$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: r4xD5px0ew5fX/w9B0dPPCwuprsGJrt0U5mGYTO2TjM= Subject key identifier: D0:63:2E:D7:A3:97:1F:DC:17:03:80:F1:86:88:FE:4E:53:44:91:6D Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 040A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 03F4 Signing time: Thu 15 May 2025 00:33:59 +0000 Manifest this update: Thu 15 May 2025 00:33:58 +0000 Manifest next update: Thu 22 May 2025 00:33:58 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: cx4SqQKIjGJuIfW2v4LOvYK+6JZFNjwplgmXq+BlpSY=) 2: 2940AFDCD84211EDBD609A4DC4F9AE02.roa (hash: 0k/cIYnPQXwy+zTSkxTlGjeXYEeYNzK6r8YzvtnE4aQ=) 3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: May 15 00:33:58 2025 GMT Not After : May 22 00:33:58 2025 GMT Subject: CN=68253677-db87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:46:20:7f:c6:cf:4e:1d:ec:ed:df:29:73: 1c:51:c5:6f:84:f6:b0:ac:52:cb:d4:75:c2:16:3a: 43:a6:c2:6f:e1:5a:ee:09:d7:4c:18:b3:b1:2f:91: 44:76:a1:2c:99:84:f1:3e:78:8c:72:a9:bd:87:93: 5b:df:31:84:c7:23:3d:fb:f2:06:db:e3:5e:71:e1: 5b:b2:f5:42:db:55:3b:f2:d0:d5:d4:0b:76:18:d4: 60:98:29:4a:2e:bb:44:a5:96:71:3e:c8:2e:5c:8d: f3:e9:46:e1:de:73:26:2f:49:26:28:e4:f7:30:aa: d0:93:4e:f3:9e:4c:0c:eb:f6:1a:7f:78:77:46:85: fa:6f:08:5b:1d:c1:dc:e9:8a:11:66:5b:23:3b:46: 5b:8a:2f:1e:65:67:38:c9:d7:85:bb:4c:67:52:64: 19:57:f2:45:a4:88:13:0b:14:96:42:73:29:a3:8f: 21:7e:2d:f4:8a:0e:5c:a9:9a:c8:bf:e2:09:29:fb: 97:3f:a6:d2:db:af:13:26:23:a4:6f:de:72:ea:9e: cb:90:9f:3a:d6:e1:49:52:7b:a9:7a:03:9d:85:8c: 49:15:92:60:7d:9b:e7:b5:40:16:e6:ec:bf:46:df: 95:d9:d9:6e:21:50:9b:e4:27:64:e7:66:6f:49:c9: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:63:2E:D7:A3:97:1F:DC:17:03:80:F1:86:88:FE:4E:53:44:91:6D X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f7:b2:e2:b3:40:60:91:c6:38:c3:93:9b:b1:cc:0a:fc:aa: 03:fc:60:b1:b5:ca:c8:e4:fa:1c:b7:ae:bc:ff:f3:66:b9:e9: 82:46:98:0c:8f:9b:44:c6:fc:c0:e3:09:b6:94:3e:97:01:25: 5a:0c:62:6d:85:03:c5:ad:d7:8a:b7:20:8c:e3:52:3e:12:ba: 1a:80:1c:58:15:30:db:7e:f5:45:68:9f:92:50:63:8e:d7:03: 8c:c1:be:ac:24:ce:18:bd:bd:af:73:c5:39:53:3a:6e:bd:7b: 73:e6:44:b7:40:31:52:91:d0:33:f2:32:c9:cb:ba:b8:01:c6: 1c:11:64:28:54:d9:41:34:29:fe:8c:98:b1:2f:f0:d3:88:1c: 09:c2:ff:28:8d:69:68:c8:00:54:5f:42:9e:5e:b7:d9:92:8d: 92:8b:a3:e6:54:de:50:1e:b5:1f:53:86:94:31:b3:ed:1a:d0: 7a:66:8b:27:05:05:ad:a9:24:a5:3a:c5:a0:c7:27:11:df:1f: 06:cd:d7:73:87:fd:a4:32:c1:40:25:27:15:56:9e:07:15:c0: 4e:2e:70:1e:c6:44:aa:e3:be:c3:fc:c8:56:8f:59:d5:e2:39: 2c:ff:ca:26:ae:26:a9:91:fb:ec:03:09:b8:2a:a3:63:75:88: ee:58:2d:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjUwNTE1MDAzMzU4WhcNMjUwNTIyMDAzMzU4WjAYMRYwFAYD VQQDEw02ODI1MzY3Ny1kYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQBGIH/Gz04d7O3fKXMcUcVvhPawrFLL1HXCFjpDpsJv4VruCddMGLOxL5FE dqEsmYTxPniMcqm9h5Nb3zGExyM9+/IG2+NeceFbsvVC21U78tDV1At2GNRgmClK LrtEpZZxPsguXI3z6Ubh3nMmL0kmKOT3MKrQk07znkwM6/Yaf3h3RoX6bwhbHcHc 6YoRZlsjO0Zbii8eZWc4ydeFu0xnUmQZV/JFpIgTCxSWQnMpo48hfi30ig5cqZrI v+IJKfuXP6bS268TJiOkb95y6p7LkJ861uFJUnupegOdhYxJFZJgfZvntUAW5uy/ Rt+V2dluIVCb5Cdk52ZvSckvYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBjLtej lx/cFwOA8YaI/k5TRJFtMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT97Lis0BgkcY4w5ObscwK/KoD/GCxtcrI5Poct668//NmuemCRpgM j5tExvzA4wm2lD6XASVaDGJthQPFrdeKtyCM41I+EroagBxYFTDbfvVFaJ+SUGOO 1wOMwb6sJM4Yvb2vc8U5UzpuvXtz5kS3QDFSkdAz8jLJy7q4AcYcEWQoVNlBNCn+ jJixL/DTiBwJwv8ojWloyABUX0KeXrfZko2Si6PmVN5QHrUfU4aUMbPtGtB6Zosn BQWtqSSlOsWgxycR3x8Gzddzh/2kMsFAJScVVp4HFcBOLnAexkSq477D/MhWj1nV 4jks/8omriapkfvsAwm4KqNjdYjuWC2E -----END CERTIFICATE-----Generated at Thu May 15 23:30:25 2025 by rpki-client