$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json) Hash identifier: wzkPc6J0FeSPhcDPOgvqkFYGuU9ju72v5e6jDqGOb3Q= Subject key identifier: D5:64:A8:B2:93:E5:28:BF:57:0E:6C:01:1E:CA:35:62:C5:00:8C:1A Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Certificate serial: 15BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft Manifest number: 15B4 Signing time: Sat 10 May 2025 16:41:25 +0000 Manifest this update: Sat 10 May 2025 16:41:25 +0000 Manifest next update: Sat 17 May 2025 16:41:25 +0000 Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: pEDdDV2l4K0Zpogwy2PsJpiXDsPiJMDsdr407euUn/I=) 2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: Xq7aDp/RYbNUbH8lamtxHtlBICT7QgYLuIupGmw4yJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5564 (0x15bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Validity Not Before: May 10 16:41:25 2025 GMT Not After : May 17 16:41:25 2025 GMT Subject: CN=681f81b5-4a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:19:f5:d7:a2:71:24:ab:f0:df:f8:04:61: 1e:23:35:3c:ff:09:2a:8e:54:36:84:30:68:06:76: 4a:9a:8d:ab:6b:46:bb:d9:bf:5f:43:9f:5c:35:99: a3:91:50:2c:6e:06:f1:1c:74:da:1b:2a:f4:db:7d: ea:d8:6d:73:b7:c3:8a:2a:88:bf:46:3c:59:3b:a5: e0:b2:a0:bc:c4:66:d5:00:9e:a6:6b:56:38:ef:63: 7e:f3:7b:a1:c9:26:03:7d:a5:5b:70:c7:e3:c4:22: 03:82:22:e5:dc:27:b4:71:6e:e6:e8:ac:63:cb:cc: 0b:e1:7e:95:c1:19:c2:92:38:99:5b:7d:36:cc:a4: 15:c4:e4:fc:02:3b:39:0a:0e:4b:b6:42:ec:7b:77: 61:50:1e:43:a9:1a:14:f8:f2:84:07:73:d5:17:49: fd:fb:99:21:b9:a3:de:56:46:49:8a:b1:d3:e4:f6: 32:22:69:a4:ea:08:1a:da:11:90:d1:8b:5d:b0:46: 99:c3:87:f6:cc:ed:c6:dd:f6:bd:89:00:48:bb:a2: 21:f3:49:43:3d:a5:a9:e7:21:08:5e:6e:d3:10:df: 5a:e3:df:f8:ba:c0:38:db:4c:8b:5e:f1:c3:a9:96: 86:5c:d0:e2:14:30:29:ee:50:64:ef:fd:05:c0:2b: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:A8:B2:93:E5:28:BF:57:0E:6C:01:1E:CA:35:62:C5:00:8C:1A X509v3 Authority Key Identifier: keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e7:f9:c3:77:21:a2:8d:cd:b6:33:e9:0b:aa:27:08:6b:b0: bc:7e:f4:89:db:8b:99:6e:03:5a:e4:17:77:71:1e:93:ee:38: 2f:57:18:ff:24:3c:31:c4:92:09:1a:64:d3:98:e4:44:44:45: e2:20:e3:b3:a0:b4:bf:9c:30:09:6e:9e:02:0a:e7:c4:8f:99: 22:cd:60:be:a0:db:f5:22:11:fd:a1:4e:80:96:3f:30:c5:4b: 95:f3:95:ac:33:2a:93:26:ba:e7:5d:8b:5a:23:32:b9:82:f3: c4:2f:b8:65:31:c5:ee:b5:30:18:4b:8d:ef:38:59:92:a9:cd: 3e:6d:33:14:c1:08:92:2e:4f:72:78:f2:61:3f:46:b8:5f:3b: 1c:09:39:87:f9:78:8f:44:03:f2:f7:46:22:fd:6b:70:9e:60: fa:21:15:b3:95:af:c4:3b:cd:25:d6:8f:6a:c7:3c:a6:26:10: ca:33:e1:f2:a7:74:3b:bb:6d:17:5c:08:30:49:5b:4f:96:b6: 47:73:d4:1a:4a:9b:46:8d:9a:97:3a:fa:2f:40:22:f6:40:c6: af:93:27:ad:55:55:35:7f:14:45:23:43:99:3c:e9:dd:6e:6f: 9a:3b:3c:50:71:6c:13:58:99:d6:9d:ba:84:67:92:2e:dd:34: 1d:66:fa:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0 MzRERjQ1NDAwHhcNMjUwNTEwMTY0MTI1WhcNMjUwNTE3MTY0MTI1WjAYMRYwFAYD VQQDEw02ODFmODFiNS00YTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVYZ9deicSSr8N/4BGEeIzU8/wkqjlQ2hDBoBnZKmo2ra0a72b9fQ59cNZmj kVAsbgbxHHTaGyr0233q2G1zt8OKKoi/RjxZO6XgsqC8xGbVAJ6ma1Y472N+83uh ySYDfaVbcMfjxCIDgiLl3Ce0cW7m6Kxjy8wL4X6VwRnCkjiZW302zKQVxOT8Ajs5 Cg5LtkLse3dhUB5DqRoU+PKEB3PVF0n9+5khuaPeVkZJirHT5PYyImmk6gga2hGQ 0YtdsEaZw4f2zO3G3fa9iQBIu6Ih80lDPaWp5yEIXm7TEN9a49/4usA420yLXvHD qZaGXNDiFDAp7lBk7/0FwCsqbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVkqLKT 5Si/Vw5sAR7KNWLFAIwaMB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4 MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty a1lDRkNEdm9MVkZEVGZSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm5/nDdyGijc22M+kLqicIa7C8fvSJ24uZbgNa5Bd3cR6T7jgvVxj/ JDwxxJIJGmTTmOREREXiIOOzoLS/nDAJbp4CCufEj5kizWC+oNv1IhH9oU6Alj8w xUuV85WsMyqTJrrnXYtaIzK5gvPEL7hlMcXutTAYS43vOFmSqc0+bTMUwQiSLk9y ePJhP0a4XzscCTmH+XiPRAPy90Yi/WtwnmD6IRWzla/EO80l1o9qxzymJhDKM+Hy p3Q7u20XXAgwSVtPlrZHc9QaSptGjZqXOvovQCL2QMavkyetVVU1fxRFI0OZPOnd bm+aOzxQcWwTWJnWnbqEZ5Iu3TQdZvqD -----END CERTIFICATE-----Generated at Mon May 12 15:42:37 2025 by rpki-client