$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json) Hash identifier: mF4CNVlcFuHML2XqFbxEf6Wr+/iVRN1lA4o69zEN2XY= Subject key identifier: 90:22:D7:31:19:52:EA:6A:71:89:92:35:AB:9B:C6:CB:79:2C:7F:88 Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft Manifest number: 39 Signing time: Fri 25 Apr 2025 06:36:00 +0000 Manifest this update: Fri 25 Apr 2025 06:36:00 +0000 Manifest next update: Fri 02 May 2025 06:36:00 +0000 Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: MGFbUrEafcuHlw6aiu80bjQG15fdKLlj/MqswwONI18=) 2: 5EDC5882D3BB11EF80C3AF80C4F9AE02.roa (hash: PJbzNrEkpbuhikAan3mFGxS/ZJai+blTb1hTbzhhLXc=) 3: 5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa (hash: QSPivy5RJK48HHT2SlrvrCH9DPiTCFPajDEwNKBnEww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: Apr 25 06:36:00 2025 GMT Not After : May 2 06:36:00 2025 GMT Subject: CN=680b2d50-05ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:b0:62:54:ff:f6:0c:c9:07:ad:f5:c6:44: 99:97:d9:27:df:c9:72:d2:56:b4:2e:0c:bc:7b:20: 83:81:ad:80:71:34:2e:37:49:3d:b2:e5:7b:19:96: f5:b5:87:43:b5:22:74:d6:05:ce:f9:d7:42:78:07: 47:13:52:ff:ac:cc:b8:1f:1f:b1:3f:d7:0f:16:74: 57:e1:87:6d:ac:21:94:fd:71:2c:f1:0a:c3:2f:dc: f9:70:37:a9:e4:51:b5:b4:4f:81:cd:cf:74:7d:19: ad:d0:0a:54:0b:2d:a5:c9:78:2c:c9:37:bb:22:e6: bc:6d:7d:54:9d:c0:5b:69:bb:d0:3f:3f:77:45:69: 2c:f4:55:14:7a:a8:5e:4b:00:d7:b5:05:95:79:d6: 46:3b:17:06:b5:e8:bd:4c:a2:96:09:ce:50:23:b3: 37:76:44:6f:f8:ba:e1:ce:b7:64:df:ac:5a:f4:58: 49:93:4a:4b:19:ea:8f:f6:41:0e:76:95:d3:30:c0: 86:18:48:f5:1f:45:04:fb:d7:8d:50:ed:6d:31:a6: 9f:cc:7a:b5:58:2a:f2:35:55:b1:fa:2d:19:82:95: e1:a5:ef:00:c4:37:a8:7f:15:91:df:00:0b:36:3f: 0d:b4:83:ab:83:33:85:62:27:bf:06:60:d7:3c:3f: 7c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:22:D7:31:19:52:EA:6A:71:89:92:35:AB:9B:C6:CB:79:2C:7F:88 X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f0:c7:40:5d:24:ef:ed:f5:e3:5e:14:0d:84:2a:11:0b:ae: d7:48:69:ed:2d:e4:33:51:09:f1:1d:82:c8:da:04:12:7e:bf: 1d:b4:ce:6d:78:44:1e:ff:ae:1b:ae:48:79:08:48:f5:ee:ae: 41:58:94:7c:bb:a2:60:1a:53:8a:7b:a2:65:8b:44:b8:bf:d5: 82:49:11:50:77:2c:b1:62:39:b1:63:33:d7:d1:04:82:07:6e: bc:9d:b4:b7:01:95:34:e2:e1:8c:c7:2b:07:b9:6e:60:db:5a: 85:1c:e2:25:bb:50:11:fd:a5:5b:d5:68:6b:87:dc:d3:f3:a5: 8b:9a:dc:22:a2:b1:47:91:6b:22:b6:50:7e:1d:87:ca:4a:e3: ff:aa:1b:e0:f9:b9:d0:a9:46:7d:f6:e5:96:a2:71:bc:db:fa: 8d:7e:f9:0d:67:5a:bd:8b:2b:8c:b2:78:54:51:e7:f1:8e:62: a4:6a:c7:fa:5f:01:97:ed:ee:27:56:63:fb:66:d9:20:8b:85: 8c:f4:92:ed:ca:4c:e2:3e:9c:58:f0:d3:29:63:f8:cc:8c:89: d1:4e:26:d2:84:50:3e:f9:eb:12:99:c6:20:12:ca:48:23:6e: 35:6a:24:d2:bc:bd:ed:d2:50:de:c8:a9:d1:36:cf:6c:38:e9: 25:02:59:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0VFQjExMC8GA1UEBRMoREVGMzMxN0NCRDE0RDdEQkFBMjdCRkZFM0ZFNUE3QjhB NkVEQ0ZCOTAeFw0yNTA0MjUwNjM2MDBaFw0yNTA1MDIwNjM2MDBaMBgxFjAUBgNV BAMTDTY4MGIyZDUwLTA1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAOrBiVP/2DMkHrfXGRJmX2SffyXLSVrQuDLx7IIOBrYBxNC43ST2y5XsZlvW1 h0O1InTWBc7510J4B0cTUv+szLgfH7E/1w8WdFfhh22sIZT9cSzxCsMv3PlwN6nk UbW0T4HNz3R9Ga3QClQLLaXJeCzJN7si5rxtfVSdwFtpu9A/P3dFaSz0VRR6qF5L ANe1BZV51kY7Fwa16L1MopYJzlAjszd2RG/4uuHOt2TfrFr0WEmTSksZ6o/2QQ52 ldMwwIYYSPUfRQT7141Q7W0xpp/MerVYKvI1VbH6LRmCleGl7wDEN6h/FZHfAAs2 Pw20g6uDM4ViJ78GYNc8P3ynAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkCLXMRlS 6mpxiZI1q5vGy3ksf4gwHwYDVR0jBBgwFoAU3vMxfL0U19uqJ7/+P+WnuKbtz7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RUVCL0Y1N0M5NEIwRDNC QTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3ZNeGZMMFUxOXVxSjdfLVAtV251S2J0ejdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RUVCL0Y1N0M5NEIwRDNCQTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1 cUo3Xy1QLVdudUtidHo3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3wx0BdJO/t9eNeFA2EKhELrtdIae0t5DNRCfEdgsjaBBJ+vx20zm14 RB7/rhuuSHkISPXurkFYlHy7omAaU4p7omWLRLi/1YJJEVB3LLFiObFjM9fRBIIH brydtLcBlTTi4YzHKwe5bmDbWoUc4iW7UBH9pVvVaGuH3NPzpYua3CKisUeRayK2 UH4dh8pK4/+qG+D5udCpRn325Zaicbzb+o1++Q1nWr2LK4yyeFRR5/GOYqRqx/pf AZft7idWY/tm2SCLhYz0ku3KTOI+nFjw0ylj+MyMidFOJtKEUD756xKZxiASykgj bjVqJNK8ve3SUN7IqdE2z2w46SUCWX8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:50 2025 by rpki-client