$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json) Hash identifier: 17VZBZvFFQlKAVit5oQI6z3rLX0D85a+hKPg01zVAQQ= Subject key identifier: 10:33:1E:97:94:83:81:80:81:7C:BA:8B:DE:1C:C3:A6:35:47:0F:8E Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Certificate serial: 15B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft Manifest number: 15AA Signing time: Sun 20 Apr 2025 16:42:11 +0000 Manifest this update: Sun 20 Apr 2025 16:42:10 +0000 Manifest next update: Sun 27 Apr 2025 16:42:10 +0000 Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: CNf8VC7dK57g3Q714IG5/mEU5U+Kd0rb4a55Dv5TRnE=) 2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: Xq7aDp/RYbNUbH8lamtxHtlBICT7QgYLuIupGmw4yJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 16:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5554 (0x15b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Validity Not Before: Apr 20 16:42:10 2025 GMT Not After : Apr 27 16:42:10 2025 GMT Subject: CN=680523e2-6a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:1f:ef:94:f2:dc:9e:f7:a0:2a:de:9e:0e: a2:1a:f0:81:ae:68:e0:85:1e:67:5f:51:8f:81:c1: 35:ee:31:cb:7b:83:57:a1:24:28:00:db:7f:77:e4: 34:28:81:24:9d:3f:c0:f8:04:4f:cb:bd:7f:0a:2e: a1:55:3c:69:fc:cf:00:e3:99:e6:47:4b:5e:99:8a: 0e:99:a6:7d:26:0e:6b:ac:03:8c:2b:31:01:ad:ac: ab:4d:ca:b7:7f:1c:9e:88:32:0f:6d:18:a4:cf:01: d3:49:34:96:14:16:50:67:66:26:a0:a8:37:4c:6a: 68:f3:26:cd:96:b0:cd:b2:d3:94:ec:56:4c:35:3a: 30:eb:d7:e3:96:8f:b8:85:b7:3c:c1:3a:bf:b5:8d: 1d:a3:89:4d:03:61:d3:f9:b6:2a:10:4a:1d:22:d2: 40:89:6d:f8:3c:1c:47:d5:d7:ca:77:86:1e:95:34: 47:99:68:c5:60:95:ef:2b:99:ca:c1:a1:e8:bd:57: 27:6d:d7:f2:84:cb:98:49:ec:6b:c6:5d:53:a8:d0: a1:49:5b:40:a7:df:d8:c1:2c:8d:f2:ea:a1:d0:42: 9c:f3:55:1a:23:92:03:d1:30:7f:ff:8e:85:5b:ea: 8e:ab:62:d4:23:e6:74:eb:ed:9b:a2:55:3f:2a:fe: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:1E:97:94:83:81:80:81:7C:BA:8B:DE:1C:C3:A6:35:47:0F:8E X509v3 Authority Key Identifier: keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f5:8a:03:81:9a:5b:26:6d:36:fc:12:e4:0c:57:86:ad:bb: 90:fa:73:7f:dc:ca:05:db:fd:b8:14:1f:9d:db:48:bb:49:8a: 94:38:2c:f0:7e:33:46:03:16:55:aa:84:60:c1:2a:f7:10:f0: 0a:5f:59:14:bf:11:18:51:34:ea:de:c9:c9:de:17:94:06:07: 56:f4:a1:5c:a3:3c:fd:03:7f:23:68:22:21:dd:fa:2e:3f:2e: 4f:b6:0f:d0:c2:0d:80:cc:10:3c:1e:64:9c:57:0c:9c:66:6a: 95:9b:60:5f:60:79:e6:af:a3:10:86:63:2e:9a:ce:83:66:a4: 95:b5:b2:ab:00:58:7e:dd:2b:d2:d7:78:ee:64:a3:f7:3f:6b: 46:81:8b:17:64:b7:17:db:14:5a:c4:da:67:f2:f7:4d:48:5f: 9b:94:4d:48:e3:75:90:72:1f:64:60:85:ab:08:e2:cf:8f:a2: 6d:4d:61:68:54:55:72:90:74:d8:e6:a5:43:91:43:42:eb:1c: 7c:dd:c6:14:29:b7:77:17:c3:ba:a0:ed:e5:17:a0:17:34:c7: c4:b7:0a:13:a4:fc:88:d8:36:01:cb:d9:09:fd:5f:55:b5:f8: 0e:7e:8a:1c:cf:d9:67:32:17:b6:a5:d0:35:6a:91:05:95:35: 5e:25:7a:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0 MzRERjQ1NDAwHhcNMjUwNDIwMTY0MjEwWhcNMjUwNDI3MTY0MjEwWjAYMRYwFAYD VQQDEw02ODA1MjNlMi02YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGAf75Ty3J73oCreng6iGvCBrmjghR5nX1GPgcE17jHLe4NXoSQoANt/d+Q0 KIEknT/A+ARPy71/Ci6hVTxp/M8A45nmR0temYoOmaZ9Jg5rrAOMKzEBrayrTcq3 fxyeiDIPbRikzwHTSTSWFBZQZ2YmoKg3TGpo8ybNlrDNstOU7FZMNTow69fjlo+4 hbc8wTq/tY0do4lNA2HT+bYqEEodItJAiW34PBxH1dfKd4YelTRHmWjFYJXvK5nK waHovVcnbdfyhMuYSexrxl1TqNChSVtAp9/YwSyN8uqh0EKc81UaI5ID0TB//46F W+qOq2LUI+Z06+2bolU/Kv7q5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAzHpeU g4GAgXy6i94cw6Y1Rw+OMB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4 MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty a1lDRkNEdm9MVkZEVGZSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo9YoDgZpbJm02/BLkDFeGrbuQ+nN/3MoF2/24FB+d20i7SYqUOCzw fjNGAxZVqoRgwSr3EPAKX1kUvxEYUTTq3snJ3heUBgdW9KFcozz9A38jaCIh3fou Py5Ptg/Qwg2AzBA8HmScVwycZmqVm2BfYHnmr6MQhmMums6DZqSVtbKrAFh+3SvS 13juZKP3P2tGgYsXZLcX2xRaxNpn8vdNSF+blE1I43WQch9kYIWrCOLPj6JtTWFo VFVykHTY5qVDkUNC6xx83cYUKbd3F8O6oO3lF6AXNMfEtwoTpPyI2DYBy9kJ/V9V tfgOfoocz9lnMhe2pdA1apEFlTVeJXof -----END CERTIFICATE-----Generated at Sun Apr 20 22:05:40 2025 by rpki-client