$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: jitQobPJhZLXWBSlFMGnCgTxf2UYfoA2DUa7UF2eJLA= Subject key identifier: C8:72:03:CD:EB:92:D0:90:7A:68:9F:9B:65:B0:0F:53:3C:FD:FE:AD Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1BCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1BCE Signing time: Fri 30 May 2025 16:24:20 +0000 Manifest this update: Fri 30 May 2025 16:24:19 +0000 Manifest next update: Fri 06 Jun 2025 16:24:19 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: jhattZLMmI7mQiP3TZ+NsOZkTAa/R1gOiOOACBVO0TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7118 (0x1bce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: May 30 16:24:19 2025 GMT Not After : Jun 6 16:24:19 2025 GMT Subject: CN=6839dbb4-1952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:d3:4d:84:b8:cb:97:4f:46:8c:11:77:3c: 77:cd:e6:16:a4:4b:60:67:59:a8:72:02:ea:ea:6e: af:e4:42:75:7f:65:03:ca:fe:da:40:c7:f8:9d:c4: 7b:d1:e3:96:0e:cc:67:2a:8a:57:65:25:49:63:73: 61:df:36:8e:d9:a2:35:1b:81:52:35:4a:fc:9c:31: 37:0c:61:df:df:87:08:6f:ec:11:b7:c3:d5:09:dd: c8:74:4b:71:a2:70:83:87:42:c4:8c:cf:64:a0:8c: c0:ac:7c:81:95:32:56:3a:63:a7:ea:96:a8:b3:1c: 4a:48:ad:5d:67:bb:5e:67:c2:61:55:e4:60:13:83: 1b:60:6d:30:82:49:9e:e3:37:06:63:43:68:22:d7: 9d:00:97:99:49:87:35:45:6a:c5:55:01:bf:b5:35: ea:4c:b0:88:e8:2c:e9:cf:85:52:88:c4:8b:f1:be: 8e:d9:2d:45:d4:d9:f4:68:d0:7b:db:c7:00:e8:0f: 85:48:63:ec:26:a1:b3:be:50:c2:e3:08:78:9e:bb: 53:5a:c6:1e:7c:b5:95:51:c2:31:06:bb:57:10:dd: 9a:8c:37:4c:94:1f:7d:fd:28:ad:77:e0:93:6f:8f: f8:7b:8e:24:1a:b4:3b:8d:b2:f5:af:5a:2e:b7:50: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:03:CD:EB:92:D0:90:7A:68:9F:9B:65:B0:0F:53:3C:FD:FE:AD X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7c:97:46:18:c5:24:52:7d:c9:bd:bb:88:18:0f:88:fb:b5: 7f:f3:71:b8:4b:0f:ee:93:3d:00:ed:d8:a1:e4:7a:1c:6d:eb: 70:84:89:12:62:9b:f5:78:9d:3c:95:3a:d3:cb:1a:77:9f:9e: 3f:77:df:ee:ce:c9:5a:9b:a3:c4:67:72:58:62:eb:d6:5f:1f: 49:b1:df:25:7c:56:f9:d1:b7:22:74:ae:e4:96:2f:d3:13:78: ca:4a:b8:07:78:12:a4:19:07:19:8e:14:01:f7:4a:93:21:3c: aa:92:22:e8:86:86:0c:73:b3:8c:1a:59:ad:45:61:b0:ef:41: 0c:8f:5f:00:e6:02:42:04:88:c5:b9:ef:cc:9a:84:af:db:d0: 5d:50:3a:aa:b1:7e:ce:32:b0:94:31:23:14:13:6f:a8:43:1c: 97:2c:b1:2e:e5:b9:c0:86:56:d2:de:ff:21:01:3f:90:77:d5: c1:72:2b:dc:0c:1c:21:c3:94:f9:04:42:5f:e9:df:ba:9a:5b: 5a:f8:6d:4f:d6:36:e8:d7:0f:75:d4:4c:43:aa:73:b0:4e:4a: 21:2c:7d:c9:7d:b5:01:00:24:dc:14:25:2a:cb:af:d4:b0:82: fa:40:4e:d7:69:34:cd:51:cd:dc:bc:05:d0:21:33:83:e8:f8: 0f:90:e1:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUwNTMwMTYyNDE5WhcNMjUwNjA2MTYyNDE5WjAYMRYwFAYD VQQDEw02ODM5ZGJiNC0xOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuo7TTYS4y5dPRowRdzx3zeYWpEtgZ1mocgLq6m6v5EJ1f2UDyv7aQMf4ncR7 0eOWDsxnKopXZSVJY3Nh3zaO2aI1G4FSNUr8nDE3DGHf34cIb+wRt8PVCd3IdEtx onCDh0LEjM9koIzArHyBlTJWOmOn6paosxxKSK1dZ7teZ8JhVeRgE4MbYG0wgkme 4zcGY0NoItedAJeZSYc1RWrFVQG/tTXqTLCI6Czpz4VSiMSL8b6O2S1F1Nn0aNB7 28cA6A+FSGPsJqGzvlDC4wh4nrtTWsYefLWVUcIxBrtXEN2ajDdMlB99/Sitd+CT b4/4e44kGrQ7jbL1r1out1AmzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhyA83r ktCQemifm2WwD1M8/f6tMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9fJdGGMUkUn3JvbuIGA+I+7V/83G4Sw/ukz0A7dih5HocbetwhIkS Ypv1eJ08lTrTyxp3n54/d9/uzslam6PEZ3JYYuvWXx9Jsd8lfFb50bcidK7kli/T E3jKSrgHeBKkGQcZjhQB90qTITyqkiLohoYMc7OMGlmtRWGw70EMj18A5gJCBIjF ue/MmoSv29BdUDqqsX7OMrCUMSMUE2+oQxyXLLEu5bnAhlbS3v8hAT+Qd9XBcivc DBwhw5T5BEJf6d+6mlta+G1P1jbo1w911ExDqnOwTkohLH3JfbUBACTcFCUqy6/U sIL6QE7XaTTNUc3cvAXQITOD6PgPkOFB -----END CERTIFICATE-----Generated at Sat May 31 17:31:51 2025 by rpki-client