$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: yMJjZ1UYcVOxS64QW+rJ7phUsR7AXZ4br6/sqzdJn8o= Subject key identifier: 4C:B6:AA:60:50:36:25:A1:C4:2C:1E:85:32:69:D0:A9:AD:F0:A0:52 Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 0525 Signing time: Fri 25 Apr 2025 00:29:39 +0000 Manifest this update: Fri 25 Apr 2025 00:29:38 +0000 Manifest next update: Fri 02 May 2025 00:29:38 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: H9jiKAHK8qDOIzt1Db8x40YXpw8StAbDD9cxHihg7ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Apr 25 00:29:38 2025 GMT Not After : May 2 00:29:38 2025 GMT Subject: CN=680ad773-e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:34:52:c8:20:c8:2a:be:f6:df:87:92:6a: c6:a7:3d:f2:b2:f9:3f:ab:ad:a0:14:89:be:fd:71: 87:ef:a2:38:8e:c6:c8:d7:89:99:7b:55:f0:ad:5c: 1a:79:9b:01:20:da:db:82:66:df:d7:a6:7d:50:5f: b1:98:d0:3e:1f:78:82:bc:46:da:81:c0:1d:45:d7: e3:a0:cb:5c:bd:8a:9e:88:0f:d5:63:4b:bc:16:2d: a4:f0:ba:a9:a2:63:ed:7d:f1:47:f2:f6:66:c0:16: 9f:c8:e8:a2:9d:4b:75:60:fd:50:30:51:78:09:4c: 02:fb:d9:81:0a:3e:56:d1:eb:88:d8:8a:be:63:3f: ee:32:5d:fe:0f:db:08:0b:0d:b2:76:ac:67:18:d1: 55:92:bb:9d:13:2e:9c:9a:2b:74:c1:6b:db:49:83: 1f:a2:97:9a:ca:63:a0:cc:7a:55:db:67:56:04:be: 28:6d:0e:1f:a2:6f:f7:26:c4:28:de:5f:37:65:86: ae:dc:90:e4:15:c6:14:19:12:be:3b:73:01:ea:38: ea:7c:24:f6:4d:45:ee:c6:47:96:ac:c1:fb:7c:b7: cc:6c:68:df:c0:7a:e7:c6:9f:4b:09:55:bd:4a:7a: c1:66:ef:ed:0b:0d:c5:f9:57:14:3e:e8:0e:21:7b: 38:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B6:AA:60:50:36:25:A1:C4:2C:1E:85:32:69:D0:A9:AD:F0:A0:52 X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:23:df:d4:04:59:b8:9e:ac:72:b1:0b:85:18:2e:81:6b:5d: 8c:6c:e6:23:86:0e:d5:cc:c1:8d:c9:f8:26:51:80:47:95:34: 2f:14:62:26:81:5c:75:84:ef:ad:a4:e1:e1:5c:2f:d9:f6:08: e7:aa:85:77:a6:24:32:cb:04:d8:80:69:eb:3c:1d:66:0f:81: 1c:ff:01:d2:8c:03:1c:ba:b3:86:b3:f6:f2:a0:b5:cc:5d:a6: 18:03:a6:fb:40:52:8e:72:66:45:51:53:99:73:b8:46:ab:30: 2f:dd:13:2b:5f:96:5e:1a:89:4c:56:f9:e5:d2:c1:24:d9:60: b2:51:70:5a:59:40:42:c3:9b:3a:05:d8:08:76:0b:c1:e7:02: 4e:25:5a:76:13:d5:48:0d:ac:7b:38:6d:13:ed:73:24:b1:4f: a9:9c:0a:d8:23:18:2c:9a:a0:f2:14:5f:98:e1:16:e6:0d:dc: ef:6d:09:26:4a:66:ac:29:3f:b2:b8:db:3b:62:7b:72:b5:72: c8:7e:f3:0f:6d:ec:70:ca:99:f2:6c:3d:b1:69:c1:f2:3c:a7: a4:1f:cd:2b:52:8b:de:d1:51:78:cd:9e:da:d7:03:08:f0:50: a9:75:c9:2a:f9:74:04:68:e7:6f:7d:18:ee:6c:8b:ee:b7:2e: af:ec:87:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUwNDI1MDAyOTM4WhcNMjUwNTAyMDAyOTM4WjAYMRYwFAYD VQQDEw02ODBhZDc3My1lODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF80UsggyCq+9t+HkmrGpz3ysvk/q62gFIm+/XGH76I4jsbI14mZe1XwrVwa eZsBINrbgmbf16Z9UF+xmNA+H3iCvEbagcAdRdfjoMtcvYqeiA/VY0u8Fi2k8Lqp omPtffFH8vZmwBafyOiinUt1YP1QMFF4CUwC+9mBCj5W0euI2Iq+Yz/uMl3+D9sI Cw2ydqxnGNFVkrudEy6cmit0wWvbSYMfopeaymOgzHpV22dWBL4obQ4fom/3JsQo 3l83ZYau3JDkFcYUGRK+O3MB6jjqfCT2TUXuxkeWrMH7fLfMbGjfwHrnxp9LCVW9 SnrBZu/tCw3F+VcUPugOIXs4BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy2qmBQ NiWhxCwehTJp0Kmt8KBSMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAII9/UBFm4nqxysQuFGC6Ba12MbOYjhg7VzMGNyfgmUYBHlTQvFGIm gVx1hO+tpOHhXC/Z9gjnqoV3piQyywTYgGnrPB1mD4Ec/wHSjAMcurOGs/byoLXM XaYYA6b7QFKOcmZFUVOZc7hGqzAv3RMrX5ZeGolMVvnl0sEk2WCyUXBaWUBCw5s6 BdgIdgvB5wJOJVp2E9VIDax7OG0T7XMksU+pnArYIxgsmqDyFF+Y4RbmDdzvbQkm SmasKT+yuNs7YntytXLIfvMPbexwypnybD2xacHyPKekH80rUove0VF4zZ7a1wMI 8FCpdckq+XQEaOdvfRjubIvuty6v7Id+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:37 2025 by rpki-client