$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json) Hash identifier: vfvh23Ev1el8eneZGXfptbVOPizMu5vz0Ak5djLgY14= Subject key identifier: 68:F3:03:1F:34:7A:24:53:D0:31:44:C6:80:E3:C9:90:18:E6:4E:82 Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft Manifest number: 062E Signing time: Fri 16 May 2025 22:58:25 +0000 Manifest this update: Fri 16 May 2025 22:58:25 +0000 Manifest next update: Fri 23 May 2025 22:58:25 +0000 Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: tJJZfaw8UGD9GGBWmPowtqu5tL7uxHQIbSoIqHSX/qw=) 2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: 4nQWYZbXWSJ3PqE4ZBiXzBzUwOjlbjDx0Oq7v5W8vCQ=) 3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: MzEQJvzOJlRcf4tMcorSrwSuzHCC7BZBlDirsliZQdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Validity Not Before: May 16 22:58:25 2025 GMT Not After : May 23 22:58:25 2025 GMT Subject: CN=6827c311-0288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:f1:81:67:1b:41:7d:3d:54:c2:c2:ab:2a: b4:9a:57:38:83:74:2d:a5:0b:bb:8d:14:4c:d0:5b: 3d:0d:ad:81:7f:be:09:92:b9:f3:25:7a:3f:59:49: 45:cb:50:13:75:b3:ad:85:77:35:10:3e:3a:b1:0e: 7a:5e:84:37:74:88:e3:64:0a:86:e8:75:09:20:80: b3:4e:6e:8a:35:bc:d5:21:87:d8:c0:58:a7:85:15: 8b:6c:d4:c5:a0:86:33:db:d0:35:4f:b2:7b:0c:59: fd:7d:25:85:60:f5:e6:a8:75:f7:2a:76:b8:d1:05: 2a:ed:bf:4f:f6:38:6b:de:96:80:34:70:c7:ad:b3: 41:c0:bc:c7:ce:22:66:72:22:14:29:a0:37:06:7c: 63:3e:61:d2:fa:79:fa:ec:c5:0b:d6:16:17:f6:a2: 49:6c:1f:bc:7e:a1:92:3d:72:ce:80:37:fe:89:f1: 05:92:7b:39:0c:e7:4c:0c:03:cc:ed:33:0e:4e:93: a7:ba:ff:d2:49:b3:c5:a6:f3:b1:0a:31:2a:bc:42: fb:42:4f:a3:bb:5d:97:84:4a:66:6b:88:1e:d7:51: 3c:75:32:e4:6b:96:6d:64:d7:3c:38:f8:24:e4:aa: 0e:a3:52:1e:ed:70:c2:ce:65:84:1d:15:b0:6c:e5: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F3:03:1F:34:7A:24:53:D0:31:44:C6:80:E3:C9:90:18:E6:4E:82 X509v3 Authority Key Identifier: keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:01:b6:b5:c4:b7:5a:38:c9:5d:49:5e:5c:8a:c2:4b:b3:0a: 38:a2:67:28:49:c4:bc:f1:6d:f2:ec:6a:73:ec:e5:c1:14:e3: 43:a8:03:c1:1e:71:1a:54:f8:88:77:ec:7c:18:b1:fa:02:e0: a4:f1:ef:c4:c2:86:31:f2:22:87:b6:bb:89:63:f9:35:88:d3: 4b:dc:ad:d5:9f:15:e2:0c:d0:eb:a6:35:4e:ce:92:ba:2d:cc: 4a:42:78:da:46:15:f9:a2:86:57:06:40:9d:ea:fc:18:92:42: 0d:63:8a:af:f0:4c:ac:89:aa:1f:3d:a8:02:1d:cd:15:bd:64: ab:0b:8b:21:09:7c:5c:04:0b:f9:7f:fe:f9:8e:8e:49:6c:6d: da:bb:06:f7:4d:58:ec:f1:1a:91:1d:86:6f:43:36:c6:5f:18: 1c:8d:3d:50:f3:fa:09:05:0d:8e:45:3d:53:22:cc:da:9c:fe: d9:af:45:67:63:55:24:6f:79:f7:c6:7d:f9:12:42:98:bc:64: 2a:d5:94:ef:91:87:c6:c7:f1:02:2f:3c:a6:87:0c:04:c1:18: 73:f5:a8:8e:d4:8a:e0:7e:3a:e1:48:37:1a:2f:44:41:de:5b: f3:62:36:e4:93:09:6e:56:d0:37:56:2e:f1:fe:14:d4:1f:e3: 8d:38:bd:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQxM0JEMzRGRjM4 NzhFNEVFRDAwHhcNMjUwNTE2MjI1ODI1WhcNMjUwNTIzMjI1ODI1WjAYMRYwFAYD VQQDEw02ODI3YzMxMS0wMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJfxgWcbQX09VMLCqyq0mlc4g3QtpQu7jRRM0Fs9Da2Bf74JkrnzJXo/WUlF y1ATdbOthXc1ED46sQ56XoQ3dIjjZAqG6HUJIICzTm6KNbzVIYfYwFinhRWLbNTF oIYz29A1T7J7DFn9fSWFYPXmqHX3Kna40QUq7b9P9jhr3paANHDHrbNBwLzHziJm ciIUKaA3BnxjPmHS+nn67MUL1hYX9qJJbB+8fqGSPXLOgDf+ifEFkns5DOdMDAPM 7TMOTpOnuv/SSbPFpvOxCjEqvEL7Qk+ju12XhEpma4ge11E8dTLka5ZtZNc8OPgk 5KoOo1Ie7XDCzmWEHRWwbOUYrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjzAx80 eiRT0DFExoDjyZAY5k6CMB8GA1UdIwQYMBaAFN8R6SaNBq5Tuvt0E700/zh45O7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0RC9CMkVGM0UzNDk1 RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3JsTzYtM1FUdlRUX09Iams3 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4SHBKbzBHcmxPNi0zUVR2VFRfT0hqazd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0RC9CMkVGM0UzNDk1RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3Js TzYtM1FUdlRUX09Iams3dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRAba1xLdaOMldSV5cisJLswo4omcoScS88W3y7Gpz7OXBFONDqAPB HnEaVPiId+x8GLH6AuCk8e/EwoYx8iKHtruJY/k1iNNL3K3VnxXiDNDrpjVOzpK6 LcxKQnjaRhX5ooZXBkCd6vwYkkINY4qv8EysiaofPagCHc0VvWSrC4shCXxcBAv5 f/75jo5JbG3auwb3TVjs8RqRHYZvQzbGXxgcjT1Q8/oJBQ2ORT1TIszanP7Zr0Vn Y1Ukb3n3xn35EkKYvGQq1ZTvkYfGx/ECLzymhwwEwRhz9aiO1IrgfjrhSDcaL0RB 3lvzYjbkkwluVtA3Vi7x/hTUH+ONOL3p -----END CERTIFICATE-----Generated at Sat May 17 11:31:34 2025 by rpki-client