$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: qA2J7KGVgDrHxdvtpORuhrLATvFVRsjnYmxdxXvurGM= Subject key identifier: FA:49:44:48:E6:22:6E:64:F7:01:C1:64:F6:89:C0:76:B7:CE:55:71 Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 3F92 Signing time: Wed 16 Apr 2025 14:49:35 +0000 Manifest this update: Wed 16 Apr 2025 14:49:35 +0000 Manifest next update: Wed 23 Apr 2025 14:49:35 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: Se/fi70MHOvxUmnFI3+IxNV04nPEgsMu6Kt039G48nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: Apr 16 14:49:35 2025 GMT Not After : Apr 23 14:49:35 2025 GMT Subject: CN=67ffc37f-e685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:59:24:4a:82:05:97:ab:79:3e:90:e8:e6: 05:91:63:6c:02:46:24:41:0b:d8:d2:ce:5c:48:1c: a9:6f:ce:eb:3d:73:bb:92:59:a0:cc:f1:01:06:06: 5a:bf:17:e2:ef:88:e2:38:9b:ee:5e:b8:40:ad:b2: 1e:a8:c5:76:4a:41:d3:96:35:bf:3e:f2:ec:05:3a: 5d:fc:30:a2:ba:6e:58:da:69:7d:d9:82:ca:3d:1a: 21:5c:06:97:dd:07:0e:fd:e1:b6:75:cb:ce:c9:3b: 30:c7:cd:49:9d:d4:9b:01:29:c1:2a:54:34:ad:48: fb:75:43:7b:e4:6b:6d:b0:4f:36:c3:be:86:b6:29: a0:23:e9:6f:b3:ab:e1:ba:e9:c1:d0:88:09:aa:45: f4:f8:22:54:ec:84:4f:33:a5:15:bf:84:3a:54:8b: c4:85:fd:32:71:e2:c6:86:ac:5e:23:aa:ed:27:e8: 20:84:a5:d5:68:bf:ef:9c:6d:85:03:cc:ca:55:b8: a0:cf:64:22:5c:03:de:d5:12:a1:bb:51:b7:82:39: 46:53:36:a6:24:00:77:22:97:f6:c9:5c:2a:2e:83: dc:50:70:61:35:02:40:e2:df:0f:3c:d5:93:32:bb: 02:73:a1:d7:7b:03:c2:58:ab:e6:90:d7:33:53:66: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:44:48:E6:22:6E:64:F7:01:C1:64:F6:89:C0:76:B7:CE:55:71 X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ff:d6:53:6b:30:97:a8:f8:b9:cd:6f:96:4b:ba:2d:82:60: c3:c1:59:ec:6f:18:b7:40:f8:f0:4c:07:e6:d1:6c:c6:86:20: 55:3c:49:0e:b5:79:2b:70:fa:da:0a:99:2c:82:6c:e0:f6:83: f9:01:61:be:b6:53:19:30:27:13:99:ad:53:4c:db:39:ee:8f: 21:12:f9:06:3f:64:30:72:d2:ca:e2:f5:a8:c1:fc:5d:e9:68: 77:45:2e:3b:4d:3f:67:4c:b0:e7:37:f0:d5:b3:e4:2d:3a:37: 22:84:c0:cf:f1:f0:8e:23:c1:c0:16:c2:f1:90:0d:23:98:ff: 21:43:f0:52:d6:6e:b5:92:b7:b3:fb:d7:85:83:35:57:d2:27: 1f:34:8a:2a:80:81:37:4d:4d:8d:4a:96:ff:f1:c1:6c:3b:e6: 4c:6a:65:d0:03:58:d0:98:dc:0a:ab:d6:55:e2:c3:ab:3f:0b: 52:5a:b6:9e:71:2f:00:6d:6b:4e:82:53:4b:7b:dc:fd:cd:72: b2:9b:92:3f:d5:39:45:48:f0:24:c1:2f:c0:09:92:c6:35:62: fc:f9:0b:3d:91:02:2f:49:4e:5d:10:18:d3:f8:76:75:10:29: 18:af:7b:84:3e:3d:e3:1e:75:bb:6a:cd:75:d3:9b:3e:9f:89: a5:d2:0d:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjUwNDE2MTQ0OTM1WhcNMjUwNDIzMTQ0OTM1WjAYMRYwFAYD VQQDEw02N2ZmYzM3Zi1lNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySBZJEqCBZereT6Q6OYFkWNsAkYkQQvY0s5cSBypb87rPXO7klmgzPEBBgZa vxfi74jiOJvuXrhArbIeqMV2SkHTljW/PvLsBTpd/DCium5Y2ml92YLKPRohXAaX 3QcO/eG2dcvOyTswx81JndSbASnBKlQ0rUj7dUN75GttsE82w76GtimgI+lvs6vh uunB0IgJqkX0+CJU7IRPM6UVv4Q6VIvEhf0yceLGhqxeI6rtJ+gghKXVaL/vnG2F A8zKVbigz2QiXAPe1RKhu1G3gjlGUzamJAB3Ipf2yVwqLoPcUHBhNQJA4t8PPNWT MrsCc6HXewPCWKvmkNczU2bVbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpJREjm Im5k9wHBZPaJwHa3zlVxMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1/9ZTazCXqPi5zW+WS7otgmDDwVnsbxi3QPjwTAfm0WzGhiBVPEkO tXkrcPraCpksgmzg9oP5AWG+tlMZMCcTma1TTNs57o8hEvkGP2QwctLK4vWowfxd 6Wh3RS47TT9nTLDnN/DVs+QtOjcihMDP8fCOI8HAFsLxkA0jmP8hQ/BS1m61krez +9eFgzVX0icfNIoqgIE3TU2NSpb/8cFsO+ZMamXQA1jQmNwKq9ZV4sOrPwtSWrae cS8AbWtOglNLe9z9zXKym5I/1TlFSPAkwS/ACZLGNWL8+Qs9kQIvSU5dEBjT+HZ1 ECkYr3uEPj3jHnW7as1105s+n4ml0g1W -----END CERTIFICATE-----Generated at Fri Apr 18 08:56:27 2025 by rpki-client