$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: PkrAwYN5hUNI7/JR96SX2OqAW24oGGeF3FZIBAKakjQ= Subject key identifier: FC:BF:4A:DA:B0:49:0F:6A:FD:23:E4:80:7D:77:94:58:06:C3:61:08 Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 03F4 Signing time: Thu 15 May 2025 00:30:11 +0000 Manifest this update: Thu 15 May 2025 00:30:11 +0000 Manifest next update: Thu 22 May 2025 00:30:11 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: Xgq5FncRFgxSJz+Vlfm6ssQQFL9/93CKmE2i6+Kg9sk=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2+LI0FBQeI2/dX1G7Td9+baIQ/+USHCLEosOYsTW+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: May 15 00:30:11 2025 GMT Not After : May 22 00:30:11 2025 GMT Subject: CN=68253593-f9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:b3:c0:a6:13:80:ec:fe:e4:20:b6:8b:ab: 0b:c0:24:e9:7e:8e:5a:99:68:3d:bd:0a:fa:a4:11: de:1f:0a:8c:6f:46:a5:0a:fd:3b:84:1d:07:4c:8f: 8a:84:25:b9:f9:8e:27:a2:aa:30:20:2c:61:6b:9e: a6:45:90:6b:a6:83:17:bd:dd:a8:3f:0e:71:e3:fd: 72:09:f2:cf:e7:d8:f2:ad:d1:e2:b5:24:11:af:8d: 93:aa:d8:15:7c:f2:42:fa:71:19:34:42:f2:8e:42: 80:95:28:84:b2:c2:37:4f:6c:3b:5e:e7:1a:97:73: 40:f2:cb:9b:af:7b:14:57:b8:3e:df:6a:71:3e:d9: 28:73:d9:ac:3f:cc:a3:92:bb:ea:08:87:f9:46:53: 2a:41:f0:27:93:52:c5:0c:aa:07:ad:70:84:52:fe: 6e:f0:8f:23:69:4f:fa:be:9c:52:56:a6:4c:66:ea: 1d:30:fb:b2:3b:6b:ec:91:58:22:28:60:1f:bf:5f: f1:eb:81:3a:c9:0c:c8:20:65:66:de:69:88:b3:a7: f8:a9:73:6a:72:78:db:1b:51:8b:28:33:82:b6:88: 41:32:ea:32:2a:79:ca:f6:c6:30:30:21:c8:fd:df: d4:d1:67:a1:bb:0c:60:dc:84:43:10:68:cd:01:7f: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BF:4A:DA:B0:49:0F:6A:FD:23:E4:80:7D:77:94:58:06:C3:61:08 X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:73:b3:dc:52:77:22:9d:55:c0:19:c7:dc:30:1a:91:74:81: a5:22:4e:e2:19:3a:1a:be:45:46:54:58:1f:90:a0:d2:97:b8: bc:13:01:31:eb:ed:fc:e6:e3:07:de:7e:cd:d6:cb:8d:ed:a7: 39:c2:53:15:08:a2:54:f4:c7:c7:fd:ce:19:59:15:84:84:ac: c4:a8:a4:25:43:5b:18:27:a6:68:e7:46:c4:6f:de:5a:7d:c7: 63:20:6d:33:dd:a1:73:61:de:73:de:c1:a9:7a:4f:ea:01:c8: b2:64:fe:81:b9:97:24:97:b8:46:49:3b:e3:2a:0c:b0:4c:17: d4:6a:06:62:f0:3d:a5:f5:86:3f:d6:a8:f7:fe:26:38:06:e8: ca:66:da:7a:79:61:b7:74:15:d7:56:45:c3:b1:b8:0d:e4:7a: ea:d7:46:aa:a2:67:84:98:14:98:a4:3b:c8:56:23:39:50:96: 33:fc:90:71:ef:1c:a2:fa:4f:4c:bc:47:9f:26:46:13:da:1e: 1f:97:d4:bc:12:04:18:49:b4:19:f2:77:cf:30:b8:44:5e:1b: 6a:d8:58:73:6a:67:c0:97:d6:9f:af:e7:93:c5:96:13:0c:3b: 17:71:50:36:6b:7c:4b:c8:c1:64:bb:d2:bd:b9:de:42:af:eb: 79:1b:a2:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjUwNTE1MDAzMDExWhcNMjUwNTIyMDAzMDExWjAYMRYwFAYD VQQDEw02ODI1MzU5My1mOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTezwKYTgOz+5CC2i6sLwCTpfo5amWg9vQr6pBHeHwqMb0alCv07hB0HTI+K hCW5+Y4noqowICxha56mRZBrpoMXvd2oPw5x4/1yCfLP59jyrdHitSQRr42TqtgV fPJC+nEZNELyjkKAlSiEssI3T2w7Xucal3NA8subr3sUV7g+32pxPtkoc9msP8yj krvqCIf5RlMqQfAnk1LFDKoHrXCEUv5u8I8jaU/6vpxSVqZMZuodMPuyO2vskVgi KGAfv1/x64E6yQzIIGVm3mmIs6f4qXNqcnjbG1GLKDOCtohBMuoyKnnK9sYwMCHI /d/U0Wehuwxg3IRDEGjNAX+04QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy/Stqw SQ9q/SPkgH13lFgGw2EIMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCec7PcUncinVXAGcfcMBqRdIGlIk7iGToavkVGVFgfkKDSl7i8EwEx 6+385uMH3n7N1suN7ac5wlMVCKJU9MfH/c4ZWRWEhKzEqKQlQ1sYJ6Zo50bEb95a fcdjIG0z3aFzYd5z3sGpek/qAciyZP6BuZckl7hGSTvjKgywTBfUagZi8D2l9YY/ 1qj3/iY4BujKZtp6eWG3dBXXVkXDsbgN5Hrq10aqomeEmBSYpDvIViM5UJYz/JBx 7xyi+k9MvEefJkYT2h4fl9S8EgQYSbQZ8nfPMLhEXhtq2FhzamfAl9afr+eTxZYT DDsXcVA2a3xLyMFku9K9ud5Cr+t5G6Iq -----END CERTIFICATE-----Generated at Fri May 16 07:17:06 2025 by rpki-client