$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: R8uvwvQAmVhp/gdEgNC6gYdj9sxIV4X3zEUlROOUiSM= Subject key identifier: 4F:F7:17:95:99:FF:F3:72:96:3F:D3:BA:A5:B2:98:8C:4E:44:44:B5 Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 081D Signing time: Mon 12 May 2025 20:45:50 +0000 Manifest this update: Mon 12 May 2025 20:45:50 +0000 Manifest next update: Mon 19 May 2025 20:45:50 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: UkwcilNkH5SVyjDmtmUi7XwSEF9JbUpjV+2PauZTcyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: May 12 20:45:50 2025 GMT Not After : May 19 20:45:50 2025 GMT Subject: CN=68225dfe-1133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2a:ef:40:8c:24:59:ed:0d:78:70:de:44:7b: c1:19:f8:34:7d:e3:d2:e3:d5:62:80:d0:74:93:b6: 0b:ab:12:79:84:69:68:0c:50:0e:f3:1d:86:68:71: 7a:fa:b2:97:9c:e6:6f:d7:17:d0:ba:81:78:b1:b2: 7f:3b:c2:9f:38:55:07:c7:0e:75:fe:51:a2:1d:2d: ad:de:4b:a4:d1:d8:75:03:ca:74:55:7f:54:1b:77: e0:bc:36:bb:5c:fe:6d:bd:32:b0:51:e5:f4:72:6a: fe:0f:55:79:57:99:3a:17:28:fc:c3:c7:69:b1:d8: 11:12:59:15:0b:1d:ee:15:7c:15:a0:e2:1b:a5:74: 81:1b:db:fd:e1:00:93:5e:60:92:f9:37:d6:fa:31: 4d:4e:f7:d0:5f:1f:71:bc:d2:b2:d1:30:8a:68:97: 36:01:05:d4:5d:2a:68:a3:c3:64:fe:26:47:1d:f7: 3a:58:15:ab:aa:82:7f:1f:dc:67:81:ab:80:8a:6d: 5e:1f:7f:a9:04:73:39:ae:d0:4b:b1:e3:b3:19:af: e9:b0:47:0c:1e:60:13:d5:68:f7:23:fe:60:b2:b5: 5d:4f:fe:5e:49:d4:b1:cb:18:ce:dc:ff:f0:a8:a0: cd:34:68:7a:db:e8:fc:79:1d:a3:58:46:fa:6d:8f: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F7:17:95:99:FF:F3:72:96:3F:D3:BA:A5:B2:98:8C:4E:44:44:B5 X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e2:ae:29:e3:24:e4:5e:03:6d:63:d2:4d:13:45:be:bd:70: e7:1e:a1:71:42:93:d2:58:cc:b0:63:49:c2:e3:fd:d6:9c:5e: 7b:75:db:16:e4:99:31:49:a3:18:39:6b:3e:5f:7c:1e:7d:13: 8f:d1:33:5f:fc:ba:ef:08:59:ee:59:21:49:4e:10:78:7d:34: b4:4a:58:7c:2d:72:59:46:04:0b:06:44:ad:5b:53:a9:b9:ff: 56:29:9e:b9:b0:b2:87:8b:38:1d:ac:30:17:28:6c:74:98:20: b3:00:70:a5:40:22:9a:05:56:97:9f:a8:38:02:a0:6b:3e:42: 67:b0:8f:d5:9b:6b:11:2b:cf:c2:78:d3:55:8e:bf:ce:0a:a0: 94:85:26:af:4d:01:d2:90:d2:27:e7:8f:2f:de:81:ed:4c:d4: 10:4e:c6:a7:e7:b2:7a:ee:a3:ef:00:5c:b8:d8:0d:2c:62:82: f9:cd:f7:80:7d:9c:63:1f:94:36:cd:8d:02:9f:a8:fa:ae:84: b1:8e:51:84:31:1e:d9:29:d1:1f:26:ed:15:a3:cd:bd:f4:31: 0e:52:b0:fb:59:ec:d6:fe:1a:c9:29:c1:08:03:82:7d:71:ac: 88:aa:4a:9e:97:e5:5c:86:b9:bc:43:56:b1:7a:ff:f9:3f:fd: 7d:bb:a4:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjUwNTEyMjA0NTUwWhcNMjUwNTE5MjA0NTUwWjAYMRYwFAYD VQQDEw02ODIyNWRmZS0xMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyrvQIwkWe0NeHDeRHvBGfg0fePS49VigNB0k7YLqxJ5hGloDFAO8x2GaHF6 +rKXnOZv1xfQuoF4sbJ/O8KfOFUHxw51/lGiHS2t3kuk0dh1A8p0VX9UG3fgvDa7 XP5tvTKwUeX0cmr+D1V5V5k6Fyj8w8dpsdgRElkVCx3uFXwVoOIbpXSBG9v94QCT XmCS+TfW+jFNTvfQXx9xvNKy0TCKaJc2AQXUXSpoo8Nk/iZHHfc6WBWrqoJ/H9xn gauAim1eH3+pBHM5rtBLseOzGa/psEcMHmAT1Wj3I/5gsrVdT/5eSdSxyxjO3P/w qKDNNGh62+j8eR2jWEb6bY/xuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/3F5WZ //Nylj/TuqWymIxORES1MB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+4q4p4yTkXgNtY9JNE0W+vXDnHqFxQpPSWMywY0nC4/3WnF57ddsW 5JkxSaMYOWs+X3wefROP0TNf/LrvCFnuWSFJThB4fTS0Slh8LXJZRgQLBkStW1Op uf9WKZ65sLKHizgdrDAXKGx0mCCzAHClQCKaBVaXn6g4AqBrPkJnsI/Vm2sRK8/C eNNVjr/OCqCUhSavTQHSkNIn548v3oHtTNQQTsan57J67qPvAFy42A0sYoL5zfeA fZxjH5Q2zY0Cn6j6roSxjlGEMR7ZKdEfJu0Vo8299DEOUrD7WezW/hrJKcEIA4J9 cayIqkqel+Vchrm8Q1axev/5P/19u6SE -----END CERTIFICATE-----Generated at Tue May 13 14:15:02 2025 by rpki-client