$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft File: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft (raw, json) Hash identifier: 4udug7YPmjnBFbsrRkprSi4a+7DCxjQiRCfWH6YpWDk= Subject key identifier: E2:08:1F:F6:61:F9:C0:11:EA:75:95:01:7C:35:E5:AF:42:1F:3B:D5 Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft Manifest number: 01E9 Signing time: Sat 03 May 2025 02:12:32 +0000 Manifest this update: Sat 03 May 2025 02:12:31 +0000 Manifest next update: Sat 10 May 2025 02:12:31 +0000 Files and hashes: 1: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl (hash: H0fnmwjhGiG+Fv1RVC3PrFpNEJMF2vap+vBnnPRds1M=) 2: 0CDAA8EEE86611EFA5152A24C4F9AE02.roa (hash: lUMcuws+kkSP+r54F6XS/v0f47726g1ZKxyTfmh7RHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Validity Not Before: May 3 02:12:31 2025 GMT Not After : May 10 02:12:31 2025 GMT Subject: CN=68157b90-123d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:aa:15:25:e1:04:b6:ca:3c:d5:e5:09:e1: 1a:64:50:9b:2c:49:cd:a2:2b:96:bc:71:a8:63:ca: 67:5d:71:a2:86:53:df:a5:63:18:94:00:3a:47:b2: a1:a1:c0:ea:17:3c:68:46:6d:7b:58:9c:ae:d6:d6: 9b:3b:94:d2:cd:31:ce:90:56:94:cb:4a:27:9c:2a: 62:d8:0d:c6:72:6a:82:00:46:6e:60:05:9e:51:80: 1e:de:3f:1d:b2:bb:07:85:34:f7:52:58:10:28:96: fb:29:d7:e9:91:2c:5b:ca:08:82:9a:bb:0a:b4:d4: 7a:e7:ac:30:a1:2d:e8:68:91:ed:40:dd:36:be:20: 1d:28:9b:cd:96:21:ee:9e:d2:88:de:ea:32:16:35: 1f:b6:2f:a6:34:a1:4b:a3:01:33:40:10:78:7c:46: e5:ec:48:5c:77:ab:5b:d0:a5:89:e2:3f:b8:a8:db: 5d:b1:45:86:5e:b7:a7:af:76:e2:64:ac:f1:70:60: 01:39:4e:bb:ea:79:a5:d6:1d:c7:ea:6d:b8:85:65: f0:92:6e:fb:d3:79:7a:fa:72:5f:10:24:97:23:10: 5a:a9:9e:9c:aa:1a:00:74:d8:76:34:af:e1:61:c2: 01:c8:ad:28:40:bd:17:da:58:eb:b6:d4:9f:73:db: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:08:1F:F6:61:F9:C0:11:EA:75:95:01:7C:35:E5:AF:42:1F:3B:D5 X509v3 Authority Key Identifier: keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6a:44:75:69:54:0d:0a:1e:e1:d0:37:4b:ea:6c:ca:1a:e4: 7b:da:59:1d:d8:0b:b1:3a:eb:6c:73:b9:4c:d9:7d:59:f6:2d: 7f:9a:46:b7:f9:09:0f:5a:f7:e7:87:04:a7:a4:6b:69:7c:c8: c6:16:4d:f0:00:55:63:0b:43:ba:d9:d6:2e:9b:f2:9f:6b:6c: cb:83:1c:a3:da:be:25:81:a9:01:96:75:26:cf:88:22:20:31: d6:4f:6f:02:77:a8:95:2f:da:c2:02:ad:56:41:0e:cb:d6:95: ff:82:3e:b7:87:38:7e:65:be:b6:b7:9e:13:71:56:77:0a:f8: f5:4e:a8:35:4e:59:89:ee:b0:aa:5e:31:e6:1e:6d:e2:fb:cb: 83:b1:77:1e:7d:32:48:49:42:fb:67:06:30:3c:3b:56:46:9d: ac:f7:5e:c5:64:0c:a1:3c:3f:0b:15:b4:7e:46:f4:c8:ff:42: 10:ae:18:9a:94:d3:a1:5d:1c:38:46:59:e3:5d:40:e3:22:c8: 49:bb:eb:53:1e:6a:45:8f:cc:70:6c:ab:56:71:d7:f3:f2:6c: f9:2a:b8:33:70:e3:1a:69:41:ca:cc:f9:c6:90:5d:e9:07:65: 96:41:82:15:1a:60:21:7c:5c:f4:a3:ef:eb:a2:bf:86:bc:4b: ba:59:88:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2OUUxMTAvBgNVBAUTKERDQjgzOTMxOUZENTJFQUQ5RkNCOTc3ODI5ODRGRDFG RDQ0OTJDMTcwHhcNMjUwNTAzMDIxMjMxWhcNMjUwNTEwMDIxMjMxWjAYMRYwFAYD VQQDEw02ODE1N2I5MC0xMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKuqFSXhBLbKPNXlCeEaZFCbLEnNoiuWvHGoY8pnXXGihlPfpWMYlAA6R7Kh ocDqFzxoRm17WJyu1tabO5TSzTHOkFaUy0onnCpi2A3GcmqCAEZuYAWeUYAe3j8d srsHhTT3UlgQKJb7KdfpkSxbygiCmrsKtNR656wwoS3oaJHtQN02viAdKJvNliHu ntKI3uoyFjUfti+mNKFLowEzQBB4fEbl7Ehcd6tb0KWJ4j+4qNtdsUWGXrenr3bi ZKzxcGABOU676nml1h3H6m24hWXwkm7703l6+nJfECSXIxBaqZ6cqhoAdNh2NK/h YcIByK0oQL0X2ljrttSfc9s79wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIIH/Zh +cAR6nWVAXw15a9CHzvVMB8GA1UdIwQYMBaAFNy4OTGf1S6tn8uXeCmE/R/USSwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTY5RS8yNTI1QzdDODRE MjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxxMmZ5NWQ0S1lUOUg5UkpM QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMZzVNWl9WTHEyZnk1ZDRLWVQ5SDlSSkxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTY5RS8yNTI1QzdDODREMjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxx MmZ5NWQ0S1lUOUg5UkpMQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFakR1aVQNCh7h0DdL6mzKGuR72lkd2AuxOutsc7lM2X1Z9i1/mka3 +QkPWvfnhwSnpGtpfMjGFk3wAFVjC0O62dYum/Kfa2zLgxyj2r4lgakBlnUmz4gi IDHWT28Cd6iVL9rCAq1WQQ7L1pX/gj63hzh+Zb62t54TcVZ3Cvj1Tqg1TlmJ7rCq XjHmHm3i+8uDsXcefTJISUL7ZwYwPDtWRp2s917FZAyhPD8LFbR+RvTI/0IQrhia lNOhXRw4RlnjXUDjIshJu+tTHmpFj8xwbKtWcdfz8mz5KrgzcOMaaUHKzPnGkF3p B2WWQYIVGmAhfFz0o+/ror+GvEu6WYj2 -----END CERTIFICATE-----Generated at Mon May 5 02:21:22 2025 by rpki-client