$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json) Hash identifier: Ronvk5tS4Zbcl0lawY6wfR24+NViqZtI1jFz6qOR2mE= Subject key identifier: 61:E2:4E:50:50:99:E7:72:81:69:51:E0:59:B6:E0:A2:AD:C9:E6:B9 Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Certificate serial: 081B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft Manifest number: 0813 Signing time: Sat 10 May 2025 20:31:47 +0000 Manifest this update: Sat 10 May 2025 20:31:47 +0000 Manifest next update: Sat 17 May 2025 20:31:47 +0000 Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: Xy8H37B5qdA7fITjdLwNGsdsF7sFRofjXK52oV8UP9A=) 2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: gZyKCd69uOR05q6m/VeY/HmMPOj6FtQSF2UlUbB28zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2075 (0x81b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Validity Not Before: May 10 20:31:47 2025 GMT Not After : May 17 20:31:47 2025 GMT Subject: CN=681fb7b3-a097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:f3:13:75:e6:9a:d9:81:7d:30:94:e0:d3: 98:72:4f:cd:0d:62:79:2c:dd:46:c6:46:04:29:c5: 53:38:97:70:45:7b:b0:73:d0:23:5d:a8:db:6c:67: ae:e8:70:58:2a:48:49:3a:be:cf:f9:a8:56:e5:77: d0:7a:b4:b6:68:92:11:0b:de:c9:48:46:f4:1a:d8: 05:51:8d:85:2d:74:a3:cd:07:85:b4:60:ac:c2:dc: bb:ec:05:d2:29:c0:75:1c:86:dd:e5:fb:8f:f6:16: f8:3d:3a:1b:78:d6:1f:19:9e:e4:2b:40:9e:15:c7: 43:e9:c7:76:d4:5a:0c:b0:71:e3:75:8c:c9:d7:c9: 22:fe:1b:da:57:d8:ab:5b:61:f3:28:b8:bc:ef:7c: cb:63:a9:dc:c8:94:49:4e:f6:d1:9b:be:54:cd:a3: 99:21:9d:f1:f5:07:ee:8f:27:14:31:ee:be:e8:78: bd:cd:5d:d4:50:18:5d:8a:ef:07:22:0c:01:76:14: 25:0e:29:f9:ac:77:08:53:0e:28:4c:41:ed:aa:4e: b0:4a:c6:ef:cb:d6:67:5a:48:7b:53:32:05:e2:5b: 97:e4:f9:ee:f7:88:01:43:a5:89:ec:5d:07:25:42: 7b:50:53:d3:31:47:7e:b3:c9:df:c6:1b:23:45:ad: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E2:4E:50:50:99:E7:72:81:69:51:E0:59:B6:E0:A2:AD:C9:E6:B9 X509v3 Authority Key Identifier: keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d1:80:bc:88:6a:cc:2c:eb:6e:b3:f7:c6:f6:8a:4b:05:d3: 63:23:1b:1d:60:99:e0:3e:d6:fd:41:95:e1:27:4d:6a:db:9f: 02:9c:60:08:55:97:08:d1:25:f6:d8:4e:3c:dc:2a:8f:16:5a: 76:e9:5d:1e:dd:aa:b6:d5:34:e5:a3:e2:e1:c6:4e:90:41:3a: 89:8b:9b:7d:57:42:62:74:a8:15:c6:eb:aa:bd:d0:87:09:21: 8a:ba:0a:3b:8c:84:82:19:bc:ff:eb:43:cc:8c:c6:12:f5:69: f9:d3:e8:76:c7:24:a3:b2:b2:5a:48:1b:b7:21:5a:e9:7f:c2: 76:e8:5e:82:59:b1:e8:58:58:7f:e1:d4:a4:49:61:a5:fe:e7: 3a:2a:09:e3:a5:aa:b1:94:7b:ff:6b:3b:fa:c8:06:8f:fc:69: 8a:78:f5:4c:1d:12:6f:00:11:d0:91:43:af:07:98:c4:31:65: fa:84:d4:5f:76:a0:7a:64:b0:27:54:1f:af:f4:53:32:b6:26: 55:a1:33:5c:15:cb:68:74:6e:3c:bb:81:a1:a3:10:57:a9:d4: 79:90:a1:ec:fb:74:4b:1b:49:24:a2:4d:63:d9:c7:b6:c6:2e: 7b:2a:7f:a1:02:40:93:cf:13:6d:91:13:b8:b0:83:0a:a1:31: d9:c8:17:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4 RjhBMjA2QzYwHhcNMjUwNTEwMjAzMTQ3WhcNMjUwNTE3MjAzMTQ3WjAYMRYwFAYD VQQDEw02ODFmYjdiMy1hMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gzzE3XmmtmBfTCU4NOYck/NDWJ5LN1GxkYEKcVTOJdwRXuwc9AjXajbbGeu 6HBYKkhJOr7P+ahW5XfQerS2aJIRC97JSEb0GtgFUY2FLXSjzQeFtGCswty77AXS KcB1HIbd5fuP9hb4PTobeNYfGZ7kK0CeFcdD6cd21FoMsHHjdYzJ18ki/hvaV9ir W2HzKLi873zLY6ncyJRJTvbRm75UzaOZIZ3x9QfujycUMe6+6Hi9zV3UUBhdiu8H IgwBdhQlDin5rHcIUw4oTEHtqk6wSsbvy9ZnWkh7UzIF4luX5Pnu94gBQ6WJ7F0H JUJ7UFPTMUd+s8nfxhsjRa2+yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHiTlBQ medygWlR4Fm24KKtyea5MB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0 RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3 M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj0YC8iGrMLOtus/fG9opLBdNjIxsdYJngPtb9QZXhJ01q258CnGAI VZcI0SX22E483CqPFlp26V0e3aq21TTlo+Lhxk6QQTqJi5t9V0JidKgVxuuqvdCH CSGKugo7jISCGbz/60PMjMYS9Wn50+h2xySjsrJaSBu3IVrpf8J26F6CWbHoWFh/ 4dSkSWGl/uc6KgnjpaqxlHv/azv6yAaP/GmKePVMHRJvABHQkUOvB5jEMWX6hNRf dqB6ZLAnVB+v9FMytiZVoTNcFctodG48u4GhoxBXqdR5kKHs+3RLG0kkok1j2ce2 xi57Kn+hAkCTzxNtkRO4sIMKoTHZyBc1 -----END CERTIFICATE-----Generated at Mon May 12 13:32:09 2025 by rpki-client