$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json) Hash identifier: ZromOne0vpQviddLYCbTMsyXCG3uUjHlqR8ehoNxoHo= Subject key identifier: F6:7A:96:0E:DC:A8:10:92:80:89:A9:AB:26:75:C2:E5:4A:75:90:CB Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft Manifest number: 3C Signing time: Fri 25 Apr 2025 06:29:30 +0000 Manifest this update: Fri 25 Apr 2025 06:29:30 +0000 Manifest next update: Fri 02 May 2025 06:29:30 +0000 Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: 8pe9KX1pwNsaMr1NtI7spqnY8AsC6Wckzkr0b3vneXU=) 2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=) 3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Validity Not Before: Apr 25 06:29:30 2025 GMT Not After : May 2 06:29:30 2025 GMT Subject: CN=680b2bca-62f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:f1:51:be:f1:93:d7:b0:46:32:0c:c3:bc: f8:73:2f:04:be:19:87:53:12:ad:09:a1:85:e9:3a: fa:6b:74:59:9e:35:9e:b6:07:19:c7:ab:6c:22:2a: a4:dc:da:7e:8f:98:c3:bd:d7:1f:68:34:c0:cd:49: ed:94:d1:b6:93:f0:f5:0f:15:9a:ba:64:32:05:de: f7:47:f7:c1:8e:2a:42:17:8b:01:98:4a:88:48:29: da:08:df:a4:dc:21:b7:78:06:b3:76:83:41:51:2e: bb:85:e8:b6:0d:20:ce:77:3b:81:91:18:e1:eb:e5: 5e:55:15:30:2f:83:f4:c4:22:d5:99:f2:f8:8b:e0: 87:c8:14:5e:a0:ef:ed:ab:93:2b:0a:7e:63:12:53: 6b:41:9d:8d:5d:1a:30:da:14:8f:bc:dd:c4:cd:b9: ac:20:6d:bd:b3:af:5b:2f:cf:0d:db:05:7f:b2:5f: cb:61:dc:90:ae:db:62:5c:73:ea:8f:06:fa:8c:ee: 39:84:37:1c:a9:5a:a4:36:12:c1:ba:5e:b1:55:5d: df:78:34:f2:bd:a5:6a:e0:5d:e1:db:22:7e:14:6b: 2f:98:79:84:0d:15:11:9b:84:c4:dd:46:a2:6e:b1: 3a:9f:6c:2e:67:df:90:be:7e:cb:a8:45:72:80:65: 5f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7A:96:0E:DC:A8:10:92:80:89:A9:AB:26:75:C2:E5:4A:75:90:CB X509v3 Authority Key Identifier: keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:95:10:ae:ec:bf:90:87:e4:ef:41:c7:35:71:48:5b:71:77: a5:10:70:2a:b4:0c:f0:9f:1c:d0:e4:8a:22:e4:7f:49:dd:42: bf:1c:97:eb:12:6b:d5:f8:b1:00:62:ce:af:b4:14:f4:dd:56: 26:a2:23:f9:18:6d:4f:a6:41:01:1b:a9:83:10:bf:e1:f2:42: 2b:57:18:9e:3e:a3:14:da:72:b0:9e:58:4b:0b:03:4c:b9:9d: 0a:23:33:93:cd:05:bf:19:33:a9:f6:9a:29:b7:bc:fa:bb:6a: 5c:ed:33:81:bc:8e:a3:29:37:bc:bf:12:6a:85:75:e2:e2:6b: 76:ee:77:f6:75:03:ab:be:15:19:41:ea:b8:01:40:86:1f:c4: 52:da:2c:27:b2:88:01:23:a7:6a:5d:88:5d:c6:87:c9:c9:fd: be:f2:cd:49:7a:0f:e8:d9:c4:9a:f9:28:a9:46:31:a2:54:8d: 0d:71:30:8a:06:3e:87:c3:fb:fc:75:57:2b:6f:a8:a7:ca:9c: 4b:a9:b0:12:6f:6f:4a:d0:20:c3:7a:98:1f:03:4a:ee:6c:e4: 1e:63:06:1f:17:32:40:b3:16:2b:4d:b5:cf:f3:cf:f4:69:1c: ac:e1:fc:67:96:09:dd:e9:24:40:b2:d3:e6:b8:d0:f1:ef:55: 36:ae:a7:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoQkU4QjQ3MzNCMUFFOEE0NzM2QjdFOTEzMjczM0Q2NTQw OTFFM0QyQjAeFw0yNTA0MjUwNjI5MzBaFw0yNTA1MDIwNjI5MzBaMBgxFjAUBgNV BAMTDTY4MGIyYmNhLTYyZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF1/FRvvGT17BGMgzDvPhzLwS+GYdTEq0JoYXpOvprdFmeNZ62BxnHq2wiKqTc 2n6PmMO91x9oNMDNSe2U0baT8PUPFZq6ZDIF3vdH98GOKkIXiwGYSohIKdoI36Tc Ibd4BrN2g0FRLruF6LYNIM53O4GRGOHr5V5VFTAvg/TEItWZ8viL4IfIFF6g7+2r kysKfmMSU2tBnY1dGjDaFI+83cTNuawgbb2zr1svzw3bBX+yX8th3JCu22Jcc+qP BvqM7jmENxypWqQ2EsG6XrFVXd94NPK9pWrgXeHbIn4Uay+YeYQNFRGbhMTdRqJu sTqfbC5n35C+fsuoRXKAZV9xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9nqWDtyo EJKAiamrJnXC5Up1kMswHwYDVR0jBBgwFoAUvotHM7Guikc2t+kTJzPWVAkePSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzdCOEJENkNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdm90SE03R3Vpa2MydC1rVEp6UFdWQWtlUFNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzdCOEJENkNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtj MnQta1RKelBXVkFrZVBTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHaVEK7sv5CH5O9BxzVxSFtxd6UQcCq0DPCfHNDkiiLkf0ndQr8cl+sS a9X4sQBizq+0FPTdViaiI/kYbU+mQQEbqYMQv+HyQitXGJ4+oxTacrCeWEsLA0y5 nQojM5PNBb8ZM6n2mim3vPq7alztM4G8jqMpN7y/EmqFdeLia3bud/Z1A6u+FRlB 6rgBQIYfxFLaLCeyiAEjp2pdiF3Gh8nJ/b7yzUl6D+jZxJr5KKlGMaJUjQ1xMIoG PofD+/x1VytvqKfKnEupsBJvb0rQIMN6mB8DSu5s5B5jBh8XMkCzFitNtc/zz/Rp HKzh/GeWCd3pJECy0+a40PHvVTaup2w= -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:16 2025 by rpki-client