$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: UBmU800nJc/QpSrvEG4jJYUVYuUpmLctQLgD5pCGXSA= Subject key identifier: 58:CC:47:42:DA:8B:1D:04:7F:48:FD:EC:39:7B:8D:18:F6:11:1F:D4 Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: 7E Signing time: Fri 25 Apr 2025 05:41:30 +0000 Manifest this update: Fri 25 Apr 2025 05:41:29 +0000 Manifest next update: Fri 02 May 2025 05:41:29 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: kCCzn1PTSUsycXxJeoWztKSxLaYzbBEAuLnzJfIUDp0=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: +q7i8FT7aXv5TbfXQs0zmVnbFdJSpOU7FUV6yCY0qyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Apr 25 05:41:29 2025 GMT Not After : May 2 05:41:29 2025 GMT Subject: CN=680b208a-9b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:5d:3f:2b:8d:a1:b6:e9:42:6f:74:48:6a: 7f:9b:f1:cd:be:42:af:56:33:5a:b7:6f:ec:4f:75: 5c:24:0c:14:13:49:2a:7e:17:c3:63:c6:9d:a1:7a: 0b:0d:4e:a2:df:1b:98:3f:d8:8a:30:97:fc:2e:c2: 4f:c5:af:93:9f:d9:3b:47:f5:eb:e4:28:a9:d8:fc: 0a:5f:48:25:c5:99:b9:b7:92:d1:f4:40:ac:4b:56: 9f:75:ff:4c:57:29:b5:51:c5:1d:b4:6a:5f:74:25: 1d:8f:c9:d3:30:76:62:c4:b7:ce:a5:a5:f7:60:17: f8:dc:65:b2:98:14:64:b0:c1:69:25:3b:e5:fe:88: d7:ba:15:af:2c:1a:00:46:9f:a3:c8:b8:36:29:7a: 0a:9e:3d:d1:bb:12:1e:b7:44:3b:5b:0e:93:0c:30: 8f:e8:89:05:f0:bc:af:0c:0b:89:91:aa:eb:88:88: 89:54:34:aa:9d:e4:21:07:5b:a2:87:84:e9:71:73: 41:45:4b:4f:f6:c8:01:3a:1d:55:70:56:88:65:1d: d9:b1:5f:8a:62:15:2a:13:fd:dc:d9:ae:cd:1d:16: c3:da:84:05:e7:1f:50:fd:d5:44:eb:08:97:62:35: e2:12:6c:59:3e:4b:27:c6:5f:b6:2f:3c:bf:14:eb: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CC:47:42:DA:8B:1D:04:7F:48:FD:EC:39:7B:8D:18:F6:11:1F:D4 X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:78:74:20:5b:99:8d:42:62:11:90:4e:e4:b3:f3:06:97:4f: bc:9c:bb:6f:63:ad:be:75:ce:3d:24:0a:16:7f:77:a8:f9:07: 4a:82:08:83:3f:0e:7a:5e:e3:78:40:85:76:fd:d8:1e:9c:75: e7:4a:dc:46:87:42:5c:57:67:a8:ec:54:a5:49:ab:31:c5:6a: 7d:11:26:19:0b:95:88:23:6b:af:f2:b4:89:d2:bb:be:45:0f: f4:1f:2a:c1:9a:a6:7c:30:77:97:22:cd:d8:e0:90:4e:5a:f8: c3:6f:4e:c8:23:0f:c3:06:04:85:47:0f:87:fc:bd:c1:c0:ea: d5:7e:3d:b8:4c:c6:8b:f4:58:bf:4b:03:ea:1c:39:c7:54:43: 4b:24:9a:9a:d5:d9:9a:b7:d6:f9:17:5b:29:c2:c3:2f:84:89: d6:60:b3:ec:cc:6d:15:8b:60:24:8d:5b:f8:51:8b:fc:db:f8: 17:27:95:45:98:a4:e2:36:68:5d:92:eb:a8:c9:0a:bd:18:f4: bb:29:b7:78:fc:92:25:e8:f6:8c:6a:4f:df:1a:1e:3a:10:ad: 2c:4c:ec:57:88:d7:a9:d2:ec:7b:52:ba:fa:09:a7:27:51:c9: 9e:e1:e4:83:36:73:d7:bf:5a:db:c0:38:9b:1c:14:8c:09:76: ba:f8:12:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTU2QzExMC8GA1UEBRMoREM3NTU5RUU1QTIyNTA2MDM5NzMzOEZDQUEzODAzRkZB QTRCMjM1NzAeFw0yNTA0MjUwNTQxMjlaFw0yNTA1MDIwNTQxMjlaMBgxFjAUBgNV BAMTDTY4MGIyMDhhLTliOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ3V0/K42htulCb3RIan+b8c2+Qq9WM1q3b+xPdVwkDBQTSSp+F8Njxp2hegsN TqLfG5g/2Iowl/wuwk/Fr5Of2TtH9evkKKnY/ApfSCXFmbm3ktH0QKxLVp91/0xX KbVRxR20al90JR2PydMwdmLEt86lpfdgF/jcZbKYFGSwwWklO+X+iNe6Fa8sGgBG n6PIuDYpegqePdG7Eh63RDtbDpMMMI/oiQXwvK8MC4mRquuIiIlUNKqd5CEHW6KH hOlxc0FFS0/2yAE6HVVwVohlHdmxX4piFSoT/dzZrs0dFsPahAXnH1D91UTrCJdi NeISbFk+SyfGX7YvPL8U67g5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWMxHQtqL HQR/SP3sOXuNGPYRH9QwHwYDVR0jBBgwFoAU3HVZ7loiUGA5czj8qjgD/6pLI1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBNTZDL0REREU4QzQ4NjRG RjExRUZBNUE4MTE1OEM0RjlBRTAyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0hWWjdsb2lVR0E1Y3pqOHFqZ0RfNnBMSTFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB NTZDL0REREU4QzQ4NjRGRjExRUZBNUE4MTE1OEM0RjlBRTAyLzNIVlo3bG9pVUdB NWN6ajhxamdEXzZwTEkxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALJ4dCBbmY1CYhGQTuSz8waXT7ycu29jrb51zj0kChZ/d6j5B0qCCIM/ Dnpe43hAhXb92B6cdedK3EaHQlxXZ6jsVKVJqzHFan0RJhkLlYgja6/ytInSu75F D/QfKsGapnwwd5cizdjgkE5a+MNvTsgjD8MGBIVHD4f8vcHA6tV+PbhMxov0WL9L A+ocOcdUQ0skmprV2Zq31vkXWynCwy+EidZgs+zMbRWLYCSNW/hRi/zb+BcnlUWY pOI2aF2S66jJCr0Y9Lspt3j8kiXo9oxqT98aHjoQrSxM7FeI16nS7HtSuvoJpydR yZ7h5IM2c9e/WtvAOJscFIwJdrr4Eik= -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:12 2025 by rpki-client