$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: svoBkBYeAyXMn6xmJcUSmtCtmNeSRRRb01tevzS1FwE= Subject key identifier: 87:BA:26:20:A7:D0:C5:67:47:75:2B:46:48:B1:12:AC:57:CB:09:B0 Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 0135 Signing time: Fri 09 May 2025 03:32:31 +0000 Manifest this update: Fri 09 May 2025 03:32:31 +0000 Manifest next update: Fri 16 May 2025 03:32:31 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: i6KEHd2xxV1HU4Qt0sBvayxTXBNZGz0cERxmW7VC498=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: May 9 03:32:31 2025 GMT Not After : May 16 03:32:31 2025 GMT Subject: CN=681d774f-8317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:96:cd:ea:a5:ef:31:65:ee:0f:9e:9c:1c:44: 89:f0:07:09:88:18:05:7a:2f:1c:3b:35:b5:ab:c6: b6:1c:43:ee:52:29:61:b0:2c:3a:59:44:4f:4b:21: 03:7e:91:23:13:5f:5f:a5:d7:de:64:40:58:eb:c4: ed:65:27:42:c7:c5:b7:33:58:82:b8:e0:ab:12:f8: 0a:80:ac:88:7c:75:06:79:e6:9f:ae:ff:8c:a7:bb: a6:23:50:27:d1:19:ef:6b:ab:d1:36:ae:1f:e3:af: 59:84:32:92:76:a1:59:e1:8f:cf:37:1d:63:79:12: 9a:ae:11:b2:8b:ae:b4:c7:75:d2:d1:84:6f:34:c5: b8:e3:97:03:ca:f3:fb:95:3e:26:4a:da:9d:d2:62: ae:da:f2:de:8d:cd:f3:3b:29:a9:6e:26:e0:e1:01: 15:fc:13:43:3d:23:43:a2:a2:cf:b1:6f:e9:78:24: 11:01:a8:ce:d1:50:26:e7:e3:02:34:07:ee:54:65: 2c:81:30:85:e0:78:8e:6c:99:e2:99:fb:8e:65:03: 37:f9:46:81:e6:f6:d2:f5:51:36:d8:ab:59:69:6a: e3:ae:cc:48:09:96:ca:1d:b0:17:82:30:f4:27:1b: c6:92:aa:2e:07:c4:80:02:96:b1:e4:5d:dc:84:15: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:26:20:A7:D0:C5:67:47:75:2B:46:48:B1:12:AC:57:CB:09:B0 X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:86:99:0f:94:4d:6d:f0:7e:e1:8e:af:fa:23:97:f8:69:21: 68:e5:4c:99:36:64:b8:9f:70:07:ef:f5:a6:16:de:de:86:e2: 3a:97:8a:10:37:26:5d:ab:1e:3b:0e:70:8c:c9:bc:4b:5c:41: b6:fd:5d:11:2b:45:31:51:89:24:20:68:3f:c3:f4:2c:28:e0: c0:6f:b3:af:58:03:cf:f0:96:1c:62:71:e5:b8:72:f8:f4:99: ca:8e:5f:a9:76:fc:ea:8e:f8:50:cf:5d:1d:a8:5c:55:6c:7c: 9e:f6:42:30:4b:6f:aa:a0:0f:44:f2:6b:f2:b0:c3:1c:a0:e4: 67:7d:a3:c8:78:ec:61:07:ab:12:77:3f:c4:76:e8:aa:aa:53: 6a:6c:5f:d5:73:35:04:c6:98:6a:fc:4b:af:68:ee:17:af:12: 6b:51:08:e9:22:cf:a1:90:d0:e0:d8:53:9b:a9:8d:65:2c:22: 68:93:1a:1d:61:a5:2c:03:ee:c5:fc:b2:b7:8c:cc:e2:f9:2b: 94:ff:d3:01:30:55:12:17:0a:58:57:c6:3f:03:96:94:04:03: 25:6e:f5:1d:ae:49:2d:6e:58:6e:3a:20:f0:ea:12:41:d7:0a: 80:d5:10:d6:f6:b0:f7:77:f2:71:88:79:55:e8:da:5e:2b:78: 36:f2:da:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUwNTA5MDMzMjMxWhcNMjUwNTE2MDMzMjMxWjAYMRYwFAYD VQQDEw02ODFkNzc0Zi04MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JbN6qXvMWXuD56cHESJ8AcJiBgFei8cOzW1q8a2HEPuUilhsCw6WURPSyED fpEjE19fpdfeZEBY68TtZSdCx8W3M1iCuOCrEvgKgKyIfHUGeeafrv+Mp7umI1An 0Rnva6vRNq4f469ZhDKSdqFZ4Y/PNx1jeRKarhGyi660x3XS0YRvNMW445cDyvP7 lT4mStqd0mKu2vLejc3zOympbibg4QEV/BNDPSNDoqLPsW/peCQRAajO0VAm5+MC NAfuVGUsgTCF4HiObJnimfuOZQM3+UaB5vbS9VE22KtZaWrjrsxICZbKHbAXgjD0 JxvGkqouB8SAApax5F3chBX6SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe6JiCn 0MVnR3UrRkixEqxXywmwMB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCghpkPlE1t8H7hjq/6I5f4aSFo5UyZNmS4n3AH7/WmFt7ehuI6l4oQ NyZdqx47DnCMybxLXEG2/V0RK0UxUYkkIGg/w/QsKODAb7OvWAPP8JYcYnHluHL4 9JnKjl+pdvzqjvhQz10dqFxVbHye9kIwS2+qoA9E8mvysMMcoORnfaPIeOxhB6sS dz/EduiqqlNqbF/VczUExphq/EuvaO4XrxJrUQjpIs+hkNDg2FObqY1lLCJokxod YaUsA+7F/LK3jMzi+SuU/9MBMFUSFwpYV8Y/A5aUBAMlbvUdrkktblhuOiDw6hJB 1wqA1RDW9rD3d/JxiHlV6NpeK3g28tp0 -----END CERTIFICATE-----Generated at Sat May 10 21:49:04 2025 by rpki-client