$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: HONT6bfRJNUblcZxJDZuTJKUvsdpIcmgy1LGiJwNgX4= Subject key identifier: CD:B5:12:4B:E1:9B:69:CF:BD:1B:F7:54:EE:AD:A0:04:38:62:1A:A7 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 6F Signing time: Fri 25 Apr 2025 05:50:10 +0000 Manifest this update: Fri 25 Apr 2025 05:50:10 +0000 Manifest next update: Fri 02 May 2025 05:50:10 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: tIzwDbP4gGK3ucUVRinSTtFHc15b0UIcBOp0NG9YhHw=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Apr 25 05:50:10 2025 GMT Not After : May 2 05:50:10 2025 GMT Subject: CN=680b2292-400c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:7f:d0:4b:4b:4d:cc:78:9b:29:d9:60:d7: ec:7a:c0:c7:2d:e4:27:dd:a8:13:d5:10:7c:41:5d: 90:79:4a:e6:5e:b1:e9:db:52:6d:07:16:3b:a3:2f: 78:55:4b:07:55:8d:85:72:f4:f4:b1:be:2b:e6:4e: 0e:2c:79:a3:83:63:cd:83:2d:58:34:a3:f3:46:cf: fd:51:dd:c1:6b:6d:ab:fa:e7:ec:c7:cc:7f:72:fe: f0:0b:dd:ae:9d:0d:0c:c5:ac:97:c1:77:ce:de:9e: e4:98:d2:4c:54:15:6c:c1:ad:26:62:58:51:09:ab: 8c:d1:c6:1b:cf:21:d8:30:12:6a:a6:3b:bf:8e:5d: f1:f8:13:c6:5d:12:06:ea:7f:c1:46:70:d5:e0:47: f8:54:f7:10:12:43:e6:a2:93:9c:a8:c5:20:c5:0e: 06:ef:02:17:82:3a:54:f0:ba:aa:54:27:ce:e9:73: 53:f2:c2:f6:a3:07:d4:04:ed:51:fe:a7:51:b4:13: 61:a6:66:26:7b:fc:6e:a0:c1:e1:3e:02:f7:25:0a: 14:e2:d2:73:f0:38:74:3a:6c:95:85:f6:a5:f6:e6: a0:a4:bc:d1:78:d6:b9:b4:c2:5f:75:63:2c:41:a2: ca:bd:a1:41:9a:18:30:42:b1:25:26:81:79:e2:53: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B5:12:4B:E1:9B:69:CF:BD:1B:F7:54:EE:AD:A0:04:38:62:1A:A7 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:af:6b:c0:ff:72:26:cf:b2:66:bd:d2:e8:a2:94:5e:51:88: b6:58:dd:92:4f:c8:89:83:53:9d:c9:96:62:6d:4f:12:41:d6: 87:12:97:60:a5:39:48:56:fa:1c:5c:a7:13:c2:8e:03:d4:f6: 6a:ba:35:4f:a1:38:50:5b:fb:0d:ac:fe:65:d8:a1:3e:68:98: ae:2d:00:0f:17:1d:6c:5f:a0:1f:51:cc:79:ac:09:4a:25:b6: 7c:80:14:2e:52:f5:a1:18:b2:b5:09:aa:6d:c5:53:01:2b:18: 9d:9a:ef:e3:f8:fe:57:44:7d:c7:07:7d:9a:13:1e:5d:fb:4d: 0c:53:f9:6d:95:c5:80:6e:b4:94:ed:e1:a0:98:1d:62:f2:15: db:0d:5f:b9:19:df:7d:4f:86:2f:2d:1b:11:22:57:bd:17:10: b1:5f:8d:6e:89:b5:16:59:2a:fd:60:db:3c:3c:29:27:a1:5e: 74:c9:b9:aa:7b:09:31:af:9a:b9:87:a8:53:57:aa:9c:c0:12: 0d:15:9d:e2:84:b6:9f:34:80:6c:7c:a7:33:80:4f:df:17:1b: e1:a8:06:30:18:46:f4:80:70:da:ae:c6:15:d5:c2:3d:e8:c7: f2:93:a5:95:19:93:51:11:fe:8b:1a:4a:80:01:39:d4:33:97: 35:c4:a5:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoREQ3QzhEMEY0NzhGOUJFNkFCRjczOUMwNEY1QjVCRTRE QzlGNjFGODAeFw0yNTA0MjUwNTUwMTBaFw0yNTA1MDIwNTUwMTBaMBgxFjAUBgNV BAMTDTY4MGIyMjkyLTQwMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqoH/QS0tNzHibKdlg1+x6wMct5CfdqBPVEHxBXZB5SuZesenbUm0HFjujL3hV SwdVjYVy9PSxvivmTg4seaODY82DLVg0o/NGz/1R3cFrbav65+zHzH9y/vAL3a6d DQzFrJfBd87enuSY0kxUFWzBrSZiWFEJq4zRxhvPIdgwEmqmO7+OXfH4E8ZdEgbq f8FGcNXgR/hU9xASQ+aik5yoxSDFDgbvAheCOlTwuqpUJ87pc1PywvajB9QE7VH+ p1G0E2GmZiZ7/G6gweE+AvclChTi0nPwOHQ6bJWF9qX25qCkvNF41rm0wl91YyxB osq9oUGaGDBCsSUmgXniU6K/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzbUSS+Gb ac+9G/dU7q2gBDhiGqcwHwYDVR0jBBgwFoAU3XyND0ePm+ar9znAT1tb5NyfYfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzRDMDk4NjJFNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55Zllm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1h5TkQwZVBtLWFyOXpuQVQxdGI1TnlmWWZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RTU1LzRDMDk4NjJFNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyLzNYeU5EMGVQbS1h cjl6bkFUMXRiNU55ZllmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACuva8D/cibPsma90uiilF5RiLZY3ZJPyImDU53JlmJtTxJB1ocSl2Cl OUhW+hxcpxPCjgPU9mq6NU+hOFBb+w2s/mXYoT5omK4tAA8XHWxfoB9RzHmsCUol tnyAFC5S9aEYsrUJqm3FUwErGJ2a7+P4/ldEfccHfZoTHl37TQxT+W2VxYButJTt 4aCYHWLyFdsNX7kZ331Phi8tGxEiV70XELFfjW6JtRZZKv1g2zw8KSehXnTJuap7 CTGvmrmHqFNXqpzAEg0VneKEtp80gGx8pzOAT98XG+GoBjAYRvSAcNquxhXVwj3o x/KTpZUZk1ER/osaSoABOdQzlzXEpZw= -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:42 2025 by rpki-client