dc:ef:12:d0:5a:24:3f:d7:f2:27: 95:40:3b:d9:48:a7:0b:1b:26:4d:e0:9e:16:8c:16:06:0b:36: b5:0c:a3:de:2a:a2:fb:0a:03:2d:3b:80:c2:73:0c:f1:2a:6d: 9f:13:80:3c:30:58:44:ec:ba:7d:eb:f7:38:1f:84:16:49:8b: 63:3a:3a:51:54:56:a0:22:94:9e:fb:82:67:8a:55:bd:eb:5e: 09:5e:c6:62:e2:76:dc:5d:96:99:05:73:91:68:60:4b:ca:51: 27:9a:23:b8:3c:d6:e1:a9:16:34:1c:b3:9d:ca:25:70:50:4c: 32:f1:cc:ea:ed:c0:32:2e:75:b3:69:c9:bc:99:9c:24:70:d1: e6:a0:76:55:b6:88:39:8b:91:4a:2b:19:e6:3f:c3:b3:74:73: b7:89:b3:41:f9:cc:25:65:c7:dd:39:b9:b6:87:84:56:ec:50: d4:a8:b9:1c:3c:14:c4:87:d2:6a:50:39:3a:5d:be:04:57:67: 46:22:99:bd:97:24:28:6b:73:61:b3:57:41:7b:7a:3c:e3:79: 9b:92:4d:19:47:e4:08:50:5e:44:b8:02:73:ca:e0:91:98:2d: 26:6a:62:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUwNTEyMTQ0NDMxWhcNMjUwNTE5MTQ0NDMxWjAYMRYwFAYD VQQDEw02ODIyMDk0Zi1lY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/QAarGftNwnY7w2ArTK1TJRJCxNsZmEbPdwJ8V5D66nH6w8+Lugj0RWANfc qEuWgvmcN7AvabIa9qBLebvAZ31KIK/oC7qajevuvjziew2tRMDsmIoojKu273eP d+El/nILw154/XeHcmQ8EkLK3ifNwVfbSAUlZaBFjZcyetn6BvrwMdPTvq2flnUw p84mUlyrIKqQRnVvL1ibSj7rEWXlEHr5MksS+n4DV3cGlVvTdVFPy77yk/6I32Iv DL2+Z5+QV5RnxiYq+nUA8+ev7Ib8W1B9WiQmvWdg6RAHpHDkNUIVSk+HxC03Kndh aV8n0RlcGKDBnelvVg19TlwOCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG97wS0b NIhAS5NUsiNYQ20a4zrRMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHgyMbC5Gg0s+1h8uULjWXgxtdwLgFLrnfo9zvEtBaJD/X8ieVQDvZ SKcLGyZN4J4WjBYGCza1DKPeKqL7CgMtO4DCcwzxKm2fE4A8MFhE7Lp96/c4H4QW SYtjOjpRVFagIpSe+4JnilW9614JXsZi4nbcXZaZBXORaGBLylEnmiO4PNbhqRY0 HLOdyiVwUEwy8czq7cAyLnWzacm8mZwkcNHmoHZVtog5i5FKKxnmP8OzdHO3ibNB +cwlZcfdObm2h4RW7FDUqLkcPBTEh9JqUDk6Xb4EV2dGIpm9lyQoa3Nhs1dBe3o8 43mbkk0ZR+QIUF5EuAJzyuCRmC0mamJf -----END CERTIFICATE-----Generated at Mon May 12 22:14:35 2025 by rpki-client