$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: 9x+wT7n96iun+HlHAeFxRUxHpJK8FcaxGZVtDTKVOdk= Subject key identifier: 93:C3:35:74:7A:55:B4:83:2F:E8:EC:6A:86:F0:DB:94:66:3F:2F:1A Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0C5B Signing time: Mon 12 May 2025 18:12:32 +0000 Manifest this update: Mon 12 May 2025 18:12:31 +0000 Manifest next update: Mon 19 May 2025 18:12:31 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: 7uRag9x8l1sSnVeFC+p8MBx+mfLKNmItaEVNjMC/XkA=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 3at8OHhr3TWPa09hDLUXiFFjg44cS/0xW9KQOVKngqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: May 12 18:12:31 2025 GMT Not After : May 19 18:12:31 2025 GMT Subject: CN=68223a0f-2d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:25:33:62:8b:e4:be:01:e3:bf:68:39:0f:ce: fd:81:3c:02:71:a7:d8:aa:63:5d:f1:be:8d:af:e6: e7:1c:7c:bf:41:f4:55:7d:b2:bd:30:49:d0:61:74: c9:6b:c3:50:a1:25:d7:e6:f9:06:da:42:6c:23:87: 5b:fc:01:7b:ff:22:a9:77:05:5a:92:fc:58:7b:fc: ba:a5:44:74:81:50:05:b5:55:30:a3:35:78:8c:04: 51:88:b0:fe:7b:8c:10:46:48:1a:3c:fa:fa:b2:3c: fa:cf:3b:f8:da:96:4c:35:b3:aa:aa:c7:28:f4:10: d0:9f:c5:34:38:3f:f8:ea:ec:12:80:aa:a2:79:b6: 60:22:b3:f2:84:0b:cf:9b:53:cc:10:9e:2a:c1:bf: 5a:2a:4a:de:2b:96:ce:0e:04:49:2f:69:88:ad:62: cb:4a:8c:e1:46:9c:17:89:45:c2:1a:e6:02:4d:c4: a5:42:32:84:02:7b:8c:f4:20:08:aa:27:17:fb:ad: e5:2d:b8:59:8e:ee:19:92:5d:29:7a:62:fe:e2:d4: 2f:43:07:84:0a:95:9d:de:8a:2f:db:e4:46:97:6e: 32:3e:9d:a9:42:84:a3:5d:a1:c9:ee:ee:55:27:7e: 7c:2d:31:b4:50:cd:a9:66:13:76:0a:79:8c:97:49: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C3:35:74:7A:55:B4:83:2F:E8:EC:6A:86:F0:DB:94:66:3F:2F:1A X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:24:16:00:b5:92:fd:a1:5a:61:89:d4:f3:b5:4c:08:d9:5a: 09:d0:fe:78:f8:f8:5b:02:5e:dd:52:47:31:73:fa:47:c4:23: e7:71:73:b4:85:c3:a1:da:25:6a:28:0a:17:0f:76:b2:5d:4a: df:36:98:55:df:e9:bf:b5:10:f3:9d:3b:ab:bd:8c:c2:38:d2: a8:36:5a:9f:83:8e:9c:bd:8c:fa:46:74:6c:93:b0:55:b5:35: c7:0c:c3:10:87:bf:37:bf:68:55:52:fa:56:8e:9f:c1:9f:81: 4f:69:62:f9:c0:2a:d8:4c:69:f4:9c:b3:3f:6a:7a:fe:d2:3c: fd:c1:97:cf:ae:7f:63:e4:21:f9:5d:ef:ef:b5:40:91:b1:85: f9:9c:a3:8d:74:03:ed:08:a5:ee:68:c0:1d:05:dd:19:8f:bf: dd:55:82:3c:30:50:9c:3c:1f:52:19:a1:e5:ec:20:e5:b7:53: 75:eb:be:7b:3d:80:e2:e6:15:49:82:b3:32:57:d9:a5:11:a9: 95:97:cd:ea:49:3a:e1:dd:a7:8b:3d:73:e4:5d:bd:23:b3:ba: 90:1a:b2:1a:01:48:ad:fa:ba:2e:86:d9:dc:b6:fa:76:0c:04: 07:62:39:f3:0d:a4:c9:d9:e2:ab:40:85:cd:55:aa:d9:f0:32: 4d:a0:19:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjUwNTEyMTgxMjMxWhcNMjUwNTE5MTgxMjMxWjAYMRYwFAYD VQQDEw02ODIyM2EwZi0yZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SUzYovkvgHjv2g5D879gTwCcafYqmNd8b6Nr+bnHHy/QfRVfbK9MEnQYXTJ a8NQoSXX5vkG2kJsI4db/AF7/yKpdwVakvxYe/y6pUR0gVAFtVUwozV4jARRiLD+ e4wQRkgaPPr6sjz6zzv42pZMNbOqqsco9BDQn8U0OD/46uwSgKqiebZgIrPyhAvP m1PMEJ4qwb9aKkreK5bODgRJL2mIrWLLSozhRpwXiUXCGuYCTcSlQjKEAnuM9CAI qicX+63lLbhZju4Zkl0pemL+4tQvQweECpWd3oov2+RGl24yPp2pQoSjXaHJ7u5V J358LTG0UM2pZhN2CnmMl0lhtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPDNXR6 VbSDL+jsaobw25RmPy8aMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1JBYAtZL9oVphidTztUwI2VoJ0P54+PhbAl7dUkcxc/pHxCPncXO0 hcOh2iVqKAoXD3ayXUrfNphV3+m/tRDznTurvYzCONKoNlqfg46cvYz6RnRsk7BV tTXHDMMQh783v2hVUvpWjp/Bn4FPaWL5wCrYTGn0nLM/anr+0jz9wZfPrn9j5CH5 Xe/vtUCRsYX5nKONdAPtCKXuaMAdBd0Zj7/dVYI8MFCcPB9SGaHl7CDlt1N16757 PYDi5hVJgrMyV9mlEamVl83qSTrh3aeLPXPkXb0js7qQGrIaAUit+rouhtnctvp2 DAQHYjnzDaTJ2eKrQIXNVarZ8DJNoBn7 -----END CERTIFICATE-----Generated at Tue May 13 08:56:05 2025 by rpki-client