$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: aDlCI3QzXNRR9po5VaQakT2eKwAZwwMhC/VIM9IF/DU= Subject key identifier: 4F:8E:79:71:57:04:27:3B:E6:99:23:CD:57:8F:72:87:CA:CB:FC:31 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1BC0 Signing time: Fri 02 May 2025 16:22:19 +0000 Manifest this update: Fri 02 May 2025 16:22:19 +0000 Manifest next update: Fri 09 May 2025 16:22:19 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: +ynWkMJlV5OjEIdkJmA8oxqe6xEOMYjpRnV1nLWCWXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7104 (0x1bc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: May 2 16:22:19 2025 GMT Not After : May 9 16:22:19 2025 GMT Subject: CN=6814f13b-3cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:76:72:d9:ef:0c:fc:df:50:57:c2:c0:31: 4e:58:e8:dd:4c:3f:0c:cd:c8:bc:07:46:f1:d1:a6: 76:3f:3e:3a:dc:8d:1b:4d:46:5c:91:15:5c:2a:2b: f4:bf:3a:92:fb:66:05:62:c9:bf:3b:71:27:37:6a: 8a:df:01:a3:5a:52:ff:58:0e:c3:94:a8:fa:9a:61: 55:c1:3d:c3:9e:bd:93:64:fc:62:ca:9c:df:9d:30: 41:64:e0:17:ec:77:76:f3:57:78:fb:46:eb:93:ad: e6:00:ee:af:fe:de:4d:39:58:b8:99:ad:97:3c:1f: 06:c6:04:50:03:13:ad:f8:06:8b:bb:77:16:3b:f6: 8e:90:4c:e3:56:81:e0:21:24:d7:58:af:c8:4e:3f: 64:d2:70:de:81:ae:3a:42:89:6f:52:2c:ce:e3:0a: 24:fb:57:2f:1c:fd:4e:f5:0b:15:7a:1e:19:09:46: 25:95:20:91:42:58:ba:43:e7:d0:54:64:2a:49:3b: 05:cc:f0:26:fc:fe:b4:ae:ee:1d:bf:36:3e:85:3c: e6:a7:51:96:70:dd:49:7d:b5:cf:d4:e4:e7:99:da: 3c:5d:22:57:5f:ae:b8:0d:28:aa:3b:14:18:bc:20: b9:f0:23:d3:6d:21:fe:01:09:46:03:df:02:a2:a1: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8E:79:71:57:04:27:3B:E6:99:23:CD:57:8F:72:87:CA:CB:FC:31 X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:92:e5:68:9e:50:1b:81:42:41:e4:8f:f6:96:04:4b:db:f2: bc:68:6f:b0:b4:aa:9d:ce:b4:b9:d9:32:76:65:1b:c7:ca:25: f3:9b:b2:60:2e:e6:8d:64:c7:07:11:23:e7:60:ae:12:d1:96: ef:0f:62:2d:6b:b2:15:6f:cc:41:fd:65:15:f0:fc:38:8c:eb: 2b:db:5a:77:61:68:4e:49:61:5d:cc:55:81:87:45:21:56:02: b5:29:28:5d:ac:3e:15:62:d7:29:c5:28:30:7b:07:5c:f6:5e: 17:8c:ad:42:09:e8:c8:4f:30:cf:d8:62:25:35:98:3a:f2:fb: 7f:a9:3f:75:99:62:24:8e:66:4c:11:57:7d:02:f4:e0:9d:fb: 01:90:34:0b:05:9c:6f:c6:b2:d5:92:6a:87:13:fe:88:fa:bb: 17:c5:f0:b4:03:99:ed:ca:80:04:f5:2d:6d:9d:c7:3a:d1:7e: 33:68:bc:dd:88:6f:fa:75:ac:f8:d7:8c:4b:e1:65:d6:23:51: e3:10:2f:4a:c5:1e:02:4b:c5:b3:98:c9:d1:b9:d2:1e:31:fc: 6e:1e:ef:81:89:fc:2d:c4:74:46:a3:84:76:62:0e:4a:c6:03: bb:e4:fe:13:f8:62:39:df:e6:52:45:fd:50:6f:b1:16:f4:8e: db:9c:5e:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUwNTAyMTYyMjE5WhcNMjUwNTA5MTYyMjE5WjAYMRYwFAYD VQQDEw02ODE0ZjEzYi0zY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtJ2ctnvDPzfUFfCwDFOWOjdTD8Mzci8B0bx0aZ2Pz463I0bTUZckRVcKiv0 vzqS+2YFYsm/O3EnN2qK3wGjWlL/WA7DlKj6mmFVwT3Dnr2TZPxiypzfnTBBZOAX 7Hd281d4+0brk63mAO6v/t5NOVi4ma2XPB8GxgRQAxOt+AaLu3cWO/aOkEzjVoHg ISTXWK/ITj9k0nDega46QolvUizO4wok+1cvHP1O9QsVeh4ZCUYllSCRQli6Q+fQ VGQqSTsFzPAm/P60ru4dvzY+hTzmp1GWcN1JfbXP1OTnmdo8XSJXX664DSiqOxQY vCC58CPTbSH+AQlGA98CoqGlZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+OeXFX BCc75pkjzVePcofKy/wxMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNkuVonlAbgUJB5I/2lgRL2/K8aG+wtKqdzrS52TJ2ZRvHyiXzm7Jg LuaNZMcHESPnYK4S0ZbvD2Ita7IVb8xB/WUV8Pw4jOsr21p3YWhOSWFdzFWBh0Uh VgK1KShdrD4VYtcpxSgwewdc9l4XjK1CCejITzDP2GIlNZg68vt/qT91mWIkjmZM EVd9AvTgnfsBkDQLBZxvxrLVkmqHE/6I+rsXxfC0A5ntyoAE9S1tncc60X4zaLzd iG/6daz414xL4WXWI1HjEC9KxR4CS8WzmMnRudIeMfxuHu+BifwtxHRGo4R2Yg5K xgO75P4T+GI53+ZSRf1Qb7EW9I7bnF5c -----END CERTIFICATE-----Generated at Sat May 3 07:35:39 2025 by rpki-client