$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: /ZIusIgnQvxnD2BGf8dxc3fCB79ZK+h0Hl2kzZQK0SM= Subject key identifier: ED:33:C2:15:0E:3E:F4:50:0A:0B:41:22:DA:B9:5B:03:95:23:66:FA Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 3C Signing time: Fri 09 May 2025 06:35:21 +0000 Manifest this update: Fri 09 May 2025 06:35:21 +0000 Manifest next update: Fri 16 May 2025 06:35:21 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: qLhEQOkxhiO3Je3imAd6O4bjl9ztg+5jr4jeWAmLSpQ=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: May 9 06:35:21 2025 GMT Not After : May 16 06:35:21 2025 GMT Subject: CN=681da229-db6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:af:7f:7d:82:71:6f:44:64:d7:00:fc:2f: ec:4b:86:c7:0c:6c:b9:54:48:78:bc:92:c3:39:dc: 87:30:27:ce:06:36:20:cd:24:6e:48:5d:b5:01:be: 25:cf:5a:4e:e9:fa:53:0c:7e:f5:f1:81:8f:71:ec: b6:cf:e6:9c:d1:62:16:98:db:ce:21:f6:ea:f3:ac: 88:6a:6d:ad:8a:1b:50:84:fb:92:50:90:fd:6f:55: 2a:c9:ad:5b:30:d1:c9:92:29:93:03:7f:56:5d:9a: 49:e1:ca:91:ed:a8:03:cc:99:23:5c:9d:30:53:48: d6:ba:75:fd:a7:69:4e:f7:96:fa:5d:a7:ae:6e:58: e5:a7:98:4c:ad:35:24:13:16:7e:8f:67:e4:92:4c: 42:b7:0f:0c:da:f0:4e:5a:a1:18:b0:60:27:47:13: 86:75:9f:9c:ad:7d:6e:4e:ed:85:ef:18:45:4a:6e: e1:27:45:16:c3:cf:b9:aa:fc:ec:bb:a0:59:18:4f: f1:2e:a3:8d:d2:f8:0d:fb:53:73:13:fc:e5:b3:d2: ed:18:db:58:84:39:b3:1e:2c:f0:df:53:c8:9d:e2: e8:13:33:f1:5e:ca:20:ef:43:de:86:5c:12:f6:f2: 15:4d:34:fc:22:66:b9:72:fc:83:6e:46:fe:34:ff: ba:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:33:C2:15:0E:3E:F4:50:0A:0B:41:22:DA:B9:5B:03:95:23:66:FA X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ad:4d:ed:9e:eb:26:9e:09:79:f3:c7:b0:b1:98:43:ec:1a: 5a:e4:02:ea:dd:4d:b1:b7:f1:57:04:e7:f2:6a:ba:8e:d3:b7: f0:f2:ba:e1:12:39:fd:20:1d:b1:c7:0f:9d:41:cc:0e:bd:b3: 23:46:57:4d:f4:ec:38:24:1e:57:5c:a0:97:8a:4b:2a:a6:15: 41:b7:06:4d:ec:4f:de:16:7e:fc:dd:99:55:59:90:93:79:2e: ff:3a:6b:20:13:d2:14:a5:ca:eb:32:f8:32:91:af:cf:18:82: b3:10:5a:57:0f:c9:09:a6:c9:42:23:9d:eb:e7:be:b7:21:2a: 23:62:18:6e:9d:37:89:80:b4:9d:74:31:44:94:65:82:e4:ed: a3:8c:9e:b6:f2:6c:e3:a8:3d:61:1f:97:85:a1:77:27:53:70: 3b:a7:90:61:5e:1a:07:1e:90:ce:e7:80:69:a9:e8:1b:27:8b: bf:68:78:c0:54:65:1f:bb:01:9b:95:c3:5e:82:2e:94:99:5f: 73:b9:d8:0e:7b:2a:a6:4e:dd:60:ed:7e:04:31:00:4e:15:78: 0d:d0:8e:12:dd:cb:06:16:5b:7a:91:cf:47:9e:68:db:c5:de: e6:45:d5:16:fe:ea:61:b8:e0:89:8d:7d:c7:7d:0e:9d:49:89: f1:0b:ff:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA1MDkwNjM1MjFaFw0yNTA1MTYwNjM1MjFaMBgxFjAUBgNV BAMTDTY4MWRhMjI5LWRiNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV1a9/fYJxb0Rk1wD8L+xLhscMbLlUSHi8ksM53IcwJ84GNiDNJG5IXbUBviXP Wk7p+lMMfvXxgY9x7LbP5pzRYhaY284h9urzrIhqba2KG1CE+5JQkP1vVSrJrVsw 0cmSKZMDf1ZdmknhypHtqAPMmSNcnTBTSNa6df2naU73lvpdp65uWOWnmEytNSQT Fn6PZ+SSTEK3Dwza8E5aoRiwYCdHE4Z1n5ytfW5O7YXvGEVKbuEnRRbDz7mq/Oy7 oFkYT/Euo43S+A37U3MT/OWz0u0Y21iEObMeLPDfU8id4ugTM/FeyiDvQ96GXBL2 8hVNNPwiZrly/INuRv40/7qjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7TPCFQ4+ 9FAKC0Ei2rlbA5UjZvowHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJytTe2e6yaeCXnzx7CxmEPsGlrkAurdTbG38VcE5/Jquo7Tt/DyuuES Of0gHbHHD51BzA69syNGV0307DgkHldcoJeKSyqmFUG3Bk3sT94WfvzdmVVZkJN5 Lv86ayAT0hSlyusy+DKRr88YgrMQWlcPyQmmyUIjnevnvrchKiNiGG6dN4mAtJ10 MUSUZYLk7aOMnrbybOOoPWEfl4WhdydTcDunkGFeGgcekM7ngGmp6Bsni79oeMBU ZR+7AZuVw16CLpSZX3O52A57KqZO3WDtfgQxAE4VeA3QjhLdywYWW3qRz0eeaNvF 3uZF1Rb+6mG44ImNfcd9Dp1JifEL/1A= -----END CERTIFICATE-----Generated at Sat May 10 13:03:39 2025 by rpki-client