$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft File: 3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json) Hash identifier: QLaIHme8YiaDsNweFHBejQ3jaEeN2AO7y+z04C2DFp0= Subject key identifier: ED:67:E2:AD:09:19:59:C1:04:F7:29:A8:C8:E7:63:E4:66:AE:1A:B3 Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E Certificate issuer: /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft Manifest number: 0A12 Signing time: Thu 24 Apr 2025 19:43:20 +0000 Manifest this update: Thu 24 Apr 2025 19:43:19 +0000 Manifest next update: Thu 01 May 2025 19:43:19 +0000 Files and hashes: 1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: nPbAgjXhkxLMzAbA7LwglIduWNChNBDV/OvYF2XP9B0=) 2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: ji+KlU2gFS8nu1GqpxB5qhxfHmLgjDFULqm1/8oINXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Validity Not Before: Apr 24 19:43:19 2025 GMT Not After : May 1 19:43:19 2025 GMT Subject: CN=680a9458-6137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:5a:d6:62:73:fb:d2:00:bf:28:c5:57:7c: 3b:37:f5:ad:f2:11:f5:2f:01:60:eb:36:56:5b:6a: 3d:1a:9c:5d:cc:b1:0c:fe:d7:01:a3:7c:a2:b4:14: 8d:aa:22:bb:a2:08:af:c9:49:77:b6:3b:13:4b:63: f4:11:f6:f3:73:cb:bf:fb:eb:e1:c7:c7:55:8d:a4: 6e:a7:7f:9b:53:9f:28:76:cb:b5:0c:54:06:11:c9: b2:69:0f:31:33:f2:86:2d:24:05:5f:80:1a:6e:ac: 50:03:19:62:1c:cf:b4:51:04:43:3a:8e:9f:24:40: fb:4f:54:20:5c:93:4d:e4:38:c3:5e:3d:d5:26:a1: 0c:bb:64:0d:fb:4d:5b:00:5a:28:d7:14:a6:be:15: 47:60:f2:78:e3:80:25:ea:e0:28:ca:99:cd:c1:2f: c5:9d:0f:2e:71:23:11:c3:e5:f1:bb:88:d8:2e:a3: 75:bf:85:54:ca:69:95:a7:c6:c6:31:2a:ec:72:ee: 35:66:0e:57:04:eb:80:df:58:54:22:3e:97:ca:45: 36:98:b1:aa:bb:ff:ad:54:5e:dc:2d:18:f6:00:e3: 00:1c:27:29:29:8f:30:41:94:bf:6e:9e:c8:ae:72: 9b:e6:08:71:71:22:0f:d9:be:3d:10:35:14:0d:ea: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:67:E2:AD:09:19:59:C1:04:F7:29:A8:C8:E7:63:E4:66:AE:1A:B3 X509v3 Authority Key Identifier: keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cb:31:23:90:8c:30:ba:fb:3b:22:1e:ce:2e:28:9d:9e:25: 07:88:d8:df:d6:e5:1e:25:37:fa:c3:dd:74:b5:b0:c1:62:05: d0:76:14:5d:68:97:64:b1:8c:a1:21:52:21:82:2c:8b:d3:e2: 4b:ff:b9:b5:94:96:2d:78:6a:76:07:3f:52:e2:aa:db:38:f7: ed:ad:59:f3:0b:63:fa:53:c2:32:ca:0d:89:22:bd:28:79:c5: dd:7f:f9:0f:7f:27:82:36:19:7b:e6:7e:49:91:0c:6e:1f:0e: 85:db:6f:5d:16:dd:a6:56:ee:03:aa:a3:bd:8c:68:8f:fd:58: 32:fa:55:29:8e:b2:a6:e2:7b:84:31:91:d9:78:66:05:d6:c0: 89:92:10:04:35:40:0b:31:64:50:0a:65:97:64:db:5d:fb:8a: 49:4f:1f:56:8f:fb:7a:b9:4b:8b:9b:33:2f:e7:43:63:5a:19: 10:1f:49:a2:7d:85:02:f8:9d:6a:85:54:77:30:80:ec:8a:f0: bb:ae:6c:5d:18:ff:42:21:6e:a1:fc:d1:df:8d:f2:0d:80:91: f3:14:e2:8d:21:31:99:0e:a5:fd:4d:47:bd:37:22:b3:47:5d: b8:6b:b9:b8:33:59:3d:49:05:bb:fd:96:42:c3:e6:74:d6:0c: 74:8b:ac:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4MjkxMTAvBgNVBAUTKERDQ0Q1NTM1NTJCQUY4QTY1QzFBMDY2QjMzNDdGNzkz MjQ0RjU3NUUwHhcNMjUwNDI0MTk0MzE5WhcNMjUwNTAxMTk0MzE5WjAYMRYwFAYD VQQDEw02ODBhOTQ1OC02MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT9a1mJz+9IAvyjFV3w7N/Wt8hH1LwFg6zZWW2o9GpxdzLEM/tcBo3yitBSN qiK7ogivyUl3tjsTS2P0Efbzc8u/++vhx8dVjaRup3+bU58odsu1DFQGEcmyaQ8x M/KGLSQFX4AabqxQAxliHM+0UQRDOo6fJED7T1QgXJNN5DjDXj3VJqEMu2QN+01b AFoo1xSmvhVHYPJ444Al6uAoypnNwS/FnQ8ucSMRw+Xxu4jYLqN1v4VUymmVp8bG MSrscu41Zg5XBOuA31hUIj6XykU2mLGqu/+tVF7cLRj2AOMAHCcpKY8wQZS/bp7I rnKb5ghxcSIP2b49EDUUDerJWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1n4q0J GVnBBPcpqMjnY+RmrhqzMB8GA1UdIwQYMBaAFNzNVTVSuvimXBoGazNH95MkT1de MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDgyOS85OUQ3QzZBNDZG RUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1LWmNHZ1pyTTBmM2t5UlBW MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNMVZOVks2LUtaY0dnWnJNMGYza3lSUFYxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDgyOS85OUQ3QzZBNDZGRUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1L WmNHZ1pyTTBmM2t5UlBWMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPyzEjkIwwuvs7Ih7OLiidniUHiNjf1uUeJTf6w910tbDBYgXQdhRd aJdksYyhIVIhgiyL0+JL/7m1lJYteGp2Bz9S4qrbOPftrVnzC2P6U8Iyyg2JIr0o ecXdf/kPfyeCNhl75n5JkQxuHw6F229dFt2mVu4DqqO9jGiP/Vgy+lUpjrKm4nuE MZHZeGYF1sCJkhAENUALMWRQCmWXZNtd+4pJTx9Wj/t6uUuLmzMv50NjWhkQH0mi fYUC+J1qhVR3MIDsivC7rmxdGP9CIW6h/NHfjfINgJHzFOKNITGZDqX9TUe9NyKz R124a7m4M1k9SQW7/ZZCw+Z01gx0i6xZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:29 2025 by rpki-client