$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft File: 3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json) Hash identifier: Te9+AwP2aPVBRpXRSVZcbGDnVQ/rTeGxyVkJOhNhfNg= Subject key identifier: 3A:83:14:6C:F3:71:92:32:34:96:76:E3:8C:C3:74:A9:31:1A:6A:D1 Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 Certificate issuer: /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft Manifest number: 12 Signing time: Sat 31 May 2025 07:35:20 +0000 Manifest this update: Sat 31 May 2025 07:35:19 +0000 Manifest next update: Sat 07 Jun 2025 07:35:19 +0000 Files and hashes: 1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: mOl4tbzY17Bbttx2+wKhE05ZeTYhXCiSifTKcbrbJ/E=) 2: F1940290212911F087425013C4F9AE02.roa (hash: MnHNxat0n45sPIepd+2k7Aeq3t/02+1KvIJP8MEpuv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Validity Not Before: May 31 07:35:19 2025 GMT Not After : Jun 7 07:35:19 2025 GMT Subject: CN=683ab137-5bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8e:c9:e1:c1:9d:50:2f:b9:58:d6:16:2a:ad: cc:6f:ab:b4:f5:a8:62:b7:22:e2:ba:cb:45:8b:72: f6:26:63:6f:eb:60:9c:cb:02:69:ee:55:15:7e:f7: 18:50:f4:00:79:ff:50:3b:b3:de:1d:e8:09:d1:48: fd:c1:5c:08:9d:43:8c:86:9e:76:6f:d5:c2:b0:b1: a9:0c:33:37:b8:96:c1:0b:e1:7f:6e:3f:2e:11:cc: 83:5c:b2:af:33:b4:db:d6:9d:44:13:d1:65:86:58: a2:b5:26:f1:2b:a4:8d:ba:b5:4d:a6:c2:b9:b4:ab: 22:ea:0d:5a:29:be:cf:3b:ff:2e:2c:d7:7f:3b:f0: 6f:58:c0:e6:43:da:6a:f4:e3:3d:cf:68:f9:cc:fe: 09:3f:3b:c0:34:9c:0f:b0:6a:cd:5f:0e:c2:17:cd: e5:5e:c3:30:6b:b8:5c:49:93:96:2f:bb:8b:dd:fc: 3b:53:5f:65:a2:56:d4:a2:8f:77:f4:4c:59:f7:f1: 87:4d:3b:77:75:10:31:59:4f:52:a0:4c:05:28:f8: f0:cb:63:bf:8f:9d:d5:60:10:24:cd:98:e2:1b:c7: 84:e2:a2:0b:44:38:71:69:54:ad:18:3e:84:75:a4: fa:5d:76:a3:e9:43:0f:3d:fe:62:57:40:fe:50:de: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:83:14:6C:F3:71:92:32:34:96:76:E3:8C:C3:74:A9:31:1A:6A:D1 X509v3 Authority Key Identifier: keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:76:76:56:49:c8:d8:a5:19:01:99:68:03:96:02:5c:c6:e6: cb:d4:92:b2:e6:49:23:c8:f9:2e:14:69:a7:ab:ab:75:c0:9d: b1:aa:5d:70:fd:b4:02:31:c3:e4:c9:e4:52:12:27:48:d8:3b: d4:c1:62:a2:a6:6c:3d:f6:25:09:07:89:e2:8f:d0:86:88:93: f3:35:87:40:23:b5:b8:04:b8:8a:d4:93:5e:e6:e3:84:fb:41: 5f:f6:8a:6c:5f:0d:6c:f3:20:32:4c:5e:02:d4:a6:c2:db:13: 91:40:12:cb:50:e2:dc:ea:98:da:1c:fa:ab:31:d2:b4:db:75: fd:0e:cd:31:d7:30:7b:dc:a3:c9:ac:38:44:e7:e0:57:97:88: cb:30:66:4e:9b:b0:e2:4a:ea:b7:07:2e:06:5c:4c:4f:43:89: 3d:d9:7e:38:2c:d6:15:fc:e5:bd:ab:8f:6c:53:0c:c4:7e:7f: 41:d9:d7:d3:5d:23:35:11:92:6f:3a:28:fe:ef:59:5d:42:9a: 8c:37:de:fc:a0:a3:ba:2a:70:fb:55:97:1e:fc:8b:9a:25:10: 76:c6:ed:a0:8c:fc:60:9b:70:a3:01:fa:a8:3f:7e:39:1f:97: 8f:d2:fa:a9:aa:10:59:00:6a:05:57:cc:6d:8f:76:09:b2:a9: 30:85:09:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUEwNTExMC8GA1UEBRMoREYxODczMTFGQTA5Qzc3OUI4QjE1RDk0N0E0NkQ0RjRF RENDNTA1MzAeFw0yNTA1MzEwNzM1MTlaFw0yNTA2MDcwNzM1MTlaMBgxFjAUBgNV BAMTDTY4M2FiMTM3LTViZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhjsnhwZ1QL7lY1hYqrcxvq7T1qGK3IuK6y0WLcvYmY2/rYJzLAmnuVRV+9xhQ 9AB5/1A7s94d6AnRSP3BXAidQ4yGnnZv1cKwsakMMze4lsEL4X9uPy4RzINcsq8z tNvWnUQT0WWGWKK1JvErpI26tU2mwrm0qyLqDVopvs87/y4s13878G9YwOZD2mr0 4z3PaPnM/gk/O8A0nA+was1fDsIXzeVewzBruFxJk5Yvu4vd/DtTX2WiVtSij3f0 TFn38YdNO3d1EDFZT1KgTAUo+PDLY7+PndVgECTNmOIbx4TiogtEOHFpVK0YPoR1 pPpddqPpQw89/mJXQP5Q3imxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOoMUbPNx kjI0lnbjjMN0qTEaatEwHwYDVR0jBBgwFoAU3xhzEfoJx3m4sV2UekbU9O3MUFMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBQTA1LzREQzFEOTI2MjEy OTExRjBBNjZBNDk3MkM0RjlBRTAyLzN4aHpFZm9KeDNtNHNWMlVla2JVOU8zTVVG TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3hoekVmb0p4M200c1YyVWVrYlU5TzNNVUZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB QTA1LzREQzFEOTI2MjEyOTExRjBBNjZBNDk3MkM0RjlBRTAyLzN4aHpFZm9KeDNt NHNWMlVla2JVOU8zTVVGTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAJ2dlZJyNilGQGZaAOWAlzG5svUkrLmSSPI+S4Uaaerq3XAnbGqXXD9 tAIxw+TJ5FISJ0jYO9TBYqKmbD32JQkHieKP0IaIk/M1h0AjtbgEuIrUk17m44T7 QV/2imxfDWzzIDJMXgLUpsLbE5FAEstQ4tzqmNoc+qsx0rTbdf0OzTHXMHvco8ms OETn4FeXiMswZk6bsOJK6rcHLgZcTE9DiT3Zfjgs1hX85b2rj2xTDMR+f0HZ19Nd IzURkm86KP7vWV1Cmow33vygo7oqcPtVlx78i5olEHbG7aCM/GCbcKMB+qg/fjkf l4/S+qmqEFkAagVXzG2PdgmyqTCFCdM= -----END CERTIFICATE-----Generated at Sat May 31 17:41:06 2025 by rpki-client