$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: +IhA4VBEegkNCo1iSdFKTFRB61l7ZytLBb4eO6+aUgM= Subject key identifier: F6:19:EF:84:83:18:B0:D5:47:7B:06:6B:56:32:23:57:DE:15:23:00 Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0B2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 3F9A Signing time: Thu 24 Apr 2025 14:48:11 +0000 Manifest this update: Thu 24 Apr 2025 14:48:10 +0000 Manifest next update: Thu 01 May 2025 14:48:10 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: naIJoX8xdKTRHNuVbfz29vihanvOoy1quRPbcT4rUB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2858 (0xb2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: Apr 24 14:48:10 2025 GMT Not After : May 1 14:48:10 2025 GMT Subject: CN=680a4f2b-b8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:e2:c5:41:ca:61:cb:c7:75:76:c5:45:00: 7d:8d:d8:89:a4:37:0d:37:ce:c7:f2:4f:f1:ac:2c: e4:55:12:b8:63:ad:c9:bb:f8:fd:5a:78:ce:52:4c: 6e:69:fe:b5:09:62:7e:61:f8:d1:28:4b:a2:60:61: a6:66:66:2d:53:80:ce:59:92:a1:89:ed:8e:8e:2b: 1f:52:6c:c5:f7:ad:60:eb:08:35:05:14:08:0f:66: 46:ab:6d:a3:9a:9b:50:ae:6c:30:cb:2d:ae:fe:21: f4:22:a5:4a:de:83:7a:8f:1b:61:20:8d:04:18:df: dc:3a:45:4e:4f:b6:4f:13:b8:7b:5e:39:1e:cd:52: 63:e5:38:47:5a:f8:8a:51:98:cd:8e:b5:c1:96:fb: fe:26:2f:f8:fa:89:c3:f5:b6:81:8b:97:56:9c:2d: 6b:28:43:4d:65:16:15:06:47:c8:75:8d:30:eb:bc: fd:c4:29:44:e3:2b:07:96:15:32:cc:4f:bf:c9:d2: ff:2f:c6:f3:ae:b9:0d:21:75:66:6a:c8:e3:25:63: 56:88:cb:a6:ca:56:ee:d0:b5:56:c3:17:13:80:35: 77:1f:98:a6:cd:e2:f0:a9:3d:dd:da:24:ec:81:be: db:28:f3:b6:27:46:8b:49:91:c1:3c:2b:f5:1f:b1: 2a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:EF:84:83:18:B0:D5:47:7B:06:6B:56:32:23:57:DE:15:23:00 X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3c:c2:2f:d3:7b:11:a0:5e:3f:0c:51:d1:e9:9a:65:de:6e: 20:5e:ce:ca:1d:eb:42:92:2b:e3:67:d2:df:94:29:71:9d:27: 84:8a:44:d6:00:70:93:44:47:54:b0:40:e7:1f:3e:a7:ec:96: 98:1c:6b:67:df:b3:b6:3f:7e:74:a6:ba:a5:da:e8:de:b5:08: 10:c0:51:81:2f:25:00:84:f4:c0:7b:08:b4:39:c5:3e:23:46: 16:27:a0:b4:5b:b2:cc:0c:41:6a:b2:60:45:19:7e:43:9b:f9: 4d:e2:90:3b:31:62:c4:49:80:2e:30:b2:15:e3:7c:3e:aa:3a: aa:ba:96:05:14:ae:f4:e1:e6:45:df:c5:41:db:ea:1e:4f:89: f5:1b:4c:35:e4:6f:d1:71:3c:44:31:22:a4:e6:16:e1:b2:59: 93:65:1e:f6:8e:6d:13:05:77:8e:4e:a9:75:4f:12:86:19:dd: 5f:51:99:6b:b0:7e:6d:16:d6:01:b6:b1:36:4f:53:ff:d2:5a: c6:0e:28:b3:01:cf:00:12:d5:50:22:ec:31:13:58:08:9b:cd: 9c:8e:02:8a:91:4f:e1:a2:61:eb:13:56:42:c8:65:50:cc:1a: 9d:43:3c:7f:57:92:e8:f1:e5:04:65:59:b4:b1:67:7a:48:fc: 36:0a:01:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjUwNDI0MTQ0ODEwWhcNMjUwNTAxMTQ0ODEwWjAYMRYwFAYD VQQDEw02ODBhNGYyYi1iOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/zixUHKYcvHdXbFRQB9jdiJpDcNN87H8k/xrCzkVRK4Y63Ju/j9WnjOUkxu af61CWJ+YfjRKEuiYGGmZmYtU4DOWZKhie2OjisfUmzF961g6wg1BRQID2ZGq22j mptQrmwwyy2u/iH0IqVK3oN6jxthII0EGN/cOkVOT7ZPE7h7XjkezVJj5ThHWviK UZjNjrXBlvv+Ji/4+onD9baBi5dWnC1rKENNZRYVBkfIdY0w67z9xClE4ysHlhUy zE+/ydL/L8bzrrkNIXVmasjjJWNWiMumylbu0LVWwxcTgDV3H5imzeLwqT3d2iTs gb7bKPO2J0aLSZHBPCv1H7EqFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYZ74SD GLDVR3sGa1YyI1feFSMAMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASPMIv03sRoF4/DFHR6Zpl3m4gXs7KHetCkivjZ9LflClxnSeEikTW AHCTREdUsEDnHz6n7JaYHGtn37O2P350prql2ujetQgQwFGBLyUAhPTAewi0OcU+ I0YWJ6C0W7LMDEFqsmBFGX5Dm/lN4pA7MWLESYAuMLIV43w+qjqqupYFFK704eZF 38VB2+oeT4n1G0w15G/RcTxEMSKk5hbhslmTZR72jm0TBXeOTql1TxKGGd1fUZlr sH5tFtYBtrE2T1P/0lrGDiizAc8AEtVQIuwxE1gIm82cjgKKkU/homHrE1ZCyGVQ zBqdQzx/V5Lo8eUEZVm0sWd6SPw2CgEV -----END CERTIFICATE-----Generated at Sat Apr 26 05:03:44 2025 by rpki-client