$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: hYyuc2pjGFo5yyEGb2E7GXPQAxoKAmgAs7YXtKDiRME= Subject key identifier: CD:98:29:2F:FA:F9:B9:9B:3B:3A:F7:9C:49:18:A5:D5:7E:F1:49:EC Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 04B0 Signing time: Sat 31 May 2025 00:06:34 +0000 Manifest this update: Sat 31 May 2025 00:06:34 +0000 Manifest next update: Sat 07 Jun 2025 00:06:34 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: RcmuWhqRNpr1SJXRzQo2yDK1vQ3QRYRIvLW1shVIfRs=) 2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: ES0KtplnGhM27Vh/hroAKpFu+jIJhHlyayZgnN5P/Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: May 31 00:06:34 2025 GMT Not After : Jun 7 00:06:34 2025 GMT Subject: CN=683a480a-33c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:98:c5:0d:76:69:95:84:d0:79:d3:4c:4f: 10:fa:57:bc:2d:19:af:7a:15:4e:66:02:2a:6c:4f: 90:45:c6:e1:38:40:da:f7:fa:e7:19:60:0a:ae:64: 5b:e8:2b:54:dc:d9:ef:50:8a:82:85:37:b0:22:b1: 3d:d8:c1:e5:ee:63:f9:8e:4d:d8:14:9b:3c:61:8e: 2b:9a:c4:10:69:7d:78:34:aa:2c:c0:22:8a:d6:f9: de:bf:64:46:bc:9d:d2:4e:35:87:83:72:b0:6d:85: 0c:be:53:dd:5f:29:e0:14:1a:01:aa:de:11:79:62: 39:d1:1a:89:7a:33:d7:80:ae:72:16:c9:91:81:b7: 2d:c7:17:29:3e:21:2c:21:c6:18:2b:42:74:a8:66: 79:2e:c2:63:6b:24:ac:4c:5c:73:33:86:ae:9c:64: cc:76:3c:40:80:d5:df:69:2e:85:53:f0:b5:9a:f2: 17:dd:40:90:1e:98:6e:84:f4:7c:ff:c4:36:52:72: 53:9a:45:f1:8f:93:70:ae:ce:95:20:a8:ee:1b:40: cf:36:04:52:fa:54:48:33:04:fc:1c:c5:48:35:d7: 9d:14:19:41:a7:3f:61:64:75:c7:f5:de:fe:19:b0: dd:1f:b6:3f:ee:d5:e5:7c:3e:fe:32:84:e7:05:25: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:98:29:2F:FA:F9:B9:9B:3B:3A:F7:9C:49:18:A5:D5:7E:F1:49:EC X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:58:22:8e:81:ac:a1:61:07:75:74:72:1c:48:30:32:98:72: 3c:25:0b:72:44:6a:7a:e1:82:e6:52:28:1c:6b:0c:a6:a0:d9: b7:45:9e:3d:ae:3c:da:28:1e:c2:d5:ff:67:19:c8:3f:49:19: d8:49:f8:a6:6c:8d:45:e0:bb:b0:4a:a1:f1:43:1b:d3:03:af: 32:5e:90:9d:ae:f0:df:d2:de:c0:6e:63:a6:b7:ec:bc:45:2e: f5:44:5b:39:d3:dc:07:1c:67:75:a2:b9:53:5f:7a:4e:2a:a3: 5e:f8:21:ac:11:1a:84:be:c1:d8:1c:23:71:ba:e7:ac:c7:0d: 0a:4c:8a:53:38:bf:aa:82:0c:41:cc:a8:c2:db:5c:1c:32:24: f3:f9:a6:1c:1e:21:e5:78:5c:91:ee:e1:40:33:0a:1c:d8:8b: 87:54:d0:3f:60:f4:15:20:55:b5:50:20:b7:a9:35:76:1d:f9: 3d:f8:42:ec:fd:12:00:0d:44:7a:e6:47:32:94:b7:0c:58:b6: a6:5d:39:96:77:73:d9:2b:a9:ce:18:84:1e:a4:9e:3b:48:f8: 4d:5b:70:f2:be:14:71:8b:38:c6:73:93:ce:f6:a2:55:23:2e: 57:5a:41:5a:ab:77:ae:ac:15:66:cc:5e:fc:26:b0:f2:1b:52: a0:8a:09:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjUwNTMxMDAwNjM0WhcNMjUwNjA3MDAwNjM0WjAYMRYwFAYD VQQDEw02ODNhNDgwYS0zM2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xCYxQ12aZWE0HnTTE8Q+le8LRmvehVOZgIqbE+QRcbhOEDa9/rnGWAKrmRb 6CtU3NnvUIqChTewIrE92MHl7mP5jk3YFJs8YY4rmsQQaX14NKoswCKK1vnev2RG vJ3STjWHg3KwbYUMvlPdXyngFBoBqt4ReWI50RqJejPXgK5yFsmRgbctxxcpPiEs IcYYK0J0qGZ5LsJjaySsTFxzM4aunGTMdjxAgNXfaS6FU/C1mvIX3UCQHphuhPR8 /8Q2UnJTmkXxj5Nwrs6VIKjuG0DPNgRS+lRIMwT8HMVINdedFBlBpz9hZHXH9d7+ GbDdH7Y/7tXlfD7+MoTnBSVbSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2YKS/6 +bmbOzr3nEkYpdV+8UnsMB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYWCKOgayhYQd1dHIcSDAymHI8JQtyRGp64YLmUigcawymoNm3RZ49 rjzaKB7C1f9nGcg/SRnYSfimbI1F4LuwSqHxQxvTA68yXpCdrvDf0t7AbmOmt+y8 RS71RFs509wHHGd1orlTX3pOKqNe+CGsERqEvsHYHCNxuuesxw0KTIpTOL+qggxB zKjC21wcMiTz+aYcHiHleFyR7uFAMwoc2IuHVNA/YPQVIFW1UCC3qTV2Hfk9+ELs /RIADUR65kcylLcMWLamXTmWd3PZK6nOGIQepJ47SPhNW3DyvhRxizjGc5PO9qJV Iy5XWkFaq3eurBVmzF78JrDyG1Kgigmi -----END CERTIFICATE-----Generated at Sat May 31 15:40:37 2025 by rpki-client