$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json) Hash identifier: z2UgWTKblT31Hb9mRMWjYIcGTCprs2PAK22EON16Bt4= Subject key identifier: 86:99:E4:E0:C3:1E:4F:C0:64:D4:78:B1:37:7D:82:0B:CD:D8:26:BE Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft Manifest number: 4A Signing time: Sat 31 May 2025 06:58:25 +0000 Manifest this update: Sat 31 May 2025 06:58:24 +0000 Manifest next update: Sat 07 Jun 2025 06:58:24 +0000 Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: BD26wkDUWJTdEfHMx/hKNMABV0Oj6WpNaJKrYrfkSbM=) 2: 5EDC5882D3BB11EF80C3AF80C4F9AE02.roa (hash: PJbzNrEkpbuhikAan3mFGxS/ZJai+blTb1hTbzhhLXc=) 3: 5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa (hash: QSPivy5RJK48HHT2SlrvrCH9DPiTCFPajDEwNKBnEww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: May 31 06:58:24 2025 GMT Not After : Jun 7 06:58:24 2025 GMT Subject: CN=683aa891-b4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:20:e6:e6:c5:fd:d4:29:38:f6:03:46:f3: be:f8:13:90:38:6f:b0:99:35:1f:b5:01:48:09:9e: ca:94:e9:1e:de:75:46:66:67:e6:e3:6e:5d:c4:1a: 5c:57:93:cb:5e:64:b9:0d:e1:2f:84:77:a8:72:f6: 72:9d:57:ef:c5:5a:8c:93:22:d5:a9:52:b2:40:68: af:0e:e1:0d:6c:3a:ea:a5:e4:c6:c7:37:72:68:f7: 7b:b9:ed:e0:b0:4c:00:d9:7c:e5:58:b8:22:fe:bc: d3:17:f5:3a:47:1a:9c:4e:af:a7:e5:05:35:e2:82: 9f:7f:0c:99:22:e7:eb:86:4f:3b:7a:69:8a:13:7a: cb:52:26:2d:6f:cb:81:82:a4:3f:f2:7b:21:59:8e: eb:a8:02:e3:fa:63:0a:ac:f3:75:92:ce:27:f3:f9: 8e:e7:6c:2c:14:45:a9:4f:f2:65:3c:94:c0:28:b3: a4:ed:43:3c:f7:93:4a:4a:e5:ba:53:74:b3:71:bf: 32:f7:02:ea:b1:13:d6:2a:e5:1b:0b:1f:ff:f5:59: 68:ba:00:00:32:c4:6d:68:f0:21:96:0e:ec:24:3f: ed:af:d8:39:a8:ff:c8:1e:07:22:a4:20:c0:d7:7e: 69:87:f1:2f:92:ed:f5:d5:79:a8:16:c8:a7:38:93: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:99:E4:E0:C3:1E:4F:C0:64:D4:78:B1:37:7D:82:0B:CD:D8:26:BE X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7c:b0:38:aa:af:87:20:88:c4:2c:bf:fd:75:8d:7d:91:1f: e5:2f:18:b9:70:8e:eb:61:e0:c6:5b:76:d5:e0:1b:6a:f7:72: 1c:ec:48:4c:d0:02:c3:72:31:70:fb:16:28:e5:55:ee:77:60: 22:f6:99:4f:ae:7c:30:ba:18:bd:1f:da:d7:e8:3a:a4:02:d4: 85:f6:86:8d:eb:a2:40:49:ec:bd:c9:74:3a:1e:a4:4b:06:2a: 80:8e:68:3e:88:e0:67:af:e8:63:a1:f3:0d:33:90:e5:fc:ac: 60:0d:ab:d7:c6:6f:58:c7:c6:22:ab:c3:33:a6:35:df:66:9e: 49:11:3b:5a:ab:fc:d1:95:0d:69:81:8b:14:f7:e0:3a:18:61: 82:44:e1:d8:35:04:6c:fe:73:85:ea:67:c6:fd:03:43:21:ba: 9a:18:95:3e:29:c5:8d:e7:a7:ba:a2:72:3d:73:58:1b:ee:d3: c5:92:00:84:e4:36:9a:ba:6f:55:49:64:a0:f9:32:78:af:bf: d6:6d:ca:e3:07:8c:74:38:d6:9f:56:75:20:6e:56:ad:4a:96: c7:47:5a:da:be:d1:96:62:6b:e4:cd:35:e9:93:26:e1:ff:3b: 10:88:f2:9a:72:8e:4f:d3:6a:39:26:45:6b:6a:4d:c5:2a:70: 99:13:9c:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0VFQjExMC8GA1UEBRMoREVGMzMxN0NCRDE0RDdEQkFBMjdCRkZFM0ZFNUE3QjhB NkVEQ0ZCOTAeFw0yNTA1MzEwNjU4MjRaFw0yNTA2MDcwNjU4MjRaMBgxFjAUBgNV BAMTDTY4M2FhODkxLWI0YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiVCDm5sX91Ck49gNG8774E5A4b7CZNR+1AUgJnsqU6R7edUZmZ+bjbl3EGlxX k8teZLkN4S+Ed6hy9nKdV+/FWoyTItWpUrJAaK8O4Q1sOuql5MbHN3Jo93u57eCw TADZfOVYuCL+vNMX9TpHGpxOr6flBTXigp9/DJki5+uGTzt6aYoTestSJi1vy4GC pD/yeyFZjuuoAuP6Ywqs83WSzifz+Y7nbCwURalP8mU8lMAos6TtQzz3k0pK5bpT dLNxvzL3AuqxE9Yq5RsLH//1WWi6AAAyxG1o8CGWDuwkP+2v2Dmo/8geByKkIMDX fmmH8S+S7fXVeagWyKc4k0vnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhpnk4MMe T8Bk1HixN32CC83YJr4wHwYDVR0jBBgwFoAU3vMxfL0U19uqJ7/+P+WnuKbtz7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RUVCL0Y1N0M5NEIwRDNC QTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3ZNeGZMMFUxOXVxSjdfLVAtV251S2J0ejdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RUVCL0Y1N0M5NEIwRDNCQTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1 cUo3Xy1QLVdudUtidHo3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAF8sDiqr4cgiMQsv/11jX2RH+UvGLlwjuth4MZbdtXgG2r3chzsSEzQ AsNyMXD7FijlVe53YCL2mU+ufDC6GL0f2tfoOqQC1IX2ho3rokBJ7L3JdDoepEsG KoCOaD6I4Gev6GOh8w0zkOX8rGANq9fGb1jHxiKrwzOmNd9mnkkRO1qr/NGVDWmB ixT34DoYYYJE4dg1BGz+c4XqZ8b9A0MhupoYlT4pxY3np7qicj1zWBvu08WSAITk Npq6b1VJZKD5Mnivv9ZtyuMHjHQ41p9WdSBuVq1KlsdHWtq+0ZZia+TNNemTJuH/ OxCI8ppyjk/TajkmRWtqTcUqcJkTnMo= -----END CERTIFICATE-----Generated at Sat May 31 17:20:35 2025 by rpki-client