$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: tE/LhVh8sOah6qkgC2sGlW/RN1l6rakxKR6LLCZIF6Y= Subject key identifier: 91:00:7D:9D:40:F6:6E:1E:B7:DB:D3:A5:40:FA:BA:38:3E:81:CF:F0 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 0771 Signing time: Sat 10 May 2025 21:08:06 +0000 Manifest this update: Sat 10 May 2025 21:08:05 +0000 Manifest next update: Sat 17 May 2025 21:08:05 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: JNBpZXv3N1gM5b13KR3ruO+Uw0Gl7Cq12Jw07N4CRFY=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: SiUJ7SYlbA21+yPfD2uZbgHjH4MPfQViyjJFRbUxFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: May 10 21:08:05 2025 GMT Not After : May 17 21:08:05 2025 GMT Subject: CN=681fc036-0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:16:86:e7:1e:84:ea:48:de:bb:c4:2d:c3: a1:cc:9c:ee:94:be:84:d7:0f:82:29:ab:9c:f6:b2: 3c:1d:47:5d:cd:1c:5e:56:43:51:81:4a:4d:d8:4c: 03:82:e4:a2:22:89:02:8c:eb:23:73:06:2b:c8:7c: 45:fb:90:c1:65:34:96:39:5c:49:84:0a:14:b5:a7: f2:d6:3e:d7:4f:a1:ac:34:d3:d9:ec:8b:a5:6e:40: 21:11:72:80:8d:bc:66:8d:3d:db:f9:61:d7:a8:13: ba:bd:d5:2a:f7:35:49:d7:1b:97:d7:7f:c1:80:28: 86:e4:3a:10:8a:89:5a:65:80:3b:64:de:e3:5b:68: 25:e7:18:95:f0:ec:66:d7:cd:1d:67:51:de:d6:66: 16:7a:33:f3:42:48:7a:cc:23:ef:ef:3e:23:86:22: d7:7f:ab:97:cf:72:0e:a6:5d:3d:d4:2d:b3:b7:bb: cb:a6:33:28:cc:85:48:0d:77:57:39:00:6a:b5:50: 18:66:a6:42:0f:06:24:2b:83:5b:57:b2:54:4b:38: 35:1b:3e:c3:26:7a:66:0c:b0:de:4f:d1:80:ce:41: b7:01:d7:f6:4b:9c:28:9c:2b:f3:1d:36:83:20:28: d2:5d:19:cf:1f:5d:af:f4:e3:74:a0:76:80:cd:9a: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:00:7D:9D:40:F6:6E:1E:B7:DB:D3:A5:40:FA:BA:38:3E:81:CF:F0 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:79:e7:72:3d:33:7c:e8:87:9f:b9:ec:52:5b:dd:01:c5:ca: 11:06:a4:f4:e5:bc:17:c8:6e:48:d8:b9:cc:d7:b9:a0:93:a7: 82:fc:d5:6d:14:63:71:3e:7d:e2:f9:65:60:c1:02:77:be:0f: a5:c8:6b:22:59:08:e8:31:af:bc:2b:db:b4:bc:01:4a:02:c7: a7:73:60:12:b0:9a:ed:73:53:cb:02:b0:1d:69:4b:61:2a:45: 94:e8:b6:cf:51:c4:5f:5e:16:53:29:0d:a1:5c:00:70:d5:6b: cc:26:05:cd:39:bb:3e:f3:94:4f:60:ce:77:1a:b9:eb:92:87: 7f:53:1e:17:55:af:66:49:01:16:10:f4:20:3f:d1:81:30:57: a4:a5:df:35:ff:c2:ea:34:9d:dc:f1:63:eb:9b:6d:1f:ce:b5: 59:10:81:48:4c:cc:03:61:0d:7b:22:5e:bc:c4:c6:ce:24:66: 2f:06:7e:a1:05:b7:42:c3:19:97:d9:b4:bc:c4:45:84:0f:27: 30:98:d4:f4:13:04:09:40:63:0c:61:f3:d1:8b:f5:5a:57:c6: 05:a9:bb:4e:49:12:d6:2d:5f:20:1a:1e:91:e2:d0:53:30:15: 80:9c:3a:16:54:3c:00:a5:81:fb:d9:12:9e:06:2b:eb:81:0f: cd:4c:f0:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjUwNTEwMjEwODA1WhcNMjUwNTE3MjEwODA1WjAYMRYwFAYD VQQDEw02ODFmYzAzNi0wMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZAWhucehOpI3rvELcOhzJzulL6E1w+CKauc9rI8HUddzRxeVkNRgUpN2EwD guSiIokCjOsjcwYryHxF+5DBZTSWOVxJhAoUtafy1j7XT6GsNNPZ7IulbkAhEXKA jbxmjT3b+WHXqBO6vdUq9zVJ1xuX13/BgCiG5DoQiolaZYA7ZN7jW2gl5xiV8Oxm 180dZ1He1mYWejPzQkh6zCPv7z4jhiLXf6uXz3IOpl091C2zt7vLpjMozIVIDXdX OQBqtVAYZqZCDwYkK4NbV7JUSzg1Gz7DJnpmDLDeT9GAzkG3Adf2S5wonCvzHTaD ICjSXRnPH12v9ON0oHaAzZpm9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEAfZ1A 9m4et9vTpUD6ujg+gc/wMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7eedyPTN86IefuexSW90BxcoRBqT05bwXyG5I2LnM17mgk6eC/NVt FGNxPn3i+WVgwQJ3vg+lyGsiWQjoMa+8K9u0vAFKAsenc2ASsJrtc1PLArAdaUth KkWU6LbPUcRfXhZTKQ2hXABw1WvMJgXNObs+85RPYM53Grnrkod/Ux4XVa9mSQEW EPQgP9GBMFekpd81/8LqNJ3c8WPrm20fzrVZEIFITMwDYQ17Il68xMbOJGYvBn6h BbdCwxmX2bS8xEWEDycwmNT0EwQJQGMMYfPRi/VaV8YFqbtOSRLWLV8gGh6R4tBT MBWAnDoWVDwApYH72RKeBivrgQ/NTPCV -----END CERTIFICATE-----Generated at Mon May 12 07:01:37 2025 by rpki-client