$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: KWfwXjSI+zq705ZfK2gx1pqJFQYjaAvfOZ9QCC4VnLM= Subject key identifier: F6:F9:BF:9F:2F:72:2E:D5:45:D2:D7:8A:B6:51:F0:05:7B:9D:A5:00 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1E9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1E87 Signing time: Wed 14 May 2025 16:08:37 +0000 Manifest this update: Wed 14 May 2025 16:08:36 +0000 Manifest next update: Wed 21 May 2025 16:08:36 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: 9TQPQG/zlQtI9iIwkkJl0BPIDE4+bfYnF+ZP/sg5x4M=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: h0HyLn8ocWGb9KjF4xTUCCRX3RLDUFI2FgHziz/KxqQ=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7838 (0x1e9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: May 14 16:08:36 2025 GMT Not After : May 21 16:08:36 2025 GMT Subject: CN=6824c005-521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:11:71:6d:37:4b:31:3b:74:07:01:75:36:56: 98:35:77:8e:b8:9a:8d:32:7b:a8:ff:fb:06:e3:2d: a0:2d:a1:4b:74:b8:39:cf:d0:59:d3:ab:76:e8:c4: 29:b7:a5:eb:a9:80:ec:7e:46:56:57:42:cd:e3:20: a0:04:74:78:3b:3f:3a:99:f7:a3:01:58:a1:8a:0f: 2e:48:8d:38:c6:e9:6e:2e:02:43:da:b1:04:37:4a: f4:e7:96:e6:c2:af:dc:27:bd:b8:98:97:12:9d:6d: a0:13:51:03:e0:0e:86:4b:7b:e8:72:cc:94:3a:45: 80:41:e3:6b:6f:30:c5:60:2d:7c:f1:8d:ec:b8:ed: e5:bc:24:6a:4b:69:ee:4b:b5:4d:4c:c0:d7:82:7f: 95:9f:63:1c:ac:50:42:ab:ff:ba:a8:e8:bc:f6:88: b3:98:70:cf:99:9c:f4:b4:af:62:56:94:a9:7c:12: ca:81:75:a4:e6:91:91:c7:f9:2b:ae:ba:24:e2:2a: b6:fb:a4:2e:93:3f:6c:e0:66:0b:a4:45:e5:8a:1c: 25:54:7d:f8:9b:c3:35:7d:91:0d:25:34:38:97:25: 56:43:90:a4:fa:5a:bd:14:2b:b8:77:26:d0:2b:0e: 87:37:40:ec:23:be:5d:50:12:46:30:4f:6e:63:16: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F9:BF:9F:2F:72:2E:D5:45:D2:D7:8A:B6:51:F0:05:7B:9D:A5:00 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d0:52:00:81:77:dc:ee:f6:1e:43:df:c2:be:7b:a0:fd:79: aa:b4:1f:18:4a:c5:8f:c0:4c:ac:53:69:3a:7d:e5:94:45:2f: d5:36:21:87:28:05:13:49:c0:e3:0a:60:21:a3:f6:ee:a6:c0: 5b:b6:00:a8:c2:9e:94:3b:96:21:a5:a7:e5:a0:25:da:7c:90: 43:ad:89:f1:a1:a6:56:1c:10:98:ab:48:c6:00:d0:61:6a:8f: 99:78:d7:5c:c5:c0:73:92:fe:6c:2b:85:48:bb:86:28:39:11: 6d:00:37:36:6b:5a:b3:ee:a0:d9:4d:1b:0b:59:75:74:6b:3d: a7:c1:6e:10:4c:86:21:5f:60:42:ba:ea:5a:22:c0:35:25:af: 88:7a:74:ce:c6:f9:5a:55:90:11:f3:ab:d0:e6:c9:87:a1:e6: 78:69:60:78:da:c0:49:2d:47:e6:3e:4f:70:10:20:c5:26:ad: fe:01:06:f0:6b:35:a1:49:41:dc:cf:4f:99:5e:be:c1:f6:57: c2:e2:f1:95:a0:9c:6f:5c:73:38:f6:e3:fa:17:c7:e8:a3:95: 42:c0:86:fd:31:a6:dd:19:0a:1d:ff:db:7e:4b:e6:8e:da:5f: e1:b6:23:60:48:81:05:3f:cd:83:34:7f:a7:f0:fd:b9:a6:f3: 4e:ca:fc:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjUwNTE0MTYwODM2WhcNMjUwNTIxMTYwODM2WjAYMRYwFAYD VQQDEw02ODI0YzAwNS01MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xFxbTdLMTt0BwF1NlaYNXeOuJqNMnuo//sG4y2gLaFLdLg5z9BZ06t26MQp t6XrqYDsfkZWV0LN4yCgBHR4Oz86mfejAVihig8uSI04xuluLgJD2rEEN0r055bm wq/cJ724mJcSnW2gE1ED4A6GS3vocsyUOkWAQeNrbzDFYC188Y3suO3lvCRqS2nu S7VNTMDXgn+Vn2McrFBCq/+6qOi89oizmHDPmZz0tK9iVpSpfBLKgXWk5pGRx/kr rrok4iq2+6Qukz9s4GYLpEXlihwlVH34m8M1fZENJTQ4lyVWQ5Ck+lq9FCu4dybQ Kw6HN0DsI75dUBJGME9uYxbQDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPb5v58v ci7VRdLXirZR8AV7naUAMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV0FIAgXfc7vYeQ9/Cvnug/XmqtB8YSsWPwEysU2k6feWURS/VNiGH KAUTScDjCmAho/bupsBbtgCowp6UO5YhpafloCXafJBDrYnxoaZWHBCYq0jGANBh ao+ZeNdcxcBzkv5sK4VIu4YoORFtADc2a1qz7qDZTRsLWXV0az2nwW4QTIYhX2BC uupaIsA1Ja+IenTOxvlaVZAR86vQ5smHoeZ4aWB42sBJLUfmPk9wECDFJq3+AQbw azWhSUHcz0+ZXr7B9lfC4vGVoJxvXHM49uP6F8foo5VCwIb9MabdGQod/9t+S+aO 2l/htiNgSIEFP82DNH+n8P25pvNOyvz6 -----END CERTIFICATE-----Generated at Fri May 16 13:02:15 2025 by rpki-client