$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: aVvLys9SsdH45PmvfJwv4TukARAp0Z1wxquC6PHitcU= Subject key identifier: 8D:DA:8D:90:EB:6F:58:84:3C:A4:32:74:1E:BD:EC:C2:DF:EF:01:39 Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: 30 Signing time: Sun 11 May 2025 06:24:42 +0000 Manifest this update: Sun 11 May 2025 06:24:41 +0000 Manifest next update: Sun 18 May 2025 06:24:41 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: 2CCrgHAc3YKeAqdBrGwsINeG1w31DOye+6FyqQStMLQ=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: EzMoudDWuTdlnNruCHKgAEy3hjxWEtpDs8wnwjR1b6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: May 11 06:24:41 2025 GMT Not After : May 18 06:24:41 2025 GMT Subject: CN=682042a9-7623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b1:9a:96:c8:54:26:c0:20:9a:99:04:12:78: 88:cc:99:cb:26:39:10:9f:69:2a:e9:fc:bb:4a:04: 33:f2:8a:f5:e3:a3:f5:c7:8c:5d:ce:0c:aa:b0:26: c9:ff:a0:2b:f9:93:b7:bf:4e:f3:ce:51:8a:75:e3: 89:2e:89:47:ab:29:96:4d:61:e7:9b:f2:bf:e1:5a: 44:86:ff:a1:28:32:8f:1e:d7:bd:a6:5f:cf:e7:ed: d3:77:3a:e1:db:18:e2:75:1a:44:7a:82:4a:09:47: a2:bc:a3:90:b8:2b:64:d1:4a:7f:52:9c:a1:f7:c9: b4:0c:32:d8:49:b8:71:d8:1e:d4:6f:68:5b:76:8f: 7a:87:41:ed:70:df:1e:e6:58:4a:61:ca:8a:57:2e: 9e:fa:4a:bc:49:b4:cb:72:69:48:15:b5:29:67:62: d6:a5:83:e4:53:e1:22:4c:50:c8:56:8b:a5:1a:d6: 9b:5a:7e:c7:1b:c6:a2:22:33:0a:4f:cf:2e:4b:43: cf:b5:33:b9:df:09:e7:9a:38:f7:6a:7b:e4:72:4c: 2d:22:c4:9d:94:f8:d4:42:64:0e:ae:a1:f3:46:df: 17:9e:c9:33:61:35:67:be:47:54:b0:20:96:28:2a: c3:a7:96:6d:fa:cf:8d:ca:13:f5:dc:c7:09:f6:e0: dc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DA:8D:90:EB:6F:58:84:3C:A4:32:74:1E:BD:EC:C2:DF:EF:01:39 X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a9:e8:fa:31:bc:86:de:47:7a:66:6f:e9:96:bb:91:38:d4: 6b:ec:ad:19:78:5d:b7:94:0d:bf:84:e9:ae:ba:41:88:3f:82: f4:16:8a:53:5d:a2:2e:f5:32:36:5f:82:2f:87:28:f4:ea:f7: 96:87:f8:5b:c7:08:55:aa:5b:3d:62:9f:b3:2c:6c:0d:aa:12: 81:22:1d:e9:85:24:6f:fc:6b:7b:58:b8:62:6e:84:9e:e9:ea: 8c:dc:6f:af:ab:89:b3:8c:d4:90:56:42:ec:05:6b:02:a4:12: 43:ab:a8:a4:20:7b:c9:6f:08:dd:27:09:77:f0:17:a0:6f:b3: cb:20:02:55:6a:9a:c1:8d:6d:b5:9c:da:aa:bd:c4:8c:ac:1b: c9:c6:0b:73:d4:08:a9:6d:e7:e3:40:f9:e0:5e:09:f2:ed:8f: 14:ea:12:52:6e:af:ad:51:7d:9d:28:40:50:36:eb:35:c8:c0: da:24:da:c8:07:7a:6d:44:3a:f4:7c:82:fa:28:a4:f5:14:42: be:74:ec:10:ec:13:c3:d6:ff:eb:c7:bb:a0:e0:d2:b8:a5:7a: ee:ab:fc:e8:38:fd:99:07:6c:2a:30:0b:be:9b:dd:1e:c4:42: d7:03:11:6d:6d:9f:fa:b8:50:e8:1f:25:83:c3:77:a4:99:7e: b3:cd:88:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NEQ1NDExMC8GA1UEBRMoQUY3NjEyNTdERTJDOURBNUYzM0U3MUM2NDE5RTI2N0E4 NjJERkI2MjAeFw0yNTA1MTEwNjI0NDFaFw0yNTA1MTgwNjI0NDFaMBgxFjAUBgNV BAMTDTY4MjA0MmE5LTc2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlsZqWyFQmwCCamQQSeIjMmcsmORCfaSrp/LtKBDPyivXjo/XHjF3ODKqwJsn/ oCv5k7e/TvPOUYp144kuiUerKZZNYeeb8r/hWkSG/6EoMo8e172mX8/n7dN3OuHb GOJ1GkR6gkoJR6K8o5C4K2TRSn9SnKH3ybQMMthJuHHYHtRvaFt2j3qHQe1w3x7m WEphyopXLp76SrxJtMtyaUgVtSlnYtalg+RT4SJMUMhWi6Ua1ptafscbxqIiMwpP zy5LQ8+1M7nfCeeaOPdqe+RyTC0ixJ2U+NRCZA6uofNG3xeeyTNhNWe+R1SwIJYo KsOnlm36z43KE/Xcxwn24Nz5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjdqNkOtv WIQ8pDJ0Hr3swt/vATkwHwYDVR0jBBgwFoAUr3YSV94snaXzPnHGQZ4meoYt+2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0RDU0L0QyODc3REI2RTlF QjExRUZBNDU0MkIxOEM0RjlBRTAyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0y SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjNZU1Y5NHNuYVh6UG5IR1FaNG1lb1l0LTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 RDU0L0QyODc3REI2RTlFQjExRUZBNDU0MkIxOEM0RjlBRTAyL3IzWVNWOTRzbmFY elBuSEdRWjRtZW9ZdC0ySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCp6PoxvIbeR3pmb+mWu5E41GvsrRl4XbeUDb+E6a66QYg/gvQWilNd oi71MjZfgi+HKPTq95aH+FvHCFWqWz1in7MsbA2qEoEiHemFJG/8a3tYuGJuhJ7p 6ozcb6+ribOM1JBWQuwFawKkEkOrqKQge8lvCN0nCXfwF6Bvs8sgAlVqmsGNbbWc 2qq9xIysG8nGC3PUCKlt5+NA+eBeCfLtjxTqElJur61RfZ0oQFA26zXIwNok2sgH em1EOvR8gvoopPUUQr507BDsE8PW/+vHu6Dg0rileu6r/Og4/ZkHbCowC76b3R7E QtcDEW1tn/q4UOgfJYPDd6SZfrPNiMs= -----END CERTIFICATE-----Generated at Sun May 11 13:30:10 2025 by rpki-client