$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: dT/P7f+DEWZlWHePsWZ9zI7IbQGKrV3v0Tdoluqh7qA= Subject key identifier: FE:0B:FA:FB:E5:4D:31:6B:3E:2B:9F:12:41:8D:78:9F:C4:FB:3E:4A Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 034D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0344 Signing time: Tue 13 May 2025 00:51:41 +0000 Manifest this update: Tue 13 May 2025 00:51:40 +0000 Manifest next update: Tue 20 May 2025 00:51:40 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: uBZ5WQPGQo8kwGQXSe2JgW6ZNZQL7zlbB6/7PnpN548=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: May 13 00:51:40 2025 GMT Not After : May 20 00:51:40 2025 GMT Subject: CN=6822979d-48fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:c9:f9:2a:3f:d0:38:f3:11:48:81:68:9a: a6:09:27:89:bc:93:47:b8:24:02:10:5d:e7:df:c7: c5:47:7d:61:7a:74:77:18:5c:b2:e2:5b:33:46:af: 5f:67:ed:e3:3a:88:83:8e:c8:e2:94:5a:8f:f0:45: 6c:10:07:c8:b7:b5:65:fa:6f:fe:6b:29:4a:6d:29: da:71:ba:6c:ad:95:4a:d4:4c:8f:03:71:2d:25:1a: 8e:06:97:75:45:38:52:14:d9:4c:c1:66:f0:95:7a: f2:1b:ac:74:73:7f:bf:b9:09:01:c2:a5:47:b0:92: c4:f2:58:8b:9f:e9:e3:a3:fc:eb:d7:e0:e7:fd:7c: b0:b6:c1:d2:5c:fe:74:56:57:9a:9a:e5:0c:96:8a: 74:6a:0c:44:4e:0f:fa:81:f3:1d:de:e6:d5:01:7c: 84:18:29:f0:9a:6f:80:04:2f:a2:11:f2:6e:1a:c1: 4b:6f:d3:6d:0a:04:cd:0b:73:21:51:09:72:fb:76: 54:21:f8:1b:dc:c1:de:d6:b8:31:4b:57:c2:f0:0d: d2:6b:71:03:75:df:b5:9e:95:a3:6f:b6:3e:dc:c0: 66:f7:3f:13:59:a5:88:a3:29:18:47:25:b5:0f:4c: fc:9f:5d:06:70:fd:54:de:49:27:3c:78:37:aa:12: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0B:FA:FB:E5:4D:31:6B:3E:2B:9F:12:41:8D:78:9F:C4:FB:3E:4A X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:42:c5:10:15:87:92:22:61:2e:b5:43:f5:43:d7:59:fc:a3: 08:64:4c:a2:0a:6a:32:87:f1:37:77:52:93:6e:28:4b:3e:9b: 78:44:d0:09:79:cc:87:b5:10:fe:29:ad:5c:3f:7c:62:c4:02: d5:d3:21:ed:0d:92:bf:02:14:a0:ec:e9:77:36:5a:ed:b5:9e: e7:9e:86:44:86:74:97:30:65:ee:1b:77:d1:22:b4:c5:62:77: de:2e:2f:49:31:f6:77:df:1e:ad:84:15:5a:82:d7:a1:41:fe: fc:ea:35:71:32:87:ca:1f:d6:05:5f:38:16:ca:76:7b:f4:7d: 76:bd:d0:54:fa:be:38:b7:24:36:8c:a4:b1:b5:27:7f:79:23: b8:c4:14:33:91:b1:9f:23:64:51:60:f5:bd:8f:be:a8:91:bd: a4:dc:77:73:b0:f0:7d:1c:ee:72:17:54:3b:b5:1d:28:50:ea: c9:f1:e1:7f:74:b6:7a:6a:82:95:f5:d7:87:82:bc:82:80:79: e1:64:b3:fb:c4:7a:03:cc:69:a7:ec:78:59:b5:bb:92:db:c7: 18:7a:66:91:33:94:57:02:f7:4a:e3:d1:5c:44:5f:64:03:23: ab:a4:ee:47:af:6c:fe:18:24:09:2f:4c:e1:5a:29:70:7c:c9: 29:f7:02:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjUwNTEzMDA1MTQwWhcNMjUwNTIwMDA1MTQwWjAYMRYwFAYD VQQDEw02ODIyOTc5ZC00OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvLJ+So/0DjzEUiBaJqmCSeJvJNHuCQCEF3n38fFR31henR3GFyy4lszRq9f Z+3jOoiDjsjilFqP8EVsEAfIt7Vl+m/+aylKbSnacbpsrZVK1EyPA3EtJRqOBpd1 RThSFNlMwWbwlXryG6x0c3+/uQkBwqVHsJLE8liLn+njo/zr1+Dn/XywtsHSXP50 VleamuUMlop0agxETg/6gfMd3ubVAXyEGCnwmm+ABC+iEfJuGsFLb9NtCgTNC3Mh UQly+3ZUIfgb3MHe1rgxS1fC8A3Sa3EDdd+1npWjb7Y+3MBm9z8TWaWIoykYRyW1 D0z8n10GcP1U3kknPHg3qhLa4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4L+vvl TTFrPiufEkGNeJ/E+z5KMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdQsUQFYeSImEutUP1Q9dZ/KMIZEyiCmoyh/E3d1KTbihLPpt4RNAJ ecyHtRD+Ka1cP3xixALV0yHtDZK/AhSg7Ol3NlrttZ7nnoZEhnSXMGXuG3fRIrTF YnfeLi9JMfZ33x6thBVagtehQf786jVxMofKH9YFXzgWynZ79H12vdBU+r44tyQ2 jKSxtSd/eSO4xBQzkbGfI2RRYPW9j76okb2k3HdzsPB9HO5yF1Q7tR0oUOrJ8eF/ dLZ6aoKV9deHgryCgHnhZLP7xHoDzGmn7HhZtbuS28cYemaRM5RXAvdK49FcRF9k AyOrpO5Hr2z+GCQJL0zhWilwfMkp9wIp -----END CERTIFICATE-----Generated at Wed May 14 14:18:37 2025 by rpki-client