$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: 3SdHN/kmHKNfRIiCTO3ajXBsJwyG4WmbB5YJgEIjxPQ= Subject key identifier: 97:6E:84:01:38:ED:32:91:FC:22:D4:98:0C:E9:2C:1A:AE:B6:2E:6A Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: FC Signing time: Sun 11 May 2025 04:03:10 +0000 Manifest this update: Sun 11 May 2025 04:03:09 +0000 Manifest next update: Sun 18 May 2025 04:03:09 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: S6WsaLC6ol8dCHUicysScYI4ubBapVgU/l9EN5Ph3+k=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: May 11 04:03:09 2025 GMT Not After : May 18 04:03:09 2025 GMT Subject: CN=6820217e-2944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:ed:35:61:9d:65:ea:69:02:f5:1a:8a:a9: e1:4d:a1:30:bd:d6:13:80:23:0d:91:d3:3b:86:50: 79:c8:68:50:52:3b:9b:46:3b:75:3d:ae:9a:21:d0: 06:13:d8:9f:72:97:db:9b:7a:6a:f2:1a:5e:01:93: 8c:08:f6:62:7a:d4:e9:61:32:0c:31:ca:52:61:6c: 9f:82:bf:a4:ae:03:b5:26:b3:de:61:39:3b:e4:6d: 3b:d8:cc:01:36:21:2b:13:cd:46:d0:31:04:c8:fb: dc:f2:01:32:7a:9e:15:82:5e:78:7e:05:40:f1:68: e7:e7:1a:e9:82:fa:d5:d6:33:a9:f5:eb:4d:b7:74: d7:95:1d:01:30:2a:fc:c4:d9:50:5c:36:d4:08:34: 52:76:f4:65:3d:fd:ba:44:39:11:1f:1c:eb:9a:ca: 4a:fc:ba:2e:75:43:e2:00:75:df:0c:ab:5e:24:3f: 1d:99:75:84:89:c8:63:1e:e0:f0:86:be:dc:e7:06: 03:2c:60:99:fe:8d:4d:6a:d9:36:5e:1c:e5:6d:6f: 39:17:99:15:51:c6:3f:aa:c1:d7:9a:e8:0b:fb:34: 3e:23:db:0c:f8:9b:24:60:a1:c5:f8:6f:30:21:cd: fe:6c:df:ef:a7:e4:6d:39:d0:e0:29:a0:06:fe:04: bf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6E:84:01:38:ED:32:91:FC:22:D4:98:0C:E9:2C:1A:AE:B6:2E:6A X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:51:9f:5a:a6:a3:a3:d4:52:64:ee:d8:41:2d:03:91:88:12: b3:61:08:f0:7b:7c:6d:c8:4d:5e:2a:52:f0:6f:d6:28:58:4a: ef:b2:2f:07:46:8e:8f:4f:be:b3:b6:e6:d6:29:4a:7e:f1:7b: 62:2d:54:1e:bc:ed:8c:90:7a:7b:7e:bc:68:29:95:c3:ed:b6: e4:ff:ac:7d:ed:e7:0f:af:bc:c4:6e:da:c3:52:71:d0:70:24: ab:f6:38:ac:51:4e:5b:2f:7d:1f:de:27:16:da:32:d9:e4:78: 4d:b1:92:fd:2b:7d:a7:5d:18:63:b3:b4:f3:91:a4:bd:b6:c3: 97:2c:bf:c2:9c:0e:9d:1c:96:bd:a9:16:45:9c:32:79:47:1b: 13:02:bc:05:b5:8e:32:d8:04:53:db:f7:43:c8:32:70:6c:78: 07:4c:e5:82:0f:f3:8b:fa:e4:ce:dc:27:8d:c0:d3:82:88:19: 52:f3:fc:f6:86:2c:a9:81:18:5a:a6:83:82:80:14:c1:f8:66: 89:5a:8c:b5:cd:0a:8e:08:cf:2c:71:c6:fc:8c:14:49:2d:07: bb:b1:be:da:b2:99:a9:0e:8f:a0:b2:ad:d3:5e:a3:38:83:63: a4:33:89:0f:60:4e:18:53:d8:bd:86:aa:14:9c:74:19:bc:89: 59:e4:ac:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUwNTExMDQwMzA5WhcNMjUwNTE4MDQwMzA5WjAYMRYwFAYD VQQDEw02ODIwMjE3ZS0yOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkztNWGdZeppAvUaiqnhTaEwvdYTgCMNkdM7hlB5yGhQUjubRjt1Pa6aIdAG E9ifcpfbm3pq8hpeAZOMCPZietTpYTIMMcpSYWyfgr+krgO1JrPeYTk75G072MwB NiErE81G0DEEyPvc8gEyep4Vgl54fgVA8Wjn5xrpgvrV1jOp9etNt3TXlR0BMCr8 xNlQXDbUCDRSdvRlPf26RDkRHxzrmspK/LoudUPiAHXfDKteJD8dmXWEichjHuDw hr7c5wYDLGCZ/o1Natk2XhzlbW85F5kVUcY/qsHXmugL+zQ+I9sM+JskYKHF+G8w Ic3+bN/vp+RtOdDgKaAG/gS/OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJduhAE4 7TKR/CLUmAzpLBquti5qMB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzUZ9apqOj1FJk7thBLQORiBKzYQjwe3xtyE1eKlLwb9YoWErvsi8H Ro6PT76ztubWKUp+8XtiLVQevO2MkHp7frxoKZXD7bbk/6x97ecPr7zEbtrDUnHQ cCSr9jisUU5bL30f3icW2jLZ5HhNsZL9K32nXRhjs7TzkaS9tsOXLL/CnA6dHJa9 qRZFnDJ5RxsTArwFtY4y2ART2/dDyDJwbHgHTOWCD/OL+uTO3CeNwNOCiBlS8/z2 hiypgRhapoOCgBTB+GaJWoy1zQqOCM8sccb8jBRJLQe7sb7aspmpDo+gsq3TXqM4 g2OkM4kPYE4YU9i9hqoUnHQZvIlZ5KxN -----END CERTIFICATE-----Generated at Mon May 12 02:23:10 2025 by rpki-client