$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: aRFxqnzfCbGjHYndbqtu2z03ldoNOUWR9m2ExRFkcDw= Subject key identifier: D3:D7:0A:64:DE:26:E3:A6:C1:63:F7:38:43:83:5F:41:C6:48:36:77 Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 078B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 0785 Signing time: Sat 10 May 2025 21:02:18 +0000 Manifest this update: Sat 10 May 2025 21:02:18 +0000 Manifest next update: Sat 17 May 2025 21:02:18 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: cqo66HyYMUT8XxdtIXu/s1B3aaP6tppmX72Qn5Oc5xU=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1931 (0x78b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: May 10 21:02:18 2025 GMT Not After : May 17 21:02:18 2025 GMT Subject: CN=681fbeda-93a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:d8:8d:67:a5:a9:b2:b0:ec:70:e7:b8:05: 4d:7f:62:64:b5:54:da:dc:2e:69:ef:ac:5e:4d:69: 71:78:2d:8f:04:cd:7d:80:da:2f:a9:18:25:02:5d: 24:d9:6b:0f:5a:1b:29:eb:a1:e0:38:ef:cb:2e:35: 0c:58:19:df:74:6c:61:63:63:e2:55:85:d7:3e:f5: ee:6b:48:ef:bd:bd:4c:30:fc:fa:f0:15:7f:f0:ea: 3b:17:95:27:76:37:c3:c7:bf:f1:69:57:1c:cb:e0: 42:1d:c3:fd:6e:1a:b7:d7:ea:e7:8c:d0:99:7f:19: 9a:28:9e:6d:ab:79:34:d0:4e:05:3c:73:47:ba:c7: 83:83:d0:b4:f4:5b:b6:f6:9e:aa:1b:05:f8:4f:a9: 11:ee:2d:b1:6e:98:82:65:49:7d:2d:7f:09:22:b0: 36:9e:c8:e7:88:18:db:92:ae:9b:f9:1f:d1:c7:7c: af:c7:23:b9:c5:30:5e:73:73:bb:8a:68:65:35:89: 3e:21:b2:4f:a6:6e:59:8b:ee:7a:c1:61:30:8a:5d: eb:85:74:4e:a7:d9:71:e4:e9:14:e9:de:29:79:1e: 4a:7e:f5:70:ad:7f:4c:87:5b:e7:df:8b:cb:95:f8: fe:66:fd:f2:4c:bb:3d:b0:c1:08:3c:c7:3b:7a:e6: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D7:0A:64:DE:26:E3:A6:C1:63:F7:38:43:83:5F:41:C6:48:36:77 X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:48:7d:df:4a:34:e4:86:f2:94:36:31:65:88:db:ca:82:42: a0:dc:c2:7d:8a:96:35:9a:ee:67:f3:af:c1:9f:14:6a:6f:a0: c5:ad:27:5e:28:ad:43:5c:11:3d:79:3c:17:3a:89:a2:15:82: 1a:52:09:f9:3d:71:f8:c8:f0:d2:ce:8e:96:5c:37:af:85:f5: 73:d0:3f:93:2c:d2:c2:86:5c:66:22:81:d5:4b:2d:ec:72:ef: 57:79:1f:31:07:8a:06:c9:98:02:48:76:7a:b0:21:92:c4:60: 7c:df:5f:d4:23:23:c0:6d:a9:54:a1:30:9d:ba:49:be:63:c8: b6:1c:b2:dc:9e:60:9e:68:23:2d:c1:35:38:61:58:89:4f:ff: 8d:6c:cd:bc:63:18:b1:bb:ab:88:6b:50:f1:65:b7:85:65:71: c8:05:eb:5e:88:e5:8d:2a:44:5f:42:97:ce:11:67:d1:88:26: 78:d6:c4:31:68:fe:18:4a:aa:fa:70:84:12:2d:c7:03:b8:ce: e2:0f:aa:d6:ce:dd:c6:de:22:1d:ad:f7:1f:81:da:94:1b:a0: bf:c9:06:aa:bf:3a:f9:2f:e2:92:33:35:d8:fc:4f:ac:27:84: 8d:6e:01:47:49:23:07:cb:b1:95:61:78:1b:9a:9e:32:64:76: 2e:7e:85:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUwNTEwMjEwMjE4WhcNMjUwNTE3MjEwMjE4WjAYMRYwFAYD VQQDEw02ODFmYmVkYS05M2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylHYjWelqbKw7HDnuAVNf2JktVTa3C5p76xeTWlxeC2PBM19gNovqRglAl0k 2WsPWhsp66HgOO/LLjUMWBnfdGxhY2PiVYXXPvXua0jvvb1MMPz68BV/8Oo7F5Un djfDx7/xaVccy+BCHcP9bhq31+rnjNCZfxmaKJ5tq3k00E4FPHNHuseDg9C09Fu2 9p6qGwX4T6kR7i2xbpiCZUl9LX8JIrA2nsjniBjbkq6b+R/Rx3yvxyO5xTBec3O7 imhlNYk+IbJPpm5Zi+56wWEwil3rhXROp9lx5OkU6d4peR5KfvVwrX9Mh1vn34vL lfj+Zv3yTLs9sMEIPMc7eua7eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPXCmTe JuOmwWP3OEODX0HGSDZ3MB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTSH3fSjTkhvKUNjFliNvKgkKg3MJ9ipY1mu5n86/BnxRqb6DFrSde KK1DXBE9eTwXOomiFYIaUgn5PXH4yPDSzo6WXDevhfVz0D+TLNLChlxmIoHVSy3s cu9XeR8xB4oGyZgCSHZ6sCGSxGB831/UIyPAbalUoTCdukm+Y8i2HLLcnmCeaCMt wTU4YViJT/+NbM28Yxixu6uIa1DxZbeFZXHIBeteiOWNKkRfQpfOEWfRiCZ41sQx aP4YSqr6cIQSLccDuM7iD6rWzt3G3iIdrfcfgdqUG6C/yQaqvzr5L+KSMzXY/E+s J4SNbgFHSSMHy7GVYXgbmp4yZHYufoW5 -----END CERTIFICATE-----Generated at Mon May 12 22:11:51 2025 by rpki-client