$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: SL4cfe3xWeJ5YLN50yBQiozJR6MpLumVkwVURy2zAAA= Subject key identifier: B9:9B:C7:2C:71:03:25:E3:56:4F:DC:A5:54:45:67:A2:F9:F6:77:41 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 79 Signing time: Thu 15 May 2025 06:00:05 +0000 Manifest this update: Thu 15 May 2025 06:00:05 +0000 Manifest next update: Thu 22 May 2025 06:00:05 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: i/jcQVqw/qbpUmae5Ha9po6H0QX/oT6/O/FzGxnsLoM=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: May 15 06:00:05 2025 GMT Not After : May 22 06:00:05 2025 GMT Subject: CN=682582e5-27b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:00:02:e2:98:13:86:61:99:d4:f9:aa:5d: cb:cd:16:02:8a:25:ce:33:34:ad:74:37:2f:6e:bb: a8:3d:d2:a7:e2:1e:f5:0f:8a:d5:65:c1:06:09:ad: a5:07:eb:b4:c6:94:99:85:eb:8f:e5:2a:4d:ee:3e: 05:56:18:2e:8e:34:0b:fe:57:86:56:41:bb:0c:9f: aa:93:c1:cc:79:a4:ee:e0:bb:a8:7f:16:7f:11:46: fe:93:2c:e0:b9:40:d8:79:9a:47:ba:68:45:82:08: e7:5e:b4:7c:db:21:25:b6:75:e8:88:ef:dd:e8:4f: 41:8c:17:e9:50:d6:8f:6e:3a:d0:65:8e:3d:42:2d: b4:c7:8d:c5:02:95:62:a9:de:62:e2:77:29:66:66: 63:42:88:70:71:a0:bb:c5:b2:b0:d4:50:72:2c:82: 3e:93:3e:7a:d8:36:19:1a:f5:09:be:81:29:f9:00: 7e:9e:08:13:3a:d0:a2:c2:e5:90:02:17:9b:c5:cd: de:39:7c:6e:16:cc:3b:b1:c5:cc:10:25:ba:7a:ec: 08:71:d2:5b:e2:e7:20:bc:84:90:d4:78:2a:78:11: a6:64:2d:61:25:2a:e7:34:09:49:90:d1:0a:51:d4: 89:2a:5d:ce:03:42:57:55:5c:8c:16:08:98:e4:e5: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9B:C7:2C:71:03:25:E3:56:4F:DC:A5:54:45:67:A2:F9:F6:77:41 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:fd:11:06:99:09:c0:36:e1:fe:18:8a:4c:2e:e1:81:3f: 23:42:04:56:8f:fb:1d:3f:ca:84:0e:58:bf:2b:1e:4d:f3:7d: a6:82:6f:a4:74:9b:a1:61:67:db:d4:04:16:a1:c6:56:6b:c5: 8d:81:2b:6e:5a:23:f0:46:84:98:54:77:bf:cc:3a:15:79:1b: d5:b3:42:69:2c:7a:8e:87:bd:90:fc:13:7e:65:08:0f:32:a4: 2b:95:2e:97:76:65:4f:d6:d4:dc:e4:89:7a:06:6e:03:ad:2d: 01:25:e6:3e:b1:8f:ef:d4:bd:ea:d2:e7:7b:0c:cd:ee:a6:ea: 7f:6e:fd:c7:0f:9b:34:05:98:e8:fd:e8:8e:59:47:43:14:98: af:f0:1a:17:b0:be:ab:fa:ae:b7:da:db:75:8d:92:c6:71:ca: 44:67:e7:f4:5c:9b:8c:9e:46:46:b1:18:32:96:50:5c:0d:d9: 48:d1:e3:f6:4f:03:1c:02:ed:2c:d6:1f:ee:72:ab:27:a4:e3: 2c:45:f8:13:0e:bf:a5:43:02:7c:b1:83:63:bb:f9:b7:06:fc: 0e:2b:39:8f:aa:13:d3:c8:ed:0c:53:3d:91:4c:65:19:09:eb: 0e:37:44:9d:68:80:14:42:92:65:08:f7:89:3d:4e:59:ee:5b: e8:8a:c0:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoREQ3QzhEMEY0NzhGOUJFNkFCRjczOUMwNEY1QjVCRTRE QzlGNjFGODAeFw0yNTA1MTUwNjAwMDVaFw0yNTA1MjIwNjAwMDVaMBgxFjAUBgNV BAMTDTY4MjU4MmU1LTI3YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo/AAC4pgThmGZ1PmqXcvNFgKKJc4zNK10Ny9uu6g90qfiHvUPitVlwQYJraUH 67TGlJmF64/lKk3uPgVWGC6ONAv+V4ZWQbsMn6qTwcx5pO7gu6h/Fn8RRv6TLOC5 QNh5mke6aEWCCOdetHzbISW2deiI793oT0GMF+lQ1o9uOtBljj1CLbTHjcUClWKp 3mLidylmZmNCiHBxoLvFsrDUUHIsgj6TPnrYNhka9Qm+gSn5AH6eCBM60KLC5ZAC F5vFzd45fG4WzDuxxcwQJbp67Ahx0lvi5yC8hJDUeCp4EaZkLWElKuc0CUmQ0QpR 1IkqXc4DQldVXIwWCJjk5Tr1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuZvHLHED JeNWT9ylVEVnovn2d0EwHwYDVR0jBBgwFoAU3XyND0ePm+ar9znAT1tb5NyfYfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzRDMDk4NjJFNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55Zllm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1h5TkQwZVBtLWFyOXpuQVQxdGI1TnlmWWZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RTU1LzRDMDk4NjJFNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyLzNYeU5EMGVQbS1h cjl6bkFUMXRiNU55ZllmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIH5/REGmQnANuH+GIpMLuGBPyNCBFaP+x0/yoQOWL8rHk3zfaaCb6R0 m6FhZ9vUBBahxlZrxY2BK25aI/BGhJhUd7/MOhV5G9WzQmkseo6HvZD8E35lCA8y pCuVLpd2ZU/W1NzkiXoGbgOtLQEl5j6xj+/UverS53sMze6m6n9u/ccPmzQFmOj9 6I5ZR0MUmK/wGhewvqv6rrfa23WNksZxykRn5/Rcm4yeRkaxGDKWUFwN2UjR4/ZP AxwC7SzWH+5yqyek4yxF+BMOv6VDAnyxg2O7+bcG/A4rOY+qE9PI7QxTPZFMZRkJ 6w43RJ1ogBRCkmUI94k9TlnuW+iKwE4= -----END CERTIFICATE-----Generated at Thu May 15 19:22:20 2025 by rpki-client