$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json) Hash identifier: ua7CDXoSDD7lDgzv2gn+K8s71I4LC8PYHpyGas/ja20= Subject key identifier: E5:C7:FB:1E:33:FD:1B:83:74:EE:5A:69:B2:01:7D:75:9B:63:89:81 Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft Manifest number: 065B Signing time: Mon 12 May 2025 22:15:48 +0000 Manifest this update: Mon 12 May 2025 22:15:47 +0000 Manifest next update: Mon 19 May 2025 22:15:47 +0000 Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: Vk82McXyFr2r0RC8JgQ6J+Rg2CehL+pZc5oufAD/4g8=) 2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: ut9kkhaYpPkueMT9PUXekkExmboRUtj4jv3lyVcffmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Validity Not Before: May 12 22:15:47 2025 GMT Not After : May 19 22:15:47 2025 GMT Subject: CN=68227314-2f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:d5:fe:77:6b:c0:0e:8e:e5:80:9b:a4:da: f4:53:e9:22:9f:b8:2e:15:6d:96:39:91:0b:b9:4e: 15:fc:37:05:7f:f3:c9:29:78:28:18:a6:de:46:ea: 53:cc:7a:7b:c1:08:94:62:f7:bc:b2:d5:d7:3d:87: 97:de:8b:74:91:06:f1:ae:71:3c:be:86:82:6a:06: 01:6b:a0:69:4c:92:7f:bb:e3:a1:0f:cc:d0:f3:6a: d7:06:15:1a:4e:5b:90:9b:6f:b4:62:e2:d3:49:87: c1:66:b3:d8:b3:c5:2d:31:7e:a0:9e:6a:fc:03:bb: cc:3c:cb:47:a5:45:19:7e:2e:4f:74:9b:3f:fe:64: 20:d1:c4:35:e5:a9:34:fc:f0:3b:3a:79:0d:b0:c2: 01:41:75:c8:03:6c:a3:0c:9d:f7:33:4d:59:74:e1: 34:de:cc:ac:b0:b2:c9:86:e0:13:40:21:02:64:ea: ed:24:d4:1c:38:f9:cd:7f:ff:58:12:b6:69:0c:4f: 68:55:86:1a:99:f6:6d:2f:c0:ae:51:56:4f:95:f6: 45:46:4a:fe:e2:4f:ea:e4:3f:bf:5a:a1:58:12:44: 49:66:32:c5:51:29:b1:77:41:ff:69:89:f2:86:ad: dc:77:b9:5e:19:04:54:90:fe:eb:c3:87:20:16:4d: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C7:FB:1E:33:FD:1B:83:74:EE:5A:69:B2:01:7D:75:9B:63:89:81 X509v3 Authority Key Identifier: keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:25:43:62:d3:6c:37:1e:e3:bc:35:6d:e8:8c:eb:74:1e:cf: 91:3b:d6:30:da:79:c8:0e:60:08:f2:59:5a:00:92:b4:06:86: 64:4b:53:31:48:f7:b7:c6:c3:23:a4:87:dc:ed:20:b1:f1:cf: 3b:ba:bb:ce:19:ae:f6:14:b3:b4:82:75:c6:ea:0e:f8:77:68: aa:fb:30:7e:1c:d9:23:ba:98:ee:1c:ba:79:9d:47:93:dc:e9: 51:e5:8f:6e:a8:d9:cc:f5:68:5c:cb:f2:3d:93:0b:01:f3:8d: ae:e3:92:b5:33:3a:3b:27:df:ef:3c:8e:09:7a:87:c4:e9:b5: 56:66:ab:e3:cd:df:b0:5f:7c:9e:6a:13:29:8d:74:96:08:61: ca:1e:a7:1b:b3:56:85:f2:49:7a:17:c0:18:7a:18:81:81:5a: 2d:64:74:0b:83:c6:d6:e2:04:f1:10:f1:7e:56:d2:35:11:03: 09:94:9c:78:83:2c:d7:af:86:fc:be:f2:69:66:a9:72:8d:08: 41:6e:b6:0a:64:ed:1d:d3:21:90:14:9d:b4:fd:d1:a9:38:f4: 94:d2:f2:45:13:90:11:7d:7b:bc:64:18:06:4c:03:97:6f:5e: f9:26:44:d2:9c:f6:08:9c:3f:ea:d6:70:12:6c:95:c6:bc:6a: ef:62:8e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3 NEVERUJCQkYwHhcNMjUwNTEyMjIxNTQ3WhcNMjUwNTE5MjIxNTQ3WjAYMRYwFAYD VQQDEw02ODIyNzMxNC0yZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8vV/ndrwA6O5YCbpNr0U+kin7guFW2WOZELuU4V/DcFf/PJKXgoGKbeRupT zHp7wQiUYve8stXXPYeX3ot0kQbxrnE8voaCagYBa6BpTJJ/u+OhD8zQ82rXBhUa TluQm2+0YuLTSYfBZrPYs8UtMX6gnmr8A7vMPMtHpUUZfi5PdJs//mQg0cQ15ak0 /PA7OnkNsMIBQXXIA2yjDJ33M01ZdOE03syssLLJhuATQCECZOrtJNQcOPnNf/9Y ErZpDE9oVYYamfZtL8CuUVZPlfZFRkr+4k/q5D+/WqFYEkRJZjLFUSmxd0H/aYny hq3cd7leGQRUkP7rw4cgFk0EEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXH+x4z /RuDdO5aabIBfXWbY4mBMB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1 NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkJUNi02w3HuO8NW3ojOt0Hs+RO9Yw2nnIDmAI8llaAJK0BoZkS1Mx SPe3xsMjpIfc7SCx8c87urvOGa72FLO0gnXG6g74d2iq+zB+HNkjupjuHLp5nUeT 3OlR5Y9uqNnM9Whcy/I9kwsB842u45K1Mzo7J9/vPI4JeofE6bVWZqvjzd+wX3ye ahMpjXSWCGHKHqcbs1aF8kl6F8AYehiBgVotZHQLg8bW4gTxEPF+VtI1EQMJlJx4 gyzXr4b8vvJpZqlyjQhBbrYKZO0d0yGQFJ20/dGpOPSU0vJFE5ARfXu8ZBgGTAOX b175JkTSnPYInD/q1nASbJXGvGrvYo7Z -----END CERTIFICATE-----Generated at Wed May 14 22:50:28 2025 by rpki-client