$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: Gh4Z0o/DBd+iLm4xZFxZNOAvmQn3P22Y4kh+FlMIedQ= Subject key identifier: 81:57:41:79:D3:8F:A0:B8:7F:42:79:ED:E4:64:20:BF:F0:45:6C:05 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 34A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 349A Signing time: Sat 14 Jun 2025 14:33:52 +0000 Manifest this update: Sat 14 Jun 2025 14:33:51 +0000 Manifest next update: Sat 21 Jun 2025 14:33:51 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: mlqufnsMcFGzK5QfxmGFLNnqOIoAQKob8G68+zaLbCE=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco=) 3: 673DC29606B011EFA665703AC4F9AE02.roa (hash: F5Zy7dXCYPL9clQFpPmuH37XP7Qhuqmf+NBAd1W/CM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13472 (0x34a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Jun 14 14:33:51 2025 GMT Not After : Jun 21 14:33:51 2025 GMT Subject: CN=684d8850-e2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:51:da:91:2e:2d:d9:ad:ab:94:b0:9a:c8: 44:86:d6:75:e9:9b:d8:30:bc:6b:ad:87:c9:c8:67: af:4c:e3:2f:8d:8d:5b:c4:ad:c6:f8:34:4e:62:f8: 49:73:3a:80:48:c3:b7:5b:a7:80:a2:86:70:9f:69: 16:bb:e2:63:b8:33:c2:8c:4e:25:5a:d4:6c:1c:a3: 49:98:49:ac:2a:d1:53:5a:73:08:32:f5:2d:72:e3: 8b:2f:a9:19:44:0a:1d:e1:45:7e:2b:ad:6b:13:7b: 1f:d7:1a:0e:31:06:f1:bc:7e:22:cf:36:c2:9c:fb: 57:09:5d:51:58:cf:eb:fb:40:e5:40:db:78:e9:2b: 38:90:a8:d7:1c:61:a1:00:fa:c7:ea:d1:50:db:41: c7:c2:7b:b0:d8:c8:99:f6:78:e0:dc:ab:e4:d5:5c: 9e:09:6b:52:61:08:4b:ca:23:59:5e:80:23:ac:44: ff:07:e1:d0:e8:94:3f:c2:50:08:56:e2:a1:c7:6d: f8:59:99:f1:ea:d6:bd:90:96:7a:cf:76:ab:1b:54: 31:0c:e4:6f:7b:a3:6c:f0:cc:dd:aa:50:94:fe:41: 2b:ab:d3:a1:a9:82:2f:5c:14:a4:89:c3:1c:e7:33: 54:1b:1d:5c:74:62:10:50:ed:70:11:76:dd:3a:e8: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:57:41:79:D3:8F:A0:B8:7F:42:79:ED:E4:64:20:BF:F0:45:6C:05 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:37:a4:b7:80:e0:be:44:88:8e:b4:a2:b9:5b:39:82:2c:10: 66:eb:6f:e2:ec:ac:ef:88:8f:07:10:9c:ef:20:be:93:dc:68: a5:52:5c:a1:62:2b:21:f0:ae:fe:4a:ce:75:ba:39:84:ff:41: 30:5b:02:00:1d:d4:d5:0d:33:b8:11:5b:0d:9e:14:8c:72:f2: 54:51:57:5a:a3:4a:2f:ad:34:cf:38:ce:4d:f1:48:32:10:76: 19:86:36:b8:5f:3b:5e:67:0f:f8:b1:b7:47:12:f9:4e:6c:25: 5c:70:c2:20:cf:1d:a4:7c:87:9f:e4:1e:05:8b:59:42:ca:af: e8:ee:38:23:b5:d4:7a:83:17:f4:02:86:88:3d:12:9a:fd:9a: d0:ca:4e:10:bf:87:88:54:52:9c:9a:f9:0c:31:b3:15:27:ad: da:38:c7:36:e5:f3:e5:13:6c:3c:5c:ac:de:f7:7b:90:be:55: 05:31:e4:37:76:b0:a9:8e:9b:5c:3b:9e:80:1c:ca:f2:68:94: 72:a3:ed:19:72:bf:58:15:94:49:b5:e4:86:3b:4b:22:f7:1a: e3:a3:27:3a:3a:13:2f:cd:e1:25:5c:00:42:de:be:5a:d8:f4: 21:5b:04:8d:ee:46:a8:2b:5e:bc:a3:18:43:0c:5e:3a:04:9a: 93:7d:49:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUwNjE0MTQzMzUxWhcNMjUwNjIxMTQzMzUxWjAYMRYwFAYD VQQDEw02ODRkODg1MC1lMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL1R2pEuLdmtq5SwmshEhtZ16ZvYMLxrrYfJyGevTOMvjY1bxK3G+DROYvhJ czqASMO3W6eAooZwn2kWu+JjuDPCjE4lWtRsHKNJmEmsKtFTWnMIMvUtcuOLL6kZ RAod4UV+K61rE3sf1xoOMQbxvH4izzbCnPtXCV1RWM/r+0DlQNt46Ss4kKjXHGGh APrH6tFQ20HHwnuw2MiZ9njg3Kvk1VyeCWtSYQhLyiNZXoAjrET/B+HQ6JQ/wlAI VuKhx234WZnx6ta9kJZ6z3arG1QxDORve6Ns8MzdqlCU/kErq9OhqYIvXBSkicMc 5zNUGx1cdGIQUO1wEXbdOuhe+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFXQXnT j6C4f0J57eRkIL/wRWwFMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTN6S3gOC+RIiOtKK5WzmCLBBm62/i7KzviI8HEJzvIL6T3GilUlyh Yish8K7+Ss51ujmE/0EwWwIAHdTVDTO4EVsNnhSMcvJUUVdao0ovrTTPOM5N8Ugy EHYZhja4XzteZw/4sbdHEvlObCVccMIgzx2kfIef5B4Fi1lCyq/o7jgjtdR6gxf0 AoaIPRKa/ZrQyk4Qv4eIVFKcmvkMMbMVJ63aOMc25fPlE2w8XKze93uQvlUFMeQ3 drCpjptcO56AHMryaJRyo+0Zcr9YFZRJteSGO0si9xrjoyc6OhMvzeElXABC3r5a 2PQhWwSN7kaoK168oxhDDF46BJqTfUl0 -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:21 2025 by rpki-client