$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft File: 3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json) Hash identifier: iQYQq8KFDDgKh1alAsaXkMfuEh35HTlgAl+vJiylyo8= Subject key identifier: 2B:B1:6D:E1:5D:3E:EC:6D:5C:25:F6:30:C0:AC:C7:37:E2:6A:C9:5D Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E Certificate issuer: /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Certificate serial: 0A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft Manifest number: 0A1F Signing time: Fri 16 May 2025 20:28:48 +0000 Manifest this update: Fri 16 May 2025 20:28:48 +0000 Manifest next update: Fri 23 May 2025 20:28:48 +0000 Files and hashes: 1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: sQn3QsCtaxyu4tySe+C4rc8wjFmw+bJd8w+ZeVA+8z4=) 2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: vFM8zP6/yZnn9lA/MIHAlH1VsJ7/4aQRYj46a02OHPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Validity Not Before: May 16 20:28:48 2025 GMT Not After : May 23 20:28:48 2025 GMT Subject: CN=6827a000-2aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fb:ef:cf:d6:6a:ce:35:52:de:04:f0:bd:d8: e1:74:8a:b0:f6:18:04:43:42:a4:81:6d:24:a2:e6: d4:d6:b5:2a:25:83:62:63:ac:04:7c:6e:30:eb:3f: 7d:0b:8a:17:e5:d3:b7:b7:82:c8:41:6f:67:6c:a4: 36:ad:88:fc:b8:73:63:b6:63:a0:fd:cb:88:a2:b0: 62:c2:f3:b8:65:2c:a5:42:58:7c:ee:15:44:1f:5e: fc:0c:64:fe:f3:7f:e6:d8:fe:81:32:16:72:5f:ae: 33:ce:e3:47:93:bf:ee:6c:1d:e9:60:23:34:1d:1f: 63:ad:00:09:1a:94:f6:ff:2e:50:0d:af:c9:eb:15: 78:e3:17:82:78:07:63:7b:6c:f6:00:b2:bf:91:5a: 07:d4:18:e5:e4:f6:47:ec:52:e6:2a:0a:bd:2d:44: ae:03:73:13:ad:3a:19:0e:df:97:7c:af:89:b5:0e: 28:9d:65:b5:54:9f:e9:9f:a6:92:d0:6a:e1:46:f3: 3a:46:b1:ad:2a:69:ac:4a:39:e4:14:47:7a:eb:13: 43:90:e6:a9:7f:93:fa:c0:a2:13:58:f9:48:17:0a: 24:0d:02:dd:ec:69:9a:eb:85:f9:25:64:03:dc:33: 17:81:06:32:6e:a2:fe:84:37:14:11:fd:98:3b:9b: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B1:6D:E1:5D:3E:EC:6D:5C:25:F6:30:C0:AC:C7:37:E2:6A:C9:5D X509v3 Authority Key Identifier: keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:dd:08:4c:06:86:a1:c8:ed:12:6a:97:17:83:10:7f:4c:20: 59:b7:34:a4:96:f9:53:39:8a:a7:76:b0:4f:af:df:e6:9c:e5: b3:ce:73:91:0f:8a:43:12:41:d1:1d:f3:80:f0:b8:13:f8:d5: da:a4:fd:27:3d:33:bd:b8:10:45:4e:20:3a:ef:54:16:57:6d: 2e:93:f6:0f:66:7e:65:0c:4d:b3:1e:f4:c3:46:39:c4:97:f3: bb:f7:9b:7c:77:52:cd:50:d3:b0:30:70:da:aa:58:0c:b0:38: b7:6f:bd:91:e3:5f:30:63:81:c6:91:70:6c:c2:29:c5:be:90: c9:24:0a:1c:54:7f:00:0a:d9:5b:3e:b0:e5:e7:b5:c7:cb:95: af:9b:6d:fa:a2:76:a6:aa:eb:99:b8:43:e4:40:60:51:9e:5f: a0:a8:69:59:9d:4a:89:3a:f6:ac:13:66:ba:c2:a2:f8:cc:05: 53:9a:1b:91:a9:31:cc:89:41:c7:66:c4:7e:4e:6f:86:c7:49: a9:e7:9e:74:b0:0f:7b:2c:3f:09:e3:aa:17:1f:54:c8:d2:34: 84:7f:1d:a6:a9:e8:c5:37:20:67:4b:1a:05:a1:ed:11:ef:56: 30:fa:ec:83:c1:0f:03:78:6c:9d:8d:34:1a:02:d1:51:fb:b5: d0:f9:00:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4MjkxMTAvBgNVBAUTKERDQ0Q1NTM1NTJCQUY4QTY1QzFBMDY2QjMzNDdGNzkz MjQ0RjU3NUUwHhcNMjUwNTE2MjAyODQ4WhcNMjUwNTIzMjAyODQ4WjAYMRYwFAYD VQQDEw02ODI3YTAwMC0yYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Pvvz9ZqzjVS3gTwvdjhdIqw9hgEQ0KkgW0koubU1rUqJYNiY6wEfG4w6z99 C4oX5dO3t4LIQW9nbKQ2rYj8uHNjtmOg/cuIorBiwvO4ZSylQlh87hVEH178DGT+ 83/m2P6BMhZyX64zzuNHk7/ubB3pYCM0HR9jrQAJGpT2/y5QDa/J6xV44xeCeAdj e2z2ALK/kVoH1Bjl5PZH7FLmKgq9LUSuA3MTrToZDt+XfK+JtQ4onWW1VJ/pn6aS 0GrhRvM6RrGtKmmsSjnkFEd66xNDkOapf5P6wKITWPlIFwokDQLd7Gma64X5JWQD 3DMXgQYybqL+hDcUEf2YO5tXTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuxbeFd PuxtXCX2MMCsxzfiasldMB8GA1UdIwQYMBaAFNzNVTVSuvimXBoGazNH95MkT1de MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDgyOS85OUQ3QzZBNDZG RUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1LWmNHZ1pyTTBmM2t5UlBW MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNMVZOVks2LUtaY0dnWnJNMGYza3lSUFYxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDgyOS85OUQ3QzZBNDZGRUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1L WmNHZ1pyTTBmM2t5UlBWMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp3QhMBoahyO0SapcXgxB/TCBZtzSklvlTOYqndrBPr9/mnOWzznOR D4pDEkHRHfOA8LgT+NXapP0nPTO9uBBFTiA671QWV20uk/YPZn5lDE2zHvTDRjnE l/O795t8d1LNUNOwMHDaqlgMsDi3b72R418wY4HGkXBswinFvpDJJAocVH8ACtlb PrDl57XHy5Wvm236onamquuZuEPkQGBRnl+gqGlZnUqJOvasE2a6wqL4zAVTmhuR qTHMiUHHZsR+Tm+Gx0mp5550sA97LD8J46oXH1TI0jSEfx2mqejFNyBnSxoFoe0R 71Yw+uyDwQ8DeGydjTQaAtFR+7XQ+QC7 -----END CERTIFICATE-----Generated at Sat May 17 03:33:59 2025 by rpki-client