$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: GNLiCjuFRWmDIb18qQ8VSlIK8pYTaRA1NKw7Las86BA= Subject key identifier: 5A:E9:43:B8:45:90:B7:B5:1C:18:09:95:55:CF:91:A2:D9:E7:74:B4 Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 012C Signing time: Sun 11 May 2025 03:25:52 +0000 Manifest this update: Sun 11 May 2025 03:25:51 +0000 Manifest next update: Sun 18 May 2025 03:25:51 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: uPR4vFGwwVXJu9dsFXFdPMa8Bp3qGHe6237FtPtSvgE=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: g/Vp4JxPAnFvSE7br/vqo4Gmy4ZBC5/7hAk3ouH5N3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: May 11 03:25:51 2025 GMT Not After : May 18 03:25:51 2025 GMT Subject: CN=682018bf-3848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:c2:56:ea:95:61:ee:73:a2:67:58:af:d9: cd:33:a4:58:e3:c3:c7:0a:27:84:60:01:26:3f:3a: 70:1f:fa:ad:a9:04:a9:75:60:6b:12:77:a7:ec:13: fd:2d:d9:00:e2:99:59:90:6c:4f:b1:72:7d:96:13: 9a:3d:2e:c5:13:65:be:d5:9d:ec:f7:8f:1c:92:35: f7:91:8a:a8:fc:ec:ae:a8:ee:30:62:3b:a0:a2:af: 7f:06:99:9e:91:e6:dc:e3:36:8c:aa:e8:8a:84:7f: 6d:b5:e5:4e:2f:d9:b2:84:00:5f:e6:33:cc:2e:31: ca:f9:fb:27:a0:be:a3:72:5f:e7:07:a4:ad:de:56: c8:c5:94:ba:42:e6:53:c5:c7:ef:71:82:54:0a:c1: a9:99:f8:3f:ee:65:9d:6c:b6:0f:d7:6a:9a:e1:48: e6:f3:e5:57:b4:db:6b:2f:17:3d:30:ce:ab:d2:0f: 1f:92:68:73:da:c5:8c:9d:81:4f:81:71:42:2f:fb: 35:66:53:12:01:e6:3e:c9:de:b5:aa:22:25:2b:cf: af:4c:0b:14:86:17:00:3b:ef:bd:a4:bf:c9:3b:ec: 7f:09:26:46:24:07:3d:36:a7:54:15:25:7b:2e:33: 07:cb:97:16:bb:09:da:c4:ca:06:e1:ec:7b:2b:42: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:43:B8:45:90:B7:B5:1C:18:09:95:55:CF:91:A2:D9:E7:74:B4 X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fc:b1:be:4c:a9:19:3b:af:19:c2:24:ad:73:54:b6:c9:29: 42:64:81:4e:9e:51:e4:ef:37:9b:08:13:c5:7d:8f:24:84:a3: 6a:3e:39:43:9f:c1:95:68:85:e9:c8:a0:73:42:bb:5a:11:9c: 2c:23:80:27:c6:97:8f:63:1e:b7:80:ad:02:55:36:03:6c:41: fa:b7:25:d8:82:d2:f5:d7:1c:62:a1:2e:b6:f5:b9:b7:ce:34: 24:6d:c8:de:55:28:23:2f:0c:c1:00:be:9b:45:15:68:84:d2: 84:18:28:d5:73:61:81:dd:82:0f:09:6b:65:dd:e7:f9:c1:84: 2f:a5:80:bb:5e:68:70:ad:79:35:df:98:fe:8c:eb:9a:63:bb: b4:82:f7:fa:82:e5:88:ea:39:b5:6c:f1:34:cd:18:49:cb:51: ec:06:2b:1c:56:12:40:6f:dd:5b:03:a8:63:7a:52:ee:5e:d0: 2b:4d:87:13:4b:83:12:fc:09:a6:55:a1:e5:0a:83:92:d0:5a: e3:e9:e5:a0:2f:00:b3:41:17:9a:5e:bf:0d:07:9d:09:0f:68: b0:cb:b2:c5:44:67:30:52:34:78:78:3e:7c:57:db:2e:80:e7: 89:99:5e:2f:51:05:7f:b0:f8:9d:4b:10:db:66:3a:66:e9:a9: 0e:6f:ab:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjUwNTExMDMyNTUxWhcNMjUwNTE4MDMyNTUxWjAYMRYwFAYD VQQDEw02ODIwMThiZi0zODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0R7CVuqVYe5zomdYr9nNM6RY48PHCieEYAEmPzpwH/qtqQSpdWBrEnen7BP9 LdkA4plZkGxPsXJ9lhOaPS7FE2W+1Z3s948ckjX3kYqo/OyuqO4wYjugoq9/Bpme kebc4zaMquiKhH9tteVOL9myhABf5jPMLjHK+fsnoL6jcl/nB6St3lbIxZS6QuZT xcfvcYJUCsGpmfg/7mWdbLYP12qa4Ujm8+VXtNtrLxc9MM6r0g8fkmhz2sWMnYFP gXFCL/s1ZlMSAeY+yd61qiIlK8+vTAsUhhcAO++9pL/JO+x/CSZGJAc9NqdUFSV7 LjMHy5cWuwnaxMoG4ex7K0KXZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrpQ7hF kLe1HBgJlVXPkaLZ53S0MB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX/LG+TKkZO68ZwiStc1S2ySlCZIFOnlHk7zebCBPFfY8khKNqPjlD n8GVaIXpyKBzQrtaEZwsI4AnxpePYx63gK0CVTYDbEH6tyXYgtL11xxioS629bm3 zjQkbcjeVSgjLwzBAL6bRRVohNKEGCjVc2GB3YIPCWtl3ef5wYQvpYC7XmhwrXk1 35j+jOuaY7u0gvf6guWI6jm1bPE0zRhJy1HsBiscVhJAb91bA6hjelLuXtArTYcT S4MS/AmmVaHlCoOS0Frj6eWgLwCzQReaXr8NB50JD2iwy7LFRGcwUjR4eD58V9su gOeJmV4vUQV/sPidSxDbZjpm6akOb6s2 -----END CERTIFICATE-----Generated at Sun May 11 14:57:47 2025 by rpki-client