$ rpki-client -vvf rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft File: B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft (raw, json) Hash identifier: +Vpb8w79G2HvTpkjYjcFSfPmLqtXkOYW0ivYlhJ7QMY= Subject key identifier: 10:53:F1:86:B4:64:A9:4C:21:36:9C:CF:E5:ED:36:0A:A1:84:B6:CC Authority key identifier: 07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3 Certificate issuer: /CN=A91C13E1/serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft Manifest number: C3 Signing time: Tue 13 May 2025 05:00:49 +0000 Manifest this update: Tue 13 May 2025 05:00:48 +0000 Manifest next update: Tue 20 May 2025 05:00:48 +0000 Files and hashes: 1: B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl (hash: vFqEYVW57KgBk5zQbyZunDBWkwu74mLsuE5pyROKpls=) 2: 5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa (hash: OGzJcg7L9PCLCfzbyQJgcKaHiB3UrYwg9svS3wqdzqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C13E1, serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3 Validity Not Before: May 13 05:00:48 2025 GMT Not After : May 20 05:00:48 2025 GMT Subject: CN=6822d200-77d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:13:fd:c7:14:73:a7:1c:07:4c:a0:67:c8: 7b:c8:ca:ff:7c:bf:1f:7f:cc:67:c8:1e:05:17:95: 64:03:08:82:a5:c4:da:a3:76:16:e3:73:af:e4:c6: 98:be:9f:06:5d:3f:70:2b:47:56:d1:b7:3f:ff:2f: 17:16:de:e2:2f:61:60:22:de:d9:44:2d:91:94:b7: b2:54:95:f9:08:19:f1:92:7a:a8:ab:3b:d5:21:d4: 31:51:0b:4c:2f:47:ae:4a:43:08:9c:21:3d:9f:e0: 5e:cd:fd:63:1a:a7:8b:72:8d:f1:3b:83:c7:01:a3: a3:43:92:07:ac:48:05:db:0d:00:c4:f3:a9:88:47: 6c:fb:93:66:79:e0:da:a4:f1:52:7e:b7:43:4f:8f: 21:9d:07:d8:ee:b4:97:10:7e:50:58:fa:5c:05:73: af:58:a8:82:ad:ac:8b:52:3e:6e:66:dd:4d:f7:8b: b8:41:31:a9:4d:4a:1a:a8:22:61:fe:ea:4a:9e:f6: a6:f1:f1:1c:04:00:6e:a5:b2:ca:69:96:1b:ee:1e: 9c:02:4d:16:5b:df:cf:51:70:1b:4b:31:a4:a1:94: 5e:a6:4a:66:28:c9:f8:4f:69:80:02:4f:7f:3f:9e: 88:49:b3:c6:8d:82:8d:8d:de:05:2b:25:6c:40:f8: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:53:F1:86:B4:64:A9:4C:21:36:9C:CF:E5:ED:36:0A:A1:84:B6:CC X509v3 Authority Key Identifier: keyid:07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f6:54:3a:42:bb:2a:64:8b:ce:47:9c:55:72:b0:9f:4f:bf: 8a:4b:c1:ca:79:32:1e:e2:79:77:8c:54:a5:62:32:54:46:a7: 97:89:02:2a:f1:e3:00:c2:e9:50:58:c5:bc:6d:b9:bd:0d:bc: f3:b6:97:8d:80:a3:21:f9:22:52:89:8e:a7:3f:1d:8b:73:de: 54:4f:e1:d0:15:28:cd:ab:65:70:7b:eb:86:a3:5c:ae:d1:b9: fe:d8:66:04:d5:d1:d0:ea:1c:d6:49:b6:b5:43:9c:6d:ac:87: 2d:28:cc:1a:8b:b8:12:4d:93:6d:fb:ac:d7:97:04:ef:fc:4f: 62:e5:2c:d1:5a:2a:60:3d:06:40:aa:3b:8a:b9:9a:42:51:99: 08:1a:83:9e:d2:8c:6d:98:fc:75:c5:17:89:8f:a4:08:0f:71: 52:77:5d:de:3b:8f:10:c6:20:2f:46:1f:59:ed:7d:0a:a9:d7: 67:91:d4:51:d0:9d:f3:8c:02:ee:e2:3c:2c:33:a0:5b:93:18: 8e:08:30:f7:8e:8a:8d:81:63:bb:97:e3:44:20:b9:46:6d:a3: 32:97:5d:2b:58:ad:de:95:49:2c:2b:44:a8:94:38:a2:c3:f5: ef:d6:02:10:f0:cc:25:87:ca:96:ca:1b:6c:9d:b3:2a:36:b0: e8:d0:a9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzRTExMTAvBgNVBAUTKDA3N0JFQTlCRkUzMDA2NDYxNjVDMzQzNkM3RDRDQzM4 MzQ2QzZCQTMwHhcNMjUwNTEzMDUwMDQ4WhcNMjUwNTIwMDUwMDQ4WjAYMRYwFAYD VQQDEw02ODIyZDIwMC03N2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wUT/ccUc6ccB0ygZ8h7yMr/fL8ff8xnyB4FF5VkAwiCpcTao3YW43Ov5MaY vp8GXT9wK0dW0bc//y8XFt7iL2FgIt7ZRC2RlLeyVJX5CBnxknqoqzvVIdQxUQtM L0euSkMInCE9n+Bezf1jGqeLco3xO4PHAaOjQ5IHrEgF2w0AxPOpiEds+5NmeeDa pPFSfrdDT48hnQfY7rSXEH5QWPpcBXOvWKiCrayLUj5uZt1N94u4QTGpTUoaqCJh /upKnvam8fEcBABupbLKaZYb7h6cAk0WW9/PUXAbSzGkoZRepkpmKMn4T2mAAk9/ P56ISbPGjYKNjd4FKyVsQPgE/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBT8Ya0 ZKlMITacz+XtNgqhhLbMMB8GA1UdIwQYMBaAFAd76pv+MAZGFlw0NsfUzDg0bGuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTNFMS84MkZERjkxQTA1 RkMxMUVGOEE1RkMzNjhDNEY5QUUwMi9CM3ZxbV80d0JrWVdYRFEyeDlUTU9EUnNh Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IzdnFtXzR3QmtZV1hEUTJ4OVRNT0RSc2E2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTNFMS84MkZERjkxQTA1RkMxMUVGOEE1RkMzNjhDNEY5QUUwMi9CM3ZxbV80d0Jr WVdYRFEyeDlUTU9EUnNhNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM9lQ6QrsqZIvOR5xVcrCfT7+KS8HKeTIe4nl3jFSlYjJURqeXiQIq 8eMAwulQWMW8bbm9DbzztpeNgKMh+SJSiY6nPx2Lc95UT+HQFSjNq2Vwe+uGo1yu 0bn+2GYE1dHQ6hzWSba1Q5xtrIctKMwai7gSTZNt+6zXlwTv/E9i5SzRWipgPQZA qjuKuZpCUZkIGoOe0oxtmPx1xReJj6QID3FSd13eO48QxiAvRh9Z7X0KqddnkdRR 0J3zjALu4jwsM6BbkxiOCDD3joqNgWO7l+NEILlGbaMyl10rWK3elUksK0SolDii w/Xv1gIQ8Mwlh8qWyhtsnbMqNrDo0Klq -----END CERTIFICATE-----Generated at Tue May 13 09:15:25 2025 by rpki-client