$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: gAahuO+gsWWSEsYy6CNhUw/RPfl2nPuaEgUKU/tbAhs= Subject key identifier: 24:4E:5B:AF:5D:10:F5:16:3C:06:E0:10:7A:DA:6A:96:46:58:96:91 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 2567 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2532 Signing time: Thu 24 Apr 2025 14:20:30 +0000 Manifest this update: Thu 24 Apr 2025 14:20:30 +0000 Manifest next update: Thu 01 May 2025 14:20:30 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: 3ilXeFRWnNbFArL1qvFwepIf012PV/IPdhOM7cbXxGQ=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) 7: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: QuRY0ECb/GscIKQG3TIAOw51gGl4J73Kmkxl36DZ8mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9575 (0x2567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Apr 24 14:20:30 2025 GMT Not After : May 1 14:20:30 2025 GMT Subject: CN=680a48ae-455e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cf:73:75:7b:f1:df:e7:b3:f1:46:b6:5c:64: b1:50:9f:7b:3e:20:dd:bb:7a:dc:a6:3f:ac:5b:16: 4d:c0:1e:f3:a8:e3:ea:c9:11:5c:32:78:f8:b1:e7: 26:19:79:3e:7c:fe:2d:1e:bc:8e:30:f2:1a:63:2e: d1:7f:34:85:48:c2:d7:27:0c:21:7d:c6:72:aa:e9: 76:19:e7:ec:18:fa:4c:29:27:83:9f:f6:c7:76:f4: 11:df:79:eb:44:73:1f:2e:1c:8a:ad:d3:99:ff:a9: c7:3e:3b:ca:ed:25:e0:fe:48:6f:66:9e:7e:aa:27: 1c:9a:27:c4:e3:c4:ab:91:54:02:58:b8:6f:37:c5: 4f:4d:26:bf:93:a1:7a:30:6c:a6:60:a2:a9:4f:64: 4f:8c:ff:b8:e0:6f:1f:83:e8:9c:cd:6d:08:07:7d: f7:54:86:de:53:3d:c0:73:01:9a:8c:8f:cc:97:83: 97:21:dd:02:9a:2b:92:d4:6f:a8:b9:6d:da:39:c3: 59:72:76:98:24:4e:16:98:84:5d:53:dc:11:f9:57: c9:4c:e0:dc:40:60:9c:12:98:2d:5a:ea:af:83:f3: 48:02:b0:12:f3:87:d8:69:0d:4b:6b:ff:00:79:c9: d3:61:ef:d2:bc:69:57:f9:1c:02:40:35:0f:e4:d5: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4E:5B:AF:5D:10:F5:16:3C:06:E0:10:7A:DA:6A:96:46:58:96:91 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1f:53:2e:85:e8:22:9b:7b:a1:ec:7b:38:7c:25:b0:59:4a: f6:88:2c:f1:f0:ce:6f:4e:74:7b:a2:ba:57:ee:94:f2:5c:3c: b2:1e:8e:20:f6:d5:57:4f:8a:5d:7b:0c:20:e7:5d:b8:71:37: 5e:ec:74:73:a1:34:f9:c1:8e:51:41:a0:a0:c2:2f:26:2d:bd: 2b:c6:5a:43:7d:19:c4:44:f6:e9:88:63:be:67:f1:a0:40:6a: b3:dc:61:2d:3c:92:26:a7:e7:ad:10:6c:05:a4:a5:c2:a0:ae: 9c:3c:b5:66:bf:59:0e:a2:46:7e:d9:f8:04:bc:83:17:8a:24: e5:7f:c9:40:18:95:47:37:b0:9c:ab:73:85:15:3c:c3:8b:cb: 6e:f8:56:24:8a:2c:2c:f8:6a:67:ae:f4:7e:c0:43:73:5d:73: b4:97:b6:bd:7c:c6:7c:41:18:b7:71:34:c4:3d:b5:12:e4:35: bc:27:c3:b8:85:d2:bd:e5:7c:80:31:56:e7:e3:ff:60:10:5e: cc:5f:a6:ee:e6:4e:4e:ea:55:60:ae:93:2a:91:f7:d7:5b:b8: 0d:14:02:91:a1:dd:f5:29:3d:f7:be:33:25:f9:4f:97:9c:a3: 2d:33:d2:8e:92:29:83:d2:98:a7:da:66:81:3a:5f:c3:85:68: d3:87:e3:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwNDI0MTQyMDMwWhcNMjUwNTAxMTQyMDMwWjAYMRYwFAYD VQQDEw02ODBhNDhhZS00NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5c9zdXvx3+ez8Ua2XGSxUJ97PiDdu3rcpj+sWxZNwB7zqOPqyRFcMnj4secm GXk+fP4tHryOMPIaYy7RfzSFSMLXJwwhfcZyqul2GefsGPpMKSeDn/bHdvQR33nr RHMfLhyKrdOZ/6nHPjvK7SXg/khvZp5+qiccmifE48SrkVQCWLhvN8VPTSa/k6F6 MGymYKKpT2RPjP+44G8fg+iczW0IB333VIbeUz3AcwGajI/Ml4OXId0CmiuS1G+o uW3aOcNZcnaYJE4WmIRdU9wR+VfJTODcQGCcEpgtWuqvg/NIArAS84fYaQ1La/8A ecnTYe/SvGlX+RwCQDUP5NUHXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCROW69d EPUWPAbgEHraapZGWJaRMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9H1Muhegim3uh7Hs4fCWwWUr2iCzx8M5vTnR7orpX7pTyXDyyHo4g 9tVXT4pdewwg5124cTde7HRzoTT5wY5RQaCgwi8mLb0rxlpDfRnERPbpiGO+Z/Gg QGqz3GEtPJImp+etEGwFpKXCoK6cPLVmv1kOokZ+2fgEvIMXiiTlf8lAGJVHN7Cc q3OFFTzDi8tu+FYkiiws+GpnrvR+wENzXXO0l7a9fMZ8QRi3cTTEPbUS5DW8J8O4 hdK95XyAMVbn4/9gEF7MX6bu5k5O6lVgrpMqkffXW7gNFAKRod31KT33vjMl+U+X nKMtM9KOkimD0pin2maBOl/DhWjTh+MT -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:09 2025 by rpki-client