$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: 1vQOS2u+9qvjO1yjQxAJG6XoUcLLPXZ12RX81x/HuRc= Subject key identifier: A6:BE:46:2B:5B:A8:C6:C9:CF:E1:2B:4D:89:E3:2D:77:50:4B:0D:2B Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 0376 Signing time: Thu 01 May 2025 00:30:16 +0000 Manifest this update: Thu 01 May 2025 00:30:16 +0000 Manifest next update: Thu 08 May 2025 00:30:16 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: 2PUuCY9Nktn4ezF8t7yY9g2ktC2ZN8pxOoTvvz7cTkE=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vvesGwwdw13pevInYyT24HAMslE/0OP0vxw1abDxLHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: May 1 00:30:16 2025 GMT Not After : May 8 00:30:16 2025 GMT Subject: CN=6812c098-67e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:c0:b4:0f:c7:b9:6a:0b:6f:d5:6f:23:49: a5:56:23:20:c7:d0:4b:c4:bb:7a:15:a5:43:89:f3: ef:bc:9a:9a:bc:ee:a5:40:dc:1c:7b:cd:78:90:1a: 0d:69:38:87:23:c2:36:be:15:c5:7c:c7:ce:3d:61: 8b:b9:c3:6e:14:73:dc:ff:13:e5:45:b0:51:a5:03: a2:a1:77:9c:1a:f8:95:04:87:98:98:c5:e7:d1:82: c1:6f:09:d7:02:01:bd:2b:4d:b6:77:de:69:35:8f: 55:55:93:b3:37:d4:e9:22:a5:6a:2e:6c:20:53:88: 29:c2:ac:de:78:35:56:51:d8:61:25:60:04:23:85: da:95:e0:f9:ab:32:df:04:de:68:31:76:5c:1b:15: ed:82:6c:6d:19:36:a9:88:95:4e:a9:6d:8a:5e:af: 5b:ff:1e:74:18:a9:d4:3e:40:7b:4b:cc:00:20:00: 18:69:9b:94:0f:78:d3:4c:ec:0c:b8:84:62:a2:ed: a0:04:2c:fb:ba:1e:c9:3f:4a:9d:1c:f9:4c:30:f8: ae:28:3f:9d:f3:83:4c:57:65:75:b4:fa:f6:b8:c8: b1:ea:c1:35:6c:1a:35:65:6c:84:ce:32:8e:b8:76: 97:5a:d0:28:54:fc:d5:85:eb:8f:15:d6:46:e7:10: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BE:46:2B:5B:A8:C6:C9:CF:E1:2B:4D:89:E3:2D:77:50:4B:0D:2B X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0a:13:73:83:39:01:c9:b6:6d:f1:a2:03:0f:ad:53:87:18: 0b:10:0a:ff:ff:35:71:f6:5d:d3:e9:c9:41:9b:e3:32:72:28: 2d:33:55:01:a0:ef:71:82:89:32:00:c1:37:3e:2f:61:b4:d2: 1b:50:52:a3:11:ab:af:21:ea:21:ab:b0:24:36:2b:36:c0:76: 7f:b1:ab:fb:33:17:1b:ff:1a:e3:a9:5e:96:47:80:f0:61:1f: 0c:64:4d:1c:3b:11:0e:cd:4c:d0:ff:84:df:39:89:cd:1d:13: 3e:2f:62:1e:20:ff:a7:f0:a3:89:e5:32:31:f5:ec:b0:a7:72: 37:22:c0:27:5f:e3:d5:86:f0:50:74:60:f9:38:ab:c0:f8:0f: bb:c0:df:6f:7f:f9:8d:c2:16:33:91:5f:5a:4d:ad:18:8c:70: 0f:52:d4:e1:f3:32:63:73:bd:c9:27:fe:9b:82:4c:34:bd:b5: 02:82:21:61:b1:18:e7:21:9d:c4:29:bb:10:12:ae:31:76:b6: 28:fa:f2:48:e2:37:bf:90:52:21:5f:e4:e6:d0:53:1f:6a:28: 56:41:04:f3:68:09:f5:50:6a:f9:ec:d1:40:14:40:19:c5:54: 26:6a:66:b2:60:7a:9d:cd:31:fe:3a:15:81:74:22:ec:c6:6b: 5e:ac:71:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjUwNTAxMDAzMDE2WhcNMjUwNTA4MDAzMDE2WjAYMRYwFAYD VQQDEw02ODEyYzA5OC02N2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xbAtA/HuWoLb9VvI0mlViMgx9BLxLt6FaVDifPvvJqavO6lQNwce814kBoN aTiHI8I2vhXFfMfOPWGLucNuFHPc/xPlRbBRpQOioXecGviVBIeYmMXn0YLBbwnX AgG9K022d95pNY9VVZOzN9TpIqVqLmwgU4gpwqzeeDVWUdhhJWAEI4XaleD5qzLf BN5oMXZcGxXtgmxtGTapiJVOqW2KXq9b/x50GKnUPkB7S8wAIAAYaZuUD3jTTOwM uIRiou2gBCz7uh7JP0qdHPlMMPiuKD+d84NMV2V1tPr2uMix6sE1bBo1ZWyEzjKO uHaXWtAoVPzVheuPFdZG5xC9jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa+Ritb qMbJz+ErTYnjLXdQSw0rMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqChNzgzkBybZt8aIDD61ThxgLEAr//zVx9l3T6clBm+MycigtM1UB oO9xgokyAME3Pi9htNIbUFKjEauvIeohq7AkNis2wHZ/sav7Mxcb/xrjqV6WR4Dw YR8MZE0cOxEOzUzQ/4TfOYnNHRM+L2IeIP+n8KOJ5TIx9eywp3I3IsAnX+PVhvBQ dGD5OKvA+A+7wN9vf/mNwhYzkV9aTa0YjHAPUtTh8zJjc73JJ/6bgkw0vbUCgiFh sRjnIZ3EKbsQEq4xdrYo+vJI4je/kFIhX+Tm0FMfaihWQQTzaAn1UGr57NFAFEAZ xVQmamayYHqdzTH+OhWBdCLsxmterHGV -----END CERTIFICATE-----Generated at Thu May 1 13:14:38 2025 by rpki-client