$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: XvlfXIX3NMCOuPvnWSGN9BxVrvs86PEJ0VJ7kSAl2e0= Subject key identifier: DE:2F:42:4B:6F:ED:5B:6B:EC:8F:C4:9B:3A:7F:E0:1A:C7:B0:94:18 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: D0 Signing time: Tue 13 May 2025 04:52:42 +0000 Manifest this update: Tue 13 May 2025 04:52:42 +0000 Manifest next update: Tue 20 May 2025 04:52:41 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: WojOzCjG+NnmcvDZ8OHNPYAKYiZKQptdu3biAGnmbvE=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: oRCouiUpGQ/m6gpchET77aGzx6bi1ujY4xCm3A9vvYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: May 13 04:52:42 2025 GMT Not After : May 20 04:52:41 2025 GMT Subject: CN=6822d01a-df18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:08:97:31:2e:8a:77:dd:e8:52:e3:a3:22:0c: 3d:f7:da:6c:d2:32:7f:60:de:fd:41:e1:2d:d9:8c: 25:01:07:a8:b7:71:6d:98:f7:ab:e7:95:4a:27:af: 7f:fc:97:2f:ee:fe:71:77:30:73:f1:01:5f:1c:92: ed:20:4a:10:3c:92:9c:a5:b5:55:76:db:01:6e:fd: 82:df:d2:2d:a0:58:66:d1:ca:cd:77:9b:05:c8:59: 02:9b:7e:01:d5:fc:43:24:93:60:92:24:d0:e7:9e: 5a:64:e6:88:46:63:f7:6e:2f:43:de:e6:16:81:0c: f8:13:11:7b:cc:9b:27:ff:11:c2:ac:40:87:3a:49: 7f:1a:bc:91:58:21:04:ba:8c:84:fc:10:32:70:e6: 1f:ca:ec:d9:77:55:3b:4e:92:0d:44:5f:ef:b8:ba: 3c:d7:55:25:97:eb:17:c2:be:a2:50:cb:f5:38:aa: ab:d5:04:6f:56:1d:86:17:ba:5c:25:a3:3e:cf:2c: 02:3a:f8:2c:b2:e9:45:68:a1:df:59:4d:d0:d8:c4: 19:f9:47:52:fc:dd:a7:f7:8e:62:f4:93:70:8c:0e: ce:9d:93:a1:6d:f1:e8:52:51:44:7b:26:e5:18:0d: 89:2e:61:c1:8d:a9:c3:29:67:07:93:93:5a:17:b2: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:42:4B:6F:ED:5B:6B:EC:8F:C4:9B:3A:7F:E0:1A:C7:B0:94:18 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1c:e9:1d:f6:30:10:db:91:32:5a:b1:97:fd:fe:59:ee:65: 72:33:eb:c7:cb:96:a0:be:2e:c3:4c:d5:6c:b7:1c:2c:aa:b4: 8a:0a:ba:d6:7d:5d:60:3d:03:49:dc:08:83:cc:fe:1c:1a:31: 63:5f:e7:68:ff:bf:2a:6e:d0:69:3e:9b:b6:fe:4f:5a:6d:00: cf:91:ac:21:11:ec:7e:50:7c:ec:17:98:9d:82:0e:f9:5d:f8: 92:84:e1:c7:73:79:2f:60:8b:af:37:9c:e7:39:29:2d:97:2b: 28:4b:41:02:18:43:e9:4f:c4:48:23:42:4b:43:76:12:da:e0: 53:7b:db:77:7a:b0:46:60:58:87:69:0d:00:7c:9c:29:c1:b8: 51:b0:0e:9d:8c:6c:e7:8a:c3:da:45:49:0d:ba:c6:bf:9b:9d: 95:58:a1:a4:14:f3:cf:5c:b9:7e:a1:2a:86:30:31:14:0d:74: b7:c6:77:f2:3f:a3:cb:9a:47:4f:43:19:65:3c:9e:23:a9:ca: b3:cd:6f:bf:8d:7b:f5:a1:56:38:12:f3:39:98:00:c2:68:8e: ef:e8:15:bd:b3:2a:99:66:62:25:4a:e2:b3:17:db:51:57:41: 4a:07:d4:b9:e6:10:26:6b:16:b2:68:8f:ea:a8:c5:18:da:f1: 65:03:0c:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjUwNTEzMDQ1MjQyWhcNMjUwNTIwMDQ1MjQxWjAYMRYwFAYD VQQDEw02ODIyZDAxYS1kZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QiXMS6Kd93oUuOjIgw999ps0jJ/YN79QeEt2YwlAQeot3FtmPer55VKJ69/ /Jcv7v5xdzBz8QFfHJLtIEoQPJKcpbVVdtsBbv2C39ItoFhm0crNd5sFyFkCm34B 1fxDJJNgkiTQ555aZOaIRmP3bi9D3uYWgQz4ExF7zJsn/xHCrECHOkl/GryRWCEE uoyE/BAycOYfyuzZd1U7TpINRF/vuLo811Ull+sXwr6iUMv1OKqr1QRvVh2GF7pc JaM+zywCOvgssulFaKHfWU3Q2MQZ+UdS/N2n945i9JNwjA7OnZOhbfHoUlFEeybl GA2JLmHBjanDKWcHk5NaF7J0JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4vQktv 7Vtr7I/Emzp/4BrHsJQYMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQHOkd9jAQ25EyWrGX/f5Z7mVyM+vHy5agvi7DTNVstxwsqrSKCrrW fV1gPQNJ3AiDzP4cGjFjX+do/78qbtBpPpu2/k9abQDPkawhEex+UHzsF5idgg75 XfiShOHHc3kvYIuvN5znOSktlysoS0ECGEPpT8RII0JLQ3YS2uBTe9t3erBGYFiH aQ0AfJwpwbhRsA6djGznisPaRUkNusa/m52VWKGkFPPPXLl+oSqGMDEUDXS3xnfy P6PLmkdPQxllPJ4jqcqzzW+/jXv1oVY4EvM5mADCaI7v6BW9syqZZmIlSuKzF9tR V0FKB9S55hAmaxayaI/qqMUY2vFlAwyR -----END CERTIFICATE-----Generated at Wed May 14 05:03:56 2025 by rpki-client