$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: wO6D6hvijpTgP5PPr8o1ME0z5KVD7R1Nnk52GEiZ2do= Subject key identifier: B9:2C:E3:A2:87:C2:2E:1C:E9:00:ED:C6:16:F4:A9:6B:09:25:87:F3 Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 016B Signing time: Sun 11 May 2025 02:06:56 +0000 Manifest this update: Sun 11 May 2025 02:06:55 +0000 Manifest next update: Sun 18 May 2025 02:06:55 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: UOSjFFltSshtZpEH7O+GITo4WPqkTARQtedCNsRUfjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: May 11 02:06:55 2025 GMT Not After : May 18 02:06:55 2025 GMT Subject: CN=68200640-f202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:ea:75:b1:d6:42:f7:95:39:e7:36:c0:a3: e2:a7:00:e1:09:13:1c:89:7c:60:c7:f0:24:b0:66: d5:e2:9c:48:8c:b2:fb:be:bb:de:c8:4d:cc:c6:c4: 18:eb:00:6a:c0:ae:ab:99:8f:db:39:fe:68:2d:75: 18:c2:31:e3:2f:7d:b4:f1:65:bc:b9:d5:cc:d2:cf: cd:40:6d:cc:dc:f7:62:07:d0:d5:1e:f0:ff:84:b0: 1a:42:76:aa:0b:5a:b0:7f:96:0d:64:b6:f9:dd:9e: 2d:0b:a6:6e:0c:99:50:82:cd:76:a8:b2:a5:40:d8: 78:c3:a1:3d:79:04:7d:36:87:3d:da:a0:ee:44:66: 6d:1e:7e:ab:af:8e:7b:88:28:f8:b6:37:93:26:74: 14:5b:db:14:0d:2d:67:ac:ea:58:4a:b2:79:da:bb: 7d:eb:b0:7b:5f:ab:b2:4a:61:34:25:5c:47:e7:6b: 18:ce:2a:bc:c7:57:f9:77:56:3e:16:a4:d4:ae:cb: 67:33:4f:73:60:fd:4a:54:e7:2f:4e:20:24:19:31: 66:96:ae:55:04:06:ce:15:e3:78:41:49:4e:33:1a: f7:bf:8f:83:9b:33:96:e1:4e:33:b6:06:ef:d5:0d: 98:5e:eb:9f:5f:e9:30:65:ce:b2:ab:ff:e3:1c:9d: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2C:E3:A2:87:C2:2E:1C:E9:00:ED:C6:16:F4:A9:6B:09:25:87:F3 X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5f:79:a4:af:4b:3f:6e:64:31:f4:79:e2:46:e4:eb:60:91: c3:33:7d:87:88:35:94:42:49:90:86:08:31:94:87:20:bd:70: 69:9a:31:79:af:85:1a:5b:c5:17:13:80:84:2f:64:43:f0:e6: 82:75:76:a8:94:dd:4e:0b:78:88:dd:fd:f6:11:e9:b2:4e:dc: c3:2f:58:4e:ee:95:95:ac:38:49:f2:21:c3:49:b8:07:a9:4b: fa:aa:61:1f:20:0e:18:1f:5b:74:61:5b:e6:bb:b5:51:89:4f: c5:0f:8b:8f:b2:9f:13:70:b4:17:5a:2f:9c:59:2a:bc:87:42: 83:d4:f7:39:50:54:af:1a:a4:3b:e6:3c:de:3c:57:ba:5f:5e: 2a:d7:09:18:50:d7:a2:4b:6e:fc:15:af:4b:61:47:b9:f5:f5: 56:ae:52:fe:98:c4:b3:31:9c:d1:38:f0:41:8a:25:2d:ed:2f: 4b:44:22:13:71:15:ac:16:f3:a4:36:cf:8f:b6:c3:60:f7:92: a6:ca:62:60:63:3e:2e:a8:15:3f:5b:f4:71:da:f3:8a:72:f9: 20:76:86:33:c0:59:7b:81:2a:b1:8b:ef:87:0a:88:97:fc:f8: 45:eb:19:c5:2c:1e:0d:51:17:24:61:3f:a8:21:c8:ad:f5:cd: c5:c6:14:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjUwNTExMDIwNjU1WhcNMjUwNTE4MDIwNjU1WjAYMRYwFAYD VQQDEw02ODIwMDY0MC1mMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhLqdbHWQveVOec2wKPipwDhCRMciXxgx/AksGbV4pxIjLL7vrveyE3MxsQY 6wBqwK6rmY/bOf5oLXUYwjHjL3208WW8udXM0s/NQG3M3PdiB9DVHvD/hLAaQnaq C1qwf5YNZLb53Z4tC6ZuDJlQgs12qLKlQNh4w6E9eQR9Noc92qDuRGZtHn6rr457 iCj4tjeTJnQUW9sUDS1nrOpYSrJ52rt967B7X6uySmE0JVxH52sYziq8x1f5d1Y+ FqTUrstnM09zYP1KVOcvTiAkGTFmlq5VBAbOFeN4QUlOMxr3v4+DmzOW4U4ztgbv 1Q2YXuufX+kwZc6yq//jHJ2ywQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLks46KH wi4c6QDtxhb0qWsJJYfzMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsX3mkr0s/bmQx9HniRuTrYJHDM32HiDWUQkmQhggxlIcgvXBpmjF5 r4UaW8UXE4CEL2RD8OaCdXaolN1OC3iI3f32EemyTtzDL1hO7pWVrDhJ8iHDSbgH qUv6qmEfIA4YH1t0YVvmu7VRiU/FD4uPsp8TcLQXWi+cWSq8h0KD1Pc5UFSvGqQ7 5jzePFe6X14q1wkYUNeiS278Fa9LYUe59fVWrlL+mMSzMZzROPBBiiUt7S9LRCIT cRWsFvOkNs+PtsNg95KmymJgYz4uqBU/W/Rx2vOKcvkgdoYzwFl7gSqxi++HCoiX /PhF6xnFLB4NURckYT+oIcit9c3FxhRV -----END CERTIFICATE-----Generated at Mon May 12 12:53:32 2025 by rpki-client