$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: srtI+7ErF9Bsvo0XJzL5vBFoEkbc0sbrEyWfWqDrheg= Subject key identifier: C8:F5:24:9A:41:04:76:A1:45:16:B9:BF:61:85:7C:DD:47:BF:DA:8E Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 015C Signing time: Fri 09 May 2025 03:11:23 +0000 Manifest this update: Fri 09 May 2025 03:11:22 +0000 Manifest next update: Fri 16 May 2025 03:11:22 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: E3EIPsorJbLXdFstJ30eKcq9zS2p9Wv3lMZug4hATgk=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: rH0gRhN/HJ8HJHVTL+JV1bpQN/J5hF8E0YYPa3z7lJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: May 9 03:11:22 2025 GMT Not After : May 16 03:11:22 2025 GMT Subject: CN=681d725b-b01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7c:dd:b4:e7:b5:31:5f:6d:af:72:4d:76:57: 19:5d:49:92:77:a6:97:3a:7a:aa:78:c5:0a:64:8d: 6a:19:02:81:6c:66:e6:1e:48:14:31:c0:17:3e:a0: 1a:db:11:15:c7:03:cf:5a:b9:5d:1d:34:2f:5f:5f: 55:80:99:9d:cc:07:5b:7a:94:60:22:1b:55:15:86: fd:df:88:12:6b:3c:78:7b:52:f9:b5:ae:dd:ec:36: ce:55:65:15:cf:63:1f:94:9f:a1:5c:7c:35:e5:9b: 8b:80:23:e7:46:18:d5:6a:5e:9d:85:10:3b:2d:f2: b5:d8:9c:17:7c:cb:4f:ba:40:36:08:fc:6f:64:18: 10:cb:a1:3b:c2:e8:7d:3e:86:49:4f:d1:0d:18:bb: 67:9d:79:bd:d7:19:36:4f:16:43:1e:67:04:31:52: 61:1e:ba:2e:c3:8c:a1:8f:18:9d:7b:ad:af:e3:e2: c0:ea:ad:54:41:08:08:b3:f7:7a:24:2e:52:2a:db: dd:08:d9:80:48:49:7d:56:a8:9b:db:03:e9:ce:17: a0:d6:16:0f:c7:13:3b:d7:b8:4c:82:77:53:eb:6d: 3d:cb:4a:4a:d4:68:20:11:48:d9:7e:95:c0:f5:47: 13:89:8c:db:b0:72:09:2d:21:5b:e3:e2:c0:ba:03: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F5:24:9A:41:04:76:A1:45:16:B9:BF:61:85:7C:DD:47:BF:DA:8E X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b3:ac:62:f3:06:c9:7c:15:2a:bd:b4:5c:5f:61:4c:86:ab: f5:20:f1:13:16:43:a6:c6:1e:ac:1e:43:8d:c2:8c:4e:63:40: 4d:41:93:a5:35:50:91:6d:8a:b6:73:71:0e:b5:6c:c1:f3:c5: f8:9e:bd:99:7e:79:64:c1:1b:4c:3c:ed:d1:bd:eb:45:8a:cf: da:d0:69:e2:36:c7:82:00:81:56:1a:20:ee:4b:46:1e:74:b4: b0:41:92:e2:b6:b5:3e:2e:bd:59:aa:18:f3:3e:96:6d:f7:28: c6:0f:81:05:e2:53:32:07:1b:0a:f0:fe:82:7c:3d:14:d8:6c: 16:4e:cc:3d:df:26:0d:2a:03:33:20:f7:07:db:e2:2d:90:cc: e7:67:a5:16:3a:da:13:9b:e7:ff:22:aa:43:a1:c7:0b:81:cd: e3:69:da:6d:24:e1:74:db:c7:13:93:c3:d6:4a:fb:ed:79:5a: bf:f5:e7:e2:89:e2:b3:25:e7:ea:dd:41:6c:5d:cc:be:bf:77: 0d:b6:67:c2:4e:7e:6a:36:45:97:7f:6b:ee:2a:30:b5:23:1d: 11:b4:be:8b:1f:5f:26:db:d5:eb:3d:ae:86:b3:c7:ef:6f:ce: 64:89:20:34:de:c3:dd:29:28:81:80:7c:a3:c8:d9:48:92:b2: 70:3f:22:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjUwNTA5MDMxMTIyWhcNMjUwNTE2MDMxMTIyWjAYMRYwFAYD VQQDEw02ODFkNzI1Yi1iMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XzdtOe1MV9tr3JNdlcZXUmSd6aXOnqqeMUKZI1qGQKBbGbmHkgUMcAXPqAa 2xEVxwPPWrldHTQvX19VgJmdzAdbepRgIhtVFYb934gSazx4e1L5ta7d7DbOVWUV z2MflJ+hXHw15ZuLgCPnRhjVal6dhRA7LfK12JwXfMtPukA2CPxvZBgQy6E7wuh9 PoZJT9ENGLtnnXm91xk2TxZDHmcEMVJhHrouw4yhjxide62v4+LA6q1UQQgIs/d6 JC5SKtvdCNmASEl9Vqib2wPpzheg1hYPxxM717hMgndT6209y0pK1GggEUjZfpXA 9UcTiYzbsHIJLSFb4+LAugNOuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj1JJpB BHahRRa5v2GFfN1Hv9qOMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAds6xi8wbJfBUqvbRcX2FMhqv1IPETFkOmxh6sHkONwoxOY0BNQZOl NVCRbYq2c3EOtWzB88X4nr2ZfnlkwRtMPO3RvetFis/a0GniNseCAIFWGiDuS0Ye dLSwQZLitrU+Lr1ZqhjzPpZt9yjGD4EF4lMyBxsK8P6CfD0U2GwWTsw93yYNKgMz IPcH2+ItkMznZ6UWOtoTm+f/IqpDoccLgc3jadptJOF028cTk8PWSvvteVq/9efi ieKzJefq3UFsXcy+v3cNtmfCTn5qNkWXf2vuKjC1Ix0RtL6LH18m29XrPa6Gs8fv b85kiSA03sPdKSiBgHyjyNlIkrJwPyI1 -----END CERTIFICATE-----Generated at Sun May 11 01:25:12 2025 by rpki-client