$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: 3bEbDNQq0tUF3wL5tjE/gAr5sP/89RPo4/d+/Iv1fmw= Subject key identifier: 5A:04:8D:57:EC:F3:41:5A:54:FB:94:29:44:68:86:7D:FF:88:51:1B Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0C39 Signing time: Wed 30 Apr 2025 18:15:38 +0000 Manifest this update: Wed 30 Apr 2025 18:15:37 +0000 Manifest next update: Wed 07 May 2025 18:15:37 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: kWbwufoaLdckV0ibbaliq7B/lMac6sdE28JjAxiWWsM=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 18:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Apr 30 18:15:37 2025 GMT Not After : May 7 18:15:37 2025 GMT Subject: CN=681268ca-f684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:ec:08:0e:6d:cd:45:87:2c:2a:c9:70:c2: d5:96:74:97:04:10:9b:f9:ab:90:8f:fa:f9:36:23: 7c:12:d3:ba:8c:6d:7a:15:81:7b:66:f4:4b:ea:b1: fa:c4:61:be:a6:05:03:4f:04:fc:86:88:e3:2c:49: 85:87:3d:4b:84:5d:75:bd:35:c3:d0:73:df:94:81: 39:7f:05:b3:25:de:20:8e:67:11:42:bc:6d:b2:21: fb:c0:43:50:59:c5:4b:bf:1e:93:87:c6:96:d9:da: 0e:12:a7:e1:da:79:6d:5c:ef:d5:05:8d:e9:1b:c0: 63:60:b9:d3:e8:c1:0a:18:81:fb:a8:08:c6:cf:c2: ee:5c:47:62:2e:bb:83:0f:16:b5:dc:13:da:6d:3b: 84:e4:0a:41:96:b4:70:0e:39:02:bb:20:84:ab:c8: f4:2c:7d:33:16:f2:89:34:4f:d6:be:3c:e9:f3:9d: cd:8e:82:1d:d1:e9:c5:6e:a7:64:2f:50:36:51:9c: 23:72:f4:c2:68:8b:81:7a:33:9f:b7:9f:e5:d3:64: 80:33:41:7e:03:42:8d:5e:3f:4e:b3:87:42:cd:ea: 2d:a7:1d:45:9f:64:e1:9c:2a:53:8d:9d:e3:b7:60: b3:67:af:79:43:73:c7:b6:82:c1:eb:86:0a:59:55: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:04:8D:57:EC:F3:41:5A:54:FB:94:29:44:68:86:7D:FF:88:51:1B X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:1b:99:4b:d5:e2:9c:df:8a:1e:a4:31:37:26:f8:be:77:30: ce:c4:7c:ee:8f:20:d9:cf:a1:f5:7a:c9:ba:e0:68:2f:6e:53: 63:9f:93:1b:7a:43:5f:c0:0e:e4:6e:14:56:75:5c:c4:72:4e: e5:6e:a9:f8:5c:a0:ed:fc:d6:ed:5e:4d:8f:07:3b:59:07:22: ae:6a:f1:09:eb:3f:af:04:94:db:19:cb:fe:57:ff:45:ed:69: 80:cb:b4:67:16:f6:1f:3b:ef:b4:0e:1b:e3:85:02:3d:65:6f: 7b:05:d1:09:0b:33:31:91:86:f4:c5:a8:35:76:2d:2f:89:41: 9b:a0:98:30:d9:f8:e6:75:3f:0b:6c:63:7b:a2:af:ac:c5:b4: dc:de:16:33:17:47:e6:6d:d6:f7:f3:fd:71:91:e1:66:35:4a: 08:a1:62:8b:74:84:53:df:26:9f:c3:59:96:38:70:2b:42:b4: d6:fa:cc:cb:c9:4b:97:7a:45:99:c9:ce:0a:a9:42:1b:53:04: 4c:5a:32:ee:16:2d:d7:0c:d8:d5:4a:69:bf:ce:93:71:64:79: d3:bd:18:a1:52:77:55:0c:19:7b:93:10:ce:a7:71:55:3e:c7: 72:5d:f7:8f:c8:bc:c2:09:d1:29:53:d8:b1:84:9d:d5:a4:23: 06:15:36:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUwNDMwMTgxNTM3WhcNMjUwNTA3MTgxNTM3WjAYMRYwFAYD VQQDEw02ODEyNjhjYS1mNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkDsCA5tzUWHLCrJcMLVlnSXBBCb+auQj/r5NiN8EtO6jG16FYF7ZvRL6rH6 xGG+pgUDTwT8hojjLEmFhz1LhF11vTXD0HPflIE5fwWzJd4gjmcRQrxtsiH7wENQ WcVLvx6Th8aW2doOEqfh2nltXO/VBY3pG8BjYLnT6MEKGIH7qAjGz8LuXEdiLruD Dxa13BPabTuE5ApBlrRwDjkCuyCEq8j0LH0zFvKJNE/Wvjzp853NjoId0enFbqdk L1A2UZwjcvTCaIuBejOft5/l02SAM0F+A0KNXj9Os4dCzeotpx1Fn2ThnCpTjZ3j t2CzZ695Q3PHtoLB64YKWVWlaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoEjVfs 80FaVPuUKURohn3/iFEbMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVG5lL1eKc34oepDE3Jvi+dzDOxHzujyDZz6H1esm64GgvblNjn5Mb ekNfwA7kbhRWdVzEck7lbqn4XKDt/NbtXk2PBztZByKuavEJ6z+vBJTbGcv+V/9F 7WmAy7RnFvYfO++0DhvjhQI9ZW97BdEJCzMxkYb0xag1di0viUGboJgw2fjmdT8L bGN7oq+sxbTc3hYzF0fmbdb38/1xkeFmNUoIoWKLdIRT3yafw1mWOHArQrTW+szL yUuXekWZyc4KqUIbUwRMWjLuFi3XDNjVSmm/zpNxZHnTvRihUndVDBl7kxDOp3FV PsdyXfePyLzCCdEpU9ixhJ3VpCMGFTan -----END CERTIFICATE-----Generated at Wed Apr 30 20:45:44 2025 by rpki-client