$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: QYnbD8yrDbTC5L6ZP22ltUCIyrFhW4MeAG+Zdb8+mTU= Subject key identifier: A8:93:89:08:12:A8:1B:41:0A:0B:8E:4F:68:D5:68:95:7A:B7:8B:D5 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 053D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 0539 Signing time: Thu 24 Apr 2025 23:15:27 +0000 Manifest this update: Thu 24 Apr 2025 23:15:26 +0000 Manifest next update: Thu 01 May 2025 23:15:26 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: P/IWwodKCbgLWAFfNVtJnMFxm7s5l00Y5JsNgQSpzYQ=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: l/5p1WINKz3TNzRuWnRaS5/CleEw3KzqgOzzW2+y1jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: Apr 24 23:15:26 2025 GMT Not After : May 1 23:15:26 2025 GMT Subject: CN=680ac60f-a5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:d3:e1:e3:14:51:3c:dd:9b:52:06:f4:1f: 03:2c:95:95:3d:34:41:ac:43:db:aa:56:db:a3:ae: da:6d:79:9f:b8:6c:d0:68:ff:78:5b:ab:11:e7:9e: 6b:5e:c2:d2:17:02:fd:f6:c8:31:8d:8c:7c:26:51: 3c:86:8b:1c:1a:ed:1a:e6:b1:ef:7c:97:c2:f8:8b: e3:ae:f0:dd:6f:c5:40:18:4c:21:8a:fc:b6:fa:c2: d3:50:f9:e2:24:ea:0f:65:85:e2:2d:4b:b2:7a:95: 3e:9c:16:12:3f:f2:a3:53:19:be:51:bc:2f:83:8e: 62:86:ac:4e:5a:2d:1a:e2:4a:19:b3:9d:c1:9b:3d: 3d:d8:41:93:74:0d:1f:aa:5d:c4:60:26:1a:9c:48: 28:72:f9:1c:96:5c:a9:0c:8d:55:e3:24:fa:bb:a1: a2:9c:d3:48:c8:5e:13:91:ff:5b:9d:89:f9:18:a9: ed:81:94:dc:10:6d:cf:ad:a7:b3:eb:cb:b7:3a:18: bb:25:70:5b:01:b2:98:83:a4:be:61:7b:bc:20:6c: 16:e3:70:44:24:c9:ba:5f:7b:3f:13:58:3a:53:4e: 1d:76:3b:38:af:4e:27:ba:f2:56:38:85:71:6c:27: 60:c0:22:64:b9:d6:68:34:66:d1:d5:e6:d3:78:42: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:93:89:08:12:A8:1B:41:0A:0B:8E:4F:68:D5:68:95:7A:B7:8B:D5 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:8c:9a:29:90:cc:d4:fb:32:61:ef:a5:9e:61:b1:0e:d7:84: 1f:8b:08:2e:fb:d9:62:73:62:12:5f:81:11:06:94:ad:ff:56: 96:89:05:83:25:3c:f1:2f:46:55:b1:b4:1d:ef:1d:47:ef:88: 3b:55:2b:b0:b7:a5:1c:f8:50:c0:b0:6b:9c:aa:05:89:1e:60: a6:77:96:4d:12:7f:fc:7e:1e:44:d7:96:1d:c3:68:08:28:71: 0e:a8:5f:a1:59:bc:ac:24:25:40:ca:6f:6e:00:30:92:2e:b5: f7:35:26:46:1c:ca:b4:35:8e:e7:86:3c:5b:9d:46:fd:f7:22: 27:c3:e5:ca:98:4e:fe:86:48:31:9d:5b:f9:17:b8:a0:7c:47: 09:98:76:21:94:c9:b6:04:36:1c:7a:44:c6:3e:d1:92:8f:14: 0d:88:e6:3a:71:96:d2:9a:39:ac:0d:ec:7b:4c:ef:41:17:c1: 98:3b:c0:5e:6b:d8:60:83:3d:71:25:e8:a5:e2:a3:0f:01:fc: d1:a8:f0:f2:26:4a:1d:3c:b7:b4:68:87:45:ea:88:41:6b:9c: a9:af:9e:19:75:f7:3c:c6:52:d0:c3:7d:da:00:40:75:be:21: 2f:0c:b0:ce:36:f8:2e:05:c8:b7:b8:81:10:a7:24:7c:a9:57: f9:69:f1:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUwNDI0MjMxNTI2WhcNMjUwNTAxMjMxNTI2WjAYMRYwFAYD VQQDEw02ODBhYzYwZi1hNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDvT4eMUUTzdm1IG9B8DLJWVPTRBrEPbqlbbo67abXmfuGzQaP94W6sR555r XsLSFwL99sgxjYx8JlE8hoscGu0a5rHvfJfC+IvjrvDdb8VAGEwhivy2+sLTUPni JOoPZYXiLUuyepU+nBYSP/KjUxm+Ubwvg45ihqxOWi0a4koZs53Bmz092EGTdA0f ql3EYCYanEgocvkcllypDI1V4yT6u6GinNNIyF4Tkf9bnYn5GKntgZTcEG3Praez 68u3Ohi7JXBbAbKYg6S+YXu8IGwW43BEJMm6X3s/E1g6U04ddjs4r04nuvJWOIVx bCdgwCJkudZoNGbR1ebTeEJH1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiTiQgS qBtBCguOT2jVaJV6t4vVMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGjJopkMzU+zJh76WeYbEO14Qfiwgu+9lic2ISX4ERBpSt/1aWiQWD JTzxL0ZVsbQd7x1H74g7VSuwt6Uc+FDAsGucqgWJHmCmd5ZNEn/8fh5E15Ydw2gI KHEOqF+hWbysJCVAym9uADCSLrX3NSZGHMq0NY7nhjxbnUb99yInw+XKmE7+hkgx nVv5F7igfEcJmHYhlMm2BDYcekTGPtGSjxQNiOY6cZbSmjmsDex7TO9BF8GYO8Be a9hggz1xJeil4qMPAfzRqPDyJkodPLe0aIdF6ohBa5ypr54Zdfc8xlLQw33aAEB1 viEvDLDONvguBci3uIEQpyR8qVf5afE0 -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:44 2025 by rpki-client