$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: v5XZlX6qhkhYIJFZBnYO+G5ceK6UCA8S48Ca8LF7U/A= Subject key identifier: 38:78:0B:06:C5:C2:3C:04:82:74:38:C7:4B:AC:F5:17:C8:C4:49:65 Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 051F Signing time: Mon 21 Apr 2025 00:21:28 +0000 Manifest this update: Mon 21 Apr 2025 00:21:28 +0000 Manifest next update: Mon 28 Apr 2025 00:21:28 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: SmCI/Afld5boz0+Pd5ibXtEowMhXMNQm+zf5dZn8S+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Apr 21 00:21:28 2025 GMT Not After : Apr 28 00:21:28 2025 GMT Subject: CN=68058f88-3ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:af:85:ba:5d:7b:8d:2c:2a:a1:43:4c:57: 2c:c4:ad:ec:49:44:ab:52:6e:e0:48:ea:c0:8e:5a: d5:36:27:57:ca:0f:6b:4e:89:36:7d:81:e1:a8:d7: 96:03:13:b4:b1:64:bc:e1:2a:dd:05:77:da:89:bc: 3e:05:24:c8:08:9c:53:41:3f:e8:54:cd:91:1f:f3: fa:7c:bb:6a:de:fb:66:f3:9a:85:ea:02:1a:df:bb: 2d:08:53:dc:73:8a:27:24:f2:61:4f:26:1a:34:29: f5:22:88:d2:0c:4a:a5:27:14:8b:59:8b:70:6e:f8: 4b:08:89:bb:74:f0:f7:ae:82:3e:fd:7e:5f:bf:8c: 6b:85:73:8b:f7:3f:35:14:7a:6e:d3:59:07:3e:76: 72:aa:55:ef:4d:5f:a9:a3:c8:20:5f:b9:e5:82:c1: 71:69:bd:48:71:30:18:c0:33:7f:22:fa:44:51:71: 20:2a:36:70:a1:b8:ea:93:df:ef:c6:db:21:8e:92: 8f:6e:04:42:7e:ff:99:20:ba:27:02:a4:d2:e5:8d: df:2c:b2:39:a3:dc:ce:f9:0f:b9:f4:ee:88:42:0b: 2c:46:1f:00:c9:4a:ad:cc:c0:fa:03:22:39:c9:ae: 3e:56:22:c3:fd:0d:58:02:06:61:73:c3:94:d6:1d: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:78:0B:06:C5:C2:3C:04:82:74:38:C7:4B:AC:F5:17:C8:C4:49:65 X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:bb:47:11:16:9d:5e:19:f1:5c:99:67:dd:b7:b7:b6:df:f3: 18:59:79:4a:91:78:75:2d:93:1a:0d:14:f8:8f:4f:79:c8:6e: a2:ee:eb:e7:90:f1:33:83:a3:89:8e:fc:15:64:3c:9a:0e:35: 83:91:48:5c:3c:ef:31:01:f0:72:c2:a9:3a:93:10:f4:fb:66: 85:19:65:3c:35:fe:99:29:16:8b:bc:e8:a7:d4:27:50:51:d8: db:5d:e4:89:c8:51:00:8a:5e:80:3d:b0:2f:fd:8c:4b:08:32: af:8a:18:bf:94:7a:7b:16:30:02:24:7d:85:f9:36:1d:24:fd: b9:65:49:48:78:c0:73:2b:3c:ea:19:48:13:09:0d:f8:f6:ab: 65:30:48:0a:fa:10:d0:02:60:00:8f:8d:25:d8:6d:e7:7c:02: 9d:57:ef:ae:6c:56:20:00:1b:3e:80:af:22:a3:b3:10:da:1f: 9d:70:fc:4d:45:0e:5f:40:b4:fd:7c:60:be:49:58:ec:51:7d: d5:47:b4:74:69:8d:5d:6e:54:3c:8c:94:80:6b:30:95:87:0c: e1:0b:97:db:00:64:5d:1a:b5:a5:6d:d4:70:c1:cf:7a:d9:be: f7:08:16:e1:b8:c7:a4:67:c2:04:13:e5:19:af:97:23:6f:c4: 86:a6:29:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUwNDIxMDAyMTI4WhcNMjUwNDI4MDAyMTI4WjAYMRYwFAYD VQQDEw02ODA1OGY4OC0zZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuravhbpde40sKqFDTFcsxK3sSUSrUm7gSOrAjlrVNidXyg9rTok2fYHhqNeW AxO0sWS84SrdBXfaibw+BSTICJxTQT/oVM2RH/P6fLtq3vtm85qF6gIa37stCFPc c4onJPJhTyYaNCn1IojSDEqlJxSLWYtwbvhLCIm7dPD3roI+/X5fv4xrhXOL9z81 FHpu01kHPnZyqlXvTV+po8ggX7nlgsFxab1IcTAYwDN/IvpEUXEgKjZwobjqk9/v xtshjpKPbgRCfv+ZILonAqTS5Y3fLLI5o9zO+Q+59O6IQgssRh8AyUqtzMD6AyI5 ya4+ViLD/Q1YAgZhc8OU1h2RzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh4CwbF wjwEgnQ4x0us9RfIxEllMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgu0cRFp1eGfFcmWfdt7e23/MYWXlKkXh1LZMaDRT4j095yG6i7uvn kPEzg6OJjvwVZDyaDjWDkUhcPO8xAfBywqk6kxD0+2aFGWU8Nf6ZKRaLvOin1CdQ UdjbXeSJyFEAil6APbAv/YxLCDKvihi/lHp7FjACJH2F+TYdJP25ZUlIeMBzKzzq GUgTCQ349qtlMEgK+hDQAmAAj40l2G3nfAKdV++ubFYgABs+gK8io7MQ2h+dcPxN RQ5fQLT9fGC+SVjsUX3VR7R0aY1dblQ8jJSAazCVhwzhC5fbAGRdGrWlbdRwwc96 2b73CBbhuMekZ8IEE+UZr5cjb8SGpilq -----END CERTIFICATE-----Generated at Tue Apr 22 13:49:26 2025 by rpki-client