$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: zVDZQK95RpEJaz7q/TATJG6954wgWx+8nOqYsv3H5r0= Subject key identifier: 8A:3D:8D:67:91:BD:1C:62:68:91:03:AC:63:54:B9:19:C8:42:96:E8 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 90 Signing time: Sat 17 May 2025 05:55:20 +0000 Manifest this update: Sat 17 May 2025 05:55:19 +0000 Manifest next update: Sat 24 May 2025 05:55:19 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: 3RVGO03T5YZv9Q+L9uLj3Y3J6VS95NjTSgKk2FGDRBI=) 2: 7DAE5EB25AE011EFBA58F07FC4F9AE02.roa (hash: Wp/6wyEXkRXlx5jv/S/ukoLxXoe3Zkz5HAA1XVAZayI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: May 17 05:55:19 2025 GMT Not After : May 24 05:55:19 2025 GMT Subject: CN=682824c7-808e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:3e:ec:93:f8:8c:cd:c8:09:83:39:c4:d0: ee:df:1d:13:a7:7f:c7:f6:06:c2:9c:d9:c4:fa:9b: 36:4b:4a:57:8f:33:b0:92:74:47:aa:cd:17:fd:14: 2f:96:d8:08:6c:3e:43:d7:b8:61:55:6a:b2:57:4c: 33:e6:25:5a:57:34:3b:56:50:2c:99:c1:16:29:64: ea:d9:fd:36:8b:fc:58:9e:7d:e7:3b:e7:4b:36:33: 25:98:c1:d7:ac:38:27:c0:c0:03:03:26:c7:41:d5: 4f:9c:5c:c8:b9:0d:ab:f6:ac:da:c4:a3:60:b1:3f: a3:e9:99:0d:d9:08:da:82:ce:bf:b0:2f:71:ae:c8: 06:00:83:68:57:1c:53:77:04:9f:3a:0a:14:92:de: 99:bf:eb:1f:c2:4a:b9:c4:25:39:2f:ac:fd:3e:99: 00:9b:6c:77:b3:ae:dc:3b:90:d2:21:99:ad:bb:fd: 2e:64:52:ad:8e:f9:5f:b9:03:e8:bf:a7:ae:f3:89: 74:a6:40:dc:5d:fd:3a:41:fe:d5:8c:c4:ab:62:a6: c2:35:e4:6f:80:4b:ee:b9:9c:fd:e7:31:d7:e5:f3: 2e:4c:63:1f:c9:b0:bf:c7:44:ef:17:80:01:92:78: 11:94:85:f7:3a:b3:40:3b:5f:1f:95:1b:65:20:67: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3D:8D:67:91:BD:1C:62:68:91:03:AC:63:54:B9:19:C8:42:96:E8 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:57:f0:b3:97:cd:af:84:fb:a0:61:ac:b8:12:d0:ce:5c:61: 47:0b:6f:34:9e:2f:17:8e:50:67:1d:be:9b:fc:60:fd:9a:56: 5e:5c:d3:38:5a:bf:a1:b9:71:91:56:bc:79:66:a7:0c:5b:aa: 33:56:ce:5c:6b:ba:f0:8b:af:18:2a:16:3d:46:1b:fe:c4:ba: b2:dc:58:6f:ef:8f:20:75:73:bc:03:a9:bf:1a:22:16:40:3e: 2b:96:2f:36:fb:b0:26:bc:69:45:59:35:d3:ab:ff:f9:49:cb: 57:26:43:c5:05:c5:e8:dc:7a:e4:77:8d:a0:58:21:41:41:16: 51:b1:a2:4c:5c:cb:12:8a:f4:11:97:b5:5f:51:3b:ec:58:b0: e3:e7:33:17:d4:da:5e:4e:e4:e6:9a:82:e4:11:62:b9:e4:79: 32:6c:e4:44:75:61:cd:c3:34:b0:ce:77:cc:3d:e3:2a:00:c1: 5c:8a:d6:cd:f3:e5:59:d4:af:32:fc:02:fc:24:5e:32:70:66: 8c:e4:6d:f3:b9:7d:15:b1:5d:88:a4:c1:33:bd:a5:b8:7f:e6: 74:83:af:f2:b1:c7:4e:72:82:5e:c5:48:83:99:88:5b:ee:ba: a4:13:95:ea:89:98:0d:22:8f:23:a9:d2:e7:77:a9:1b:e5:28: 71:b3:c3:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUwNTE3MDU1NTE5WhcNMjUwNTI0MDU1NTE5WjAYMRYwFAYD VQQDEw02ODI4MjRjNy04MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZg+7JP4jM3ICYM5xNDu3x0Tp3/H9gbCnNnE+ps2S0pXjzOwknRHqs0X/RQv ltgIbD5D17hhVWqyV0wz5iVaVzQ7VlAsmcEWKWTq2f02i/xYnn3nO+dLNjMlmMHX rDgnwMADAybHQdVPnFzIuQ2r9qzaxKNgsT+j6ZkN2Qjags6/sC9xrsgGAINoVxxT dwSfOgoUkt6Zv+sfwkq5xCU5L6z9PpkAm2x3s67cO5DSIZmtu/0uZFKtjvlfuQPo v6eu84l0pkDcXf06Qf7VjMSrYqbCNeRvgEvuuZz95zHX5fMuTGMfybC/x0TvF4AB kngRlIX3OrNAO18flRtlIGd3cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo9jWeR vRxiaJEDrGNUuRnIQpboMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfV/Czl82vhPugYay4EtDOXGFHC280ni8XjlBnHb6b/GD9mlZeXNM4 Wr+huXGRVrx5ZqcMW6ozVs5ca7rwi68YKhY9Rhv+xLqy3Fhv748gdXO8A6m/GiIW QD4rli82+7AmvGlFWTXTq//5SctXJkPFBcXo3Hrkd42gWCFBQRZRsaJMXMsSivQR l7VfUTvsWLDj5zMX1NpeTuTmmoLkEWK55HkybOREdWHNwzSwznfMPeMqAMFcitbN 8+VZ1K8y/AL8JF4ycGaM5G3zuX0VsV2IpMEzvaW4f+Z0g6/yscdOcoJexUiDmYhb 7rqkE5XqiZgNIo8jqdLnd6kb5Shxs8OH -----END CERTIFICATE-----Generated at Sat May 17 08:30:09 2025 by rpki-client