$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: vnG0LEQ08fV0oq6H+4rgy0aH+Jf7FC/E3nodkZVxPzI= Subject key identifier: 2F:34:B5:34:41:B3:FC:95:64:5E:A9:2B:DF:50:EC:90:F4:D7:3E:5F Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 3FAA Signing time: Sat 10 May 2025 14:47:48 +0000 Manifest this update: Sat 10 May 2025 14:47:47 +0000 Manifest next update: Sat 17 May 2025 14:47:47 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: ApuuUapNprTGwrumfVG+zbhddVeiBX32I8KD1Xseq68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: May 10 14:47:47 2025 GMT Not After : May 17 14:47:47 2025 GMT Subject: CN=681f6713-5986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:a7:76:80:5f:4c:a6:07:fb:b6:e8:20:ab: bb:a4:c8:54:1b:86:22:e8:dd:e9:af:ae:69:0b:ec: d4:67:b1:1a:8f:4c:f9:e7:6d:be:9d:b2:44:bc:6c: 49:58:a7:ba:dd:07:9e:32:2d:f8:15:22:dd:5f:6c: e3:dc:35:9e:3c:7f:85:b9:45:21:aa:00:73:13:22: f8:31:90:5a:13:8a:de:ea:e8:e3:69:43:21:c4:73: 9b:9a:e3:ff:e7:fa:0c:cd:1f:c4:b7:36:66:cb:2e: ac:b9:fc:fc:1e:f1:e3:55:16:df:28:d4:10:63:bb: b3:80:b7:6f:7c:84:7e:f2:c1:2c:d6:9f:14:bc:47: 7a:16:aa:b2:b3:41:21:c3:a2:f7:cd:c5:d5:b6:31: 62:f7:62:cc:32:65:b7:cc:8d:cc:d4:50:53:35:04: 44:54:fe:da:13:90:ec:a7:4f:7b:c1:90:cc:ea:33: f9:8d:65:0f:17:6c:27:5a:7c:ff:70:06:9f:69:12: a6:17:09:86:5f:3f:d7:4e:48:e1:35:e5:4a:a4:e7: 8c:2e:6b:73:38:73:5a:cf:f8:cd:b6:75:68:5d:d6: 80:70:93:4a:09:ad:92:6d:37:e0:08:b8:4d:51:93: 8a:0f:ab:93:58:a2:71:dc:5e:ab:ba:7c:0b:91:2a: be:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:34:B5:34:41:B3:FC:95:64:5E:A9:2B:DF:50:EC:90:F4:D7:3E:5F X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:9b:98:d9:2a:4d:52:a7:f8:24:83:0c:7e:21:af:fa:81:f6: 3d:b5:1b:a9:cf:e5:e4:0d:1e:0d:90:f3:7d:50:a0:f2:0c:45: 54:74:33:05:d9:94:96:46:8c:a3:98:5a:e1:51:93:32:cc:53: 08:4a:1c:04:ac:e3:3f:0a:7b:12:a6:10:7b:4f:c3:47:3f:8d: 9f:52:f0:cc:de:6b:56:32:32:a9:06:42:79:8a:1b:35:ed:80: d9:23:f8:e3:bd:76:ed:ba:83:f2:2e:db:6f:e2:64:6f:9b:e1: 7d:a1:df:06:40:58:36:f6:88:b7:aa:32:00:27:17:21:1f:fb: 55:34:7a:7c:f2:bb:7b:fa:6f:cc:a5:5d:6b:0d:24:78:2f:12: df:3d:b4:ce:bd:ed:21:eb:a2:ee:2f:95:0c:2f:b7:3c:20:3f: 88:26:1b:99:ee:dc:4e:8b:3c:51:a5:f1:61:6c:1e:13:5f:e6: 0c:c6:79:50:d8:c3:85:bc:7b:34:5f:a1:12:ad:70:53:53:2c: 46:43:df:63:3e:03:98:c7:bd:ed:d8:4f:e6:a1:9b:66:99:66: cb:74:8e:d4:97:87:14:ae:0b:ef:f7:53:07:bb:5c:f6:93:02: da:31:a3:7b:85:1c:3a:3d:41:27:bc:93:93:82:c3:60:a5:03: 39:6e:0b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjUwNTEwMTQ0NzQ3WhcNMjUwNTE3MTQ0NzQ3WjAYMRYwFAYD VQQDEw02ODFmNjcxMy01OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqamndoBfTKYH+7boIKu7pMhUG4Yi6N3pr65pC+zUZ7Eaj0z5522+nbJEvGxJ WKe63QeeMi34FSLdX2zj3DWePH+FuUUhqgBzEyL4MZBaE4re6ujjaUMhxHObmuP/ 5/oMzR/EtzZmyy6sufz8HvHjVRbfKNQQY7uzgLdvfIR+8sEs1p8UvEd6Fqqys0Eh w6L3zcXVtjFi92LMMmW3zI3M1FBTNQREVP7aE5Dsp097wZDM6jP5jWUPF2wnWnz/ cAafaRKmFwmGXz/XTkjhNeVKpOeMLmtzOHNaz/jNtnVoXdaAcJNKCa2SbTfgCLhN UZOKD6uTWKJx3F6runwLkSq+iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC80tTRB s/yVZF6pK99Q7JD01z5fMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAim5jZKk1Sp/gkgwx+Ia/6gfY9tRupz+XkDR4NkPN9UKDyDEVUdDMF 2ZSWRoyjmFrhUZMyzFMIShwErOM/CnsSphB7T8NHP42fUvDM3mtWMjKpBkJ5ihs1 7YDZI/jjvXbtuoPyLttv4mRvm+F9od8GQFg29oi3qjIAJxchH/tVNHp88rt7+m/M pV1rDSR4LxLfPbTOve0h66LuL5UML7c8ID+IJhuZ7txOizxRpfFhbB4TX+YMxnlQ 2MOFvHs0X6ESrXBTUyxGQ99jPgOYx73t2E/moZtmmWbLdI7Ul4cUrgvv91MHu1z2 kwLaMaN7hRw6PUEnvJOTgsNgpQM5bgu9 -----END CERTIFICATE-----Generated at Sun May 11 15:54:31 2025 by rpki-client