$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: tio8ASB8dQ0AUeflJ2fUY64Vm9o+s/oaIy3yS4rzZj8= Subject key identifier: 3C:95:6B:28:A9:5D:9F:8B:23:71:CA:F1:56:3E:7C:A2:0B:6B:0D:6E Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 04F4 Signing time: Thu 24 Apr 2025 23:38:08 +0000 Manifest this update: Thu 24 Apr 2025 23:38:08 +0000 Manifest next update: Thu 01 May 2025 23:38:08 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: rOyy0tUZ3ZnhGafX74Qt0BItIec55YQq6VXXeHhnNQQ=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Apr 24 23:38:08 2025 GMT Not After : May 1 23:38:08 2025 GMT Subject: CN=680acb60-409b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:75:36:d3:05:91:76:05:ec:7d:4d:b6:4c: 7f:d3:51:b0:45:e5:f9:2f:ca:7b:a6:32:49:ca:ba: 26:68:82:0a:9b:95:91:50:25:fb:31:96:76:32:b1: ac:17:7d:0d:5e:f3:f7:60:a2:97:54:44:5f:fe:a2: ee:bf:92:73:c6:11:a0:d2:77:37:95:2e:57:dc:9e: b8:32:1a:91:8b:d5:21:ce:f9:08:18:ff:fc:23:8b: 52:75:82:97:8e:fa:ce:56:0f:85:9e:07:cd:d9:6d: d4:ea:a0:23:a8:09:b5:90:c0:19:e3:3a:42:0c:cc: 8d:06:44:4b:dd:4e:27:36:0c:56:b4:1f:ce:10:a8: 8c:8d:19:d2:d7:ea:23:21:46:35:45:e5:cf:b2:e4: 42:22:0c:16:6d:65:99:cb:7d:94:16:59:1d:75:00: 78:c9:d1:64:8d:46:12:b0:7d:0b:99:5b:c8:11:17: 23:0a:61:7c:eb:bd:49:30:8b:de:d1:6d:73:0e:fb: b9:5c:44:a9:78:65:6b:42:14:63:f4:78:70:2e:a9: 3a:25:85:5f:2e:d0:72:91:da:cb:df:7c:89:be:6e: 78:a9:cd:0e:1f:b9:28:e0:ae:3e:b2:e5:e8:b5:03: 93:4d:1a:79:ba:a1:d6:7f:cd:06:35:bc:a7:2c:a2: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:95:6B:28:A9:5D:9F:8B:23:71:CA:F1:56:3E:7C:A2:0B:6B:0D:6E X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:18:04:ee:c8:f1:44:f5:53:b9:43:c7:67:99:b7:e9:03:16: a3:a8:22:33:23:08:d3:88:bf:a7:c3:04:45:7c:2e:76:24:e6: bd:75:d5:79:f7:c6:70:1c:6c:30:7c:14:fb:fe:0e:88:d0:87: 61:f6:db:c0:f4:4c:ab:7d:2d:05:25:53:0e:e2:37:01:80:61: 16:28:e2:a5:28:87:c6:51:c8:1e:79:03:03:6b:69:76:33:f6: fd:e4:be:a2:95:7f:8e:89:87:c8:b4:59:d8:2c:9b:e4:a1:46: ce:fd:c0:26:f7:74:0b:c5:b7:68:1d:d9:6a:ea:c9:9c:6b:b2: 3f:2b:b8:45:52:c6:52:91:ff:96:e5:70:44:b5:64:5a:63:72: 26:49:5a:72:8e:c1:66:97:36:79:e8:9a:ff:db:59:f5:9d:a0: b3:79:83:7b:1d:15:16:ce:2f:ee:05:d0:f4:f3:c4:76:2d:74: ee:71:85:16:8b:c6:c0:57:de:e3:57:ac:ef:57:bf:5f:75:b5: 9e:00:86:30:ea:f0:d2:9f:51:35:94:2d:6b:86:55:ca:5c:1c: bd:28:23:ff:83:1d:04:ba:83:40:71:b2:09:9d:84:75:47:cb: 93:a5:0b:b3:f9:53:86:07:a5:fe:de:f5:bf:bd:36:8b:3e:47: 2f:95:fe:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUwNDI0MjMzODA4WhcNMjUwNTAxMjMzODA4WjAYMRYwFAYD VQQDEw02ODBhY2I2MC00MDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eF1NtMFkXYF7H1Ntkx/01GwReX5L8p7pjJJyromaIIKm5WRUCX7MZZ2MrGs F30NXvP3YKKXVERf/qLuv5JzxhGg0nc3lS5X3J64MhqRi9UhzvkIGP/8I4tSdYKX jvrOVg+FngfN2W3U6qAjqAm1kMAZ4zpCDMyNBkRL3U4nNgxWtB/OEKiMjRnS1+oj IUY1ReXPsuRCIgwWbWWZy32UFlkddQB4ydFkjUYSsH0LmVvIERcjCmF8671JMIve 0W1zDvu5XESpeGVrQhRj9HhwLqk6JYVfLtBykdrL33yJvm54qc0OH7ko4K4+suXo tQOTTRp5uqHWf80GNbynLKJtTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyVayip XZ+LI3HK8VY+fKILaw1uMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQGATuyPFE9VO5Q8dnmbfpAxajqCIzIwjTiL+nwwRFfC52JOa9ddV5 98ZwHGwwfBT7/g6I0Idh9tvA9EyrfS0FJVMO4jcBgGEWKOKlKIfGUcgeeQMDa2l2 M/b95L6ilX+OiYfItFnYLJvkoUbO/cAm93QLxbdoHdlq6smca7I/K7hFUsZSkf+W 5XBEtWRaY3ImSVpyjsFmlzZ56Jr/21n1naCzeYN7HRUWzi/uBdD088R2LXTucYUW i8bAV97jV6zvV79fdbWeAIYw6vDSn1E1lC1rhlXKXBy9KCP/gx0EuoNAcbIJnYR1 R8uTpQuz+VOGB6X+3vW/vTaLPkcvlf4R -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:35 2025 by rpki-client