$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: Nifc8rXwRP4M2WqqKPAxq6ax5TpZbKW6cWetB3BGyvE= Subject key identifier: 95:7D:91:2F:39:B0:4A:D5:7D:42:6C:CA:50:8D:42:58:39:F2:01:DF Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: 6F Signing time: Sun 11 May 2025 05:38:01 +0000 Manifest this update: Sun 11 May 2025 05:38:00 +0000 Manifest next update: Sun 18 May 2025 05:38:00 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: 9CbVVnNpnWkbyBs+Gnj+xyooXUINMCT/ulHJHKSrLQY=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: jpoA3nOwURms9S72GBWIhr5w5HiTb8jNg/HLvSF6ab8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: May 11 05:38:00 2025 GMT Not After : May 18 05:38:00 2025 GMT Subject: CN=682037b8-3a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:c4:54:fd:dc:75:53:e4:eb:42:df:bc:be: b5:a2:66:08:fe:f3:a3:f5:8a:25:05:e2:4e:bb:0e: 9b:4b:c3:af:a1:85:c2:27:9f:d1:04:94:45:f0:41: 6f:9c:4c:49:64:d4:b6:2f:9f:d7:4b:93:a4:74:cf: 40:8e:60:11:c5:dd:68:7a:92:ce:c1:ba:85:58:04: aa:b3:a0:a9:25:e0:f4:28:23:00:3e:b5:7e:e7:d8: 80:29:ac:e0:05:a6:a4:e2:83:4e:de:f1:14:48:69: 2d:7b:23:c6:be:55:87:8d:0a:69:f8:f4:92:da:41: 3f:21:60:13:ff:9c:c3:e2:77:2d:42:3d:eb:dc:f5: 2b:3e:c2:f7:d8:81:51:e2:17:ac:94:c4:4b:04:0f: de:bb:a8:0d:df:fe:31:6e:b3:bc:6d:cf:e7:90:a7: 68:91:18:74:e7:18:30:60:af:c2:52:68:58:0f:fc: d8:c3:2b:57:e7:0a:0d:a4:b1:70:2e:55:8c:1d:96: dc:ee:40:7e:00:25:76:7a:b3:d7:38:6b:7d:68:3f: 01:b6:85:64:c8:c2:cc:10:db:c9:0b:92:78:b0:4c: ba:14:93:24:82:2f:5b:be:9c:44:2e:ae:45:0f:b6: ca:4a:19:b9:dd:b6:f0:3b:f6:f7:85:3a:e6:23:aa: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:91:2F:39:B0:4A:D5:7D:42:6C:CA:50:8D:42:58:39:F2:01:DF X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cd:79:54:05:fb:14:d8:79:25:4a:40:c9:6c:4f:59:da:ca: 15:93:94:61:00:55:e9:ad:68:5e:b5:33:41:0a:63:ee:86:90: ac:f1:48:b9:78:d5:d3:af:e7:ad:b4:3e:88:f4:0e:1e:9a:34: 05:4f:bf:1e:75:ac:a8:e9:92:a7:7b:45:73:18:03:e7:f3:7f: 72:24:07:9d:d2:59:89:08:78:d8:37:21:33:a9:77:29:3a:0f: 4b:7a:0b:e8:4d:8b:33:4f:67:70:72:f2:3c:83:a4:ad:3e:17: ba:f3:b3:20:30:e4:76:46:d1:c4:ae:0b:cd:7b:f6:68:f2:89: 22:61:e5:43:1a:51:1f:9e:f9:b1:55:42:e0:fe:70:ed:78:50: a1:fb:d1:be:2c:0d:b0:4a:6f:ce:34:02:ce:4d:2b:e1:4b:ea: c8:4e:be:eb:62:ec:5a:f9:51:59:21:14:94:79:24:40:97:18: 44:7c:7e:77:92:77:4b:b8:43:b4:06:aa:0e:b5:a4:0f:03:b6: 19:97:07:9f:4e:50:06:2e:bf:3c:7c:3b:de:ae:d8:be:9e:86: 25:6d:f1:79:54:05:f1:20:ba:ad:bb:f4:fc:a2:be:0e:5e:93: af:93:e4:9c:05:0d:b9:37:10:6e:ab:ef:65:e7:06:f2:3a:c9: d4:af:70:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzFDQjExMC8GA1UEBRMoREZFNEFDRENBMEE2MjI0MzY1NEJEMjA5MzY4MjA1NzhF OTJEMjUyNDAeFw0yNTA1MTEwNTM4MDBaFw0yNTA1MTgwNTM4MDBaMBgxFjAUBgNV BAMTDTY4MjAzN2I4LTNhNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBJsRU/dx1U+TrQt+8vrWiZgj+86P1iiUF4k67DptLw6+hhcInn9EElEXwQW+c TElk1LYvn9dLk6R0z0COYBHF3Wh6ks7BuoVYBKqzoKkl4PQoIwA+tX7n2IAprOAF pqTig07e8RRIaS17I8a+VYeNCmn49JLaQT8hYBP/nMPidy1CPevc9Ss+wvfYgVHi F6yUxEsED967qA3f/jFus7xtz+eQp2iRGHTnGDBgr8JSaFgP/NjDK1fnCg2ksXAu VYwdltzuQH4AJXZ6s9c4a31oPwG2hWTIwswQ28kLkniwTLoUkySCL1u+nEQurkUP tspKGbndtvA79veFOuYjql6TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlX2RLzmw StV9QmzKUI1CWDnyAd8wHwYDVR0jBBgwFoAU3+Ss3KCmIkNlS9IJNoIFeOktJSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMUNCL0Y0NENDRjdFODlG MDExRUZBRDI2Qjk3QUM0RjlBRTAyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMy1TczNLQ21Ja05sUzlJSk5vSUZlT2t0SlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MUNCL0Y0NENDRjdFODlGMDExRUZBRDI2Qjk3QUM0RjlBRTAyLzMtU3MzS0NtSWtO bFM5SUpOb0lGZU9rdEpTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7NeVQF+xTYeSVKQMlsT1nayhWTlGEAVemtaF61M0EKY+6GkKzxSLl4 1dOv5620Poj0Dh6aNAVPvx51rKjpkqd7RXMYA+fzf3IkB53SWYkIeNg3ITOpdyk6 D0t6C+hNizNPZ3By8jyDpK0+F7rzsyAw5HZG0cSuC8179mjyiSJh5UMaUR+e+bFV QuD+cO14UKH70b4sDbBKb840As5NK+FL6shOvuti7Fr5UVkhFJR5JECXGER8fneS d0u4Q7QGqg61pA8DthmXB59OUAYuvzx8O96u2L6ehiVt8XlUBfEguq279Pyivg5e k6+T5JwFDbk3EG6r72XnBvI6ydSvcC0= -----END CERTIFICATE-----Generated at Mon May 12 09:11:19 2025 by rpki-client