$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json) Hash identifier: vEaVn5LUE1R9CGQevgeZkpykXozZz6HC34HrbGHy3/s= Subject key identifier: 4E:67:35:C3:77:43:AC:35:42:97:CC:D6:07:03:BC:C4:C2:47:97:59 Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft Manifest number: 014A Signing time: Sat 31 May 2025 03:53:59 +0000 Manifest this update: Sat 31 May 2025 03:53:58 +0000 Manifest next update: Sat 07 Jun 2025 03:53:58 +0000 Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: Uu/+JAuuv/M1FTp+tueyMF7svel8WgJqxslPNtG2XAU=) 2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: 0Dz92F7ct8bVXTADuiwvMmdgfbqvyjCznAHcDYM7e2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Validity Not Before: May 31 03:53:58 2025 GMT Not After : Jun 7 03:53:58 2025 GMT Subject: CN=683a7d57-1ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:c3:39:37:d7:8f:8f:f6:93:1b:2f:29:63: 70:33:32:38:d5:09:cd:77:09:c3:47:f5:be:82:a4: 8c:dd:91:6c:f3:14:cd:ea:79:59:9a:6e:22:8c:ed: 51:26:1e:1c:50:7e:d3:e8:19:16:ef:28:ba:d5:6f: cd:c0:ef:3f:68:3b:20:20:f1:a0:ea:2c:0e:86:b6: 03:b3:a2:fe:3c:27:82:97:1e:22:63:95:da:3b:d7: 77:40:89:a8:15:93:03:35:2f:eb:d9:e3:8a:0f:bf: e7:6a:20:7f:a5:08:41:73:a3:32:64:13:e1:66:ab: 88:39:c3:aa:41:af:81:60:b5:5b:28:bc:86:7c:40: b7:f7:1e:9c:cc:62:ef:12:87:66:e6:f5:af:89:3e: 46:fb:38:cb:23:6c:e4:76:19:6a:76:ed:17:37:ea: 43:1d:4f:83:ff:91:ce:b6:e7:73:f7:73:13:8e:f7: 28:76:75:7f:aa:88:83:96:63:52:3d:00:21:fd:d0: c8:d1:ce:7a:a7:54:82:07:f7:ac:58:a4:a5:f6:2a: 72:f7:3a:3b:73:3c:24:53:67:d0:4a:26:6d:9e:3d: d9:95:58:86:54:bb:90:98:14:f5:b8:01:3c:79:1f: bb:b8:d7:1b:d0:fc:3d:e4:d6:ff:b0:ce:23:24:6f: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:67:35:C3:77:43:AC:35:42:97:CC:D6:07:03:BC:C4:C2:47:97:59 X509v3 Authority Key Identifier: keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b9:05:d0:2b:cd:2e:2b:be:54:51:2e:90:42:f1:2c:51:8b: c1:c5:fa:8c:1e:57:f5:c3:10:52:f6:fe:ff:b3:a4:e2:f8:c1: 29:7c:58:99:42:d8:1b:3c:a7:5c:b7:d3:74:43:1e:bc:5f:c5: b5:52:7b:d4:c4:03:fd:3f:6c:3b:8d:39:f6:b3:ac:a4:99:2f: fc:4b:2c:12:95:9c:d0:4b:95:ed:b1:8c:af:3d:4b:e6:0a:31: f0:89:93:f3:94:73:25:b3:0b:82:dd:52:e1:6e:f1:fd:19:13: a5:32:da:76:b6:80:4f:58:26:ce:be:20:2e:ed:0f:87:6b:35: 01:3d:49:df:93:bd:1a:75:67:48:37:55:92:c2:4f:89:23:1b: 4c:7b:96:3a:51:0e:65:da:0c:e3:2f:13:6d:80:e8:2a:9d:8a: eb:9e:42:ad:43:48:b7:cb:ea:76:eb:39:79:d3:76:f3:2f:80: 68:39:1f:ad:6c:f5:50:70:e9:5e:c4:d4:45:54:d4:90:2f:ee: 59:dc:7f:39:76:99:46:f2:1d:15:1a:27:8d:26:6e:fc:83:67: 5b:38:6b:9d:60:0f:41:38:48:1f:d4:70:ee:5e:ea:7b:b5:01: 57:68:9d:84:d0:fe:01:28:62:31:bf:d8:ce:a3:c8:9e:5c:e8: fc:e7:fd:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJBRDIyODMzMDQy MTUxODJFNDUwHhcNMjUwNTMxMDM1MzU4WhcNMjUwNjA3MDM1MzU4WjAYMRYwFAYD VQQDEw02ODNhN2Q1Ny0xY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HvDOTfXj4/2kxsvKWNwMzI41QnNdwnDR/W+gqSM3ZFs8xTN6nlZmm4ijO1R Jh4cUH7T6BkW7yi61W/NwO8/aDsgIPGg6iwOhrYDs6L+PCeClx4iY5XaO9d3QImo FZMDNS/r2eOKD7/naiB/pQhBc6MyZBPhZquIOcOqQa+BYLVbKLyGfEC39x6czGLv Eodm5vWviT5G+zjLI2zkdhlqdu0XN+pDHU+D/5HOtudz93MTjvcodnV/qoiDlmNS PQAh/dDI0c56p1SCB/esWKSl9ipy9zo7czwkU2fQSiZtnj3ZlViGVLuQmBT1uAE8 eR+7uNcb0Pw95Nb/sM4jJG9laQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5nNcN3 Q6w1QpfM1gcDvMTCR5dZMB8GA1UdIwQYMBaAFN4JUl9XqVW6by0yrSKDMEIVGC5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUMzMi9DNEVBMUI5RTQ2 RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZicHZMVEt0SW9Nd1FoVVlM a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNnbFNYMWVwVmJwdkxUS3RJb013UWhVWUxrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZi cHZMVEt0SW9Nd1FoVVlMa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRuQXQK80uK75UUS6QQvEsUYvBxfqMHlf1wxBS9v7/s6Ti+MEpfFiZ QtgbPKdct9N0Qx68X8W1UnvUxAP9P2w7jTn2s6ykmS/8SywSlZzQS5XtsYyvPUvm CjHwiZPzlHMlswuC3VLhbvH9GROlMtp2toBPWCbOviAu7Q+HazUBPUnfk70adWdI N1WSwk+JIxtMe5Y6UQ5l2gzjLxNtgOgqnYrrnkKtQ0i3y+p26zl503bzL4BoOR+t bPVQcOlexNRFVNSQL+5Z3H85dplG8h0VGieNJm78g2dbOGudYA9BOEgf1HDuXup7 tQFXaJ2E0P4BKGIxv9jOo8ieXOj85/2W -----END CERTIFICATE-----Generated at Sat May 31 17:20:37 2025 by rpki-client