$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft File: 3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json) Hash identifier: eocwZuNA2zEmzMxu0pC463ga2zgFeuHJHsh/mF/TenU= Subject key identifier: A2:46:21:BF:C5:E1:1E:88:56:30:FF:D9:A0:78:48:7D:F3:8F:71:28 Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E Certificate issuer: /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft Manifest number: 0A11 Signing time: Tue 22 Apr 2025 19:50:12 +0000 Manifest this update: Tue 22 Apr 2025 19:50:12 +0000 Manifest next update: Tue 29 Apr 2025 19:50:12 +0000 Files and hashes: 1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: Wj/KNPwporuAyluVvX3oysFKpM+Jjeh597+dxAXK97Q=) 2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: ji+KlU2gFS8nu1GqpxB5qhxfHmLgjDFULqm1/8oINXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E Validity Not Before: Apr 22 19:50:12 2025 GMT Not After : Apr 29 19:50:12 2025 GMT Subject: CN=6807f2f4-1605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:c7:91:2b:4a:6a:1a:6d:fc:c7:75:73:cd: 91:ec:fe:c2:fd:29:52:75:5e:9c:02:07:b7:80:1a: 55:c5:a3:19:b6:f7:fa:86:71:ad:e2:d9:26:ba:5f: 0e:0e:0f:f5:d2:20:c4:ff:9b:90:9c:4a:71:de:ac: b9:2d:12:83:49:ce:99:1c:7b:81:94:21:07:2f:b3: d7:c8:bb:ea:4f:04:e2:5c:12:b8:21:81:7c:a9:ea: b0:48:a6:94:fa:2c:77:a4:7d:dc:ca:d3:b5:db:a1: e7:c8:fe:d9:5e:9b:fd:0e:a9:30:52:1e:94:33:20: 21:38:40:22:60:d3:97:7b:19:d4:15:7b:f3:76:85: a2:f7:a2:9f:b7:21:57:86:b3:e7:3a:39:b9:97:31: 4d:ac:95:c2:8c:2b:74:ff:8f:12:7a:c0:64:86:cc: c3:7c:48:75:d9:65:19:2b:65:d4:7c:b3:2c:84:e4: b2:d6:53:8e:42:51:34:98:4c:88:3c:a1:ba:11:41: f1:2f:0f:61:4e:af:5c:f8:38:a3:2b:86:be:2a:01: 57:84:c1:a9:83:66:aa:a4:9b:b5:72:7f:73:75:d2: 50:d9:a5:11:86:49:7e:08:d7:f1:4b:39:4a:10:c7: 32:72:6f:f2:95:f4:a3:6e:4a:0e:e5:96:00:3f:ef: a2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:21:BF:C5:E1:1E:88:56:30:FF:D9:A0:78:48:7D:F3:8F:71:28 X509v3 Authority Key Identifier: keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:20:86:bc:f4:25:ed:35:e0:b4:84:2d:fa:0e:0d:d6:55:1b: cf:9a:b7:26:50:f9:2b:51:b3:fc:6f:3b:cd:7e:6a:4a:a8:93: 31:58:19:a4:ec:4c:5d:ae:f4:77:2c:7f:62:d7:9c:b6:5e:1f: 6a:f1:5a:01:30:b3:0b:ec:8e:06:15:54:7f:14:7c:dd:c7:06: 57:fc:8d:73:ce:d9:df:b6:ea:dd:09:5f:e2:55:78:29:a4:6a: 97:34:36:25:71:14:6a:ab:e0:5f:a9:82:63:8d:3a:8f:5d:56: 20:82:a3:89:ee:14:2e:54:f1:7c:21:77:7f:16:66:24:01:01: 42:60:f4:2e:a8:45:16:15:0f:90:de:74:86:8f:c6:af:da:68: b6:71:97:67:fd:ae:e9:56:a2:58:c4:27:06:c4:2c:53:c6:30: 72:a7:a0:53:47:5f:bc:5a:4b:c9:f3:eb:f6:4b:11:a0:41:e2: 86:31:33:4c:7c:24:81:05:ad:34:2c:82:b5:51:fb:61:cb:8c: 53:8b:1b:7a:ac:03:35:18:c5:d7:96:34:bc:3c:e4:00:14:a7: 2c:b3:aa:d9:4d:26:68:5c:55:44:d0:4b:57:1e:0f:17:43:68: 31:b5:6b:ce:60:bc:c9:db:7e:74:c0:4d:f0:66:ad:18:58:cf: b6:a7:3b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4MjkxMTAvBgNVBAUTKERDQ0Q1NTM1NTJCQUY4QTY1QzFBMDY2QjMzNDdGNzkz MjQ0RjU3NUUwHhcNMjUwNDIyMTk1MDEyWhcNMjUwNDI5MTk1MDEyWjAYMRYwFAYD VQQDEw02ODA3ZjJmNC0xNjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbfHkStKahpt/Md1c82R7P7C/SlSdV6cAge3gBpVxaMZtvf6hnGt4tkmul8O Dg/10iDE/5uQnEpx3qy5LRKDSc6ZHHuBlCEHL7PXyLvqTwTiXBK4IYF8qeqwSKaU +ix3pH3cytO126HnyP7ZXpv9DqkwUh6UMyAhOEAiYNOXexnUFXvzdoWi96KftyFX hrPnOjm5lzFNrJXCjCt0/48SesBkhszDfEh12WUZK2XUfLMshOSy1lOOQlE0mEyI PKG6EUHxLw9hTq9c+DijK4a+KgFXhMGpg2aqpJu1cn9zddJQ2aURhkl+CNfxSzlK EMcycm/ylfSjbkoO5ZYAP++iIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJGIb/F 4R6IVjD/2aB4SH3zj3EoMB8GA1UdIwQYMBaAFNzNVTVSuvimXBoGazNH95MkT1de MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDgyOS85OUQ3QzZBNDZG RUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1LWmNHZ1pyTTBmM2t5UlBW MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNMVZOVks2LUtaY0dnWnJNMGYza3lSUFYxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDgyOS85OUQ3QzZBNDZGRUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1L WmNHZ1pyTTBmM2t5UlBWMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOIIa89CXtNeC0hC36Dg3WVRvPmrcmUPkrUbP8bzvNfmpKqJMxWBmk 7ExdrvR3LH9i15y2Xh9q8VoBMLML7I4GFVR/FHzdxwZX/I1zztnfturdCV/iVXgp pGqXNDYlcRRqq+BfqYJjjTqPXVYggqOJ7hQuVPF8IXd/FmYkAQFCYPQuqEUWFQ+Q 3nSGj8av2mi2cZdn/a7pVqJYxCcGxCxTxjByp6BTR1+8WkvJ8+v2SxGgQeKGMTNM fCSBBa00LIK1Ufthy4xTixt6rAM1GMXXljS8POQAFKcss6rZTSZoXFVE0EtXHg8X Q2gxtWvOYLzJ2350wE3wZq0YWM+2pzso -----END CERTIFICATE-----Generated at Tue Apr 22 23:21:47 2025 by rpki-client