$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: eOIhUyghEuv35wzoAC8H7eO7MahGSp3fCFWwUG+6SYg= Subject key identifier: FF:E5:FD:0A:26:AD:AD:38:6B:9C:53:6A:42:D7:C4:FB:90:59:B5:BA Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: D5 Signing time: Sat 31 May 2025 05:12:56 +0000 Manifest this update: Sat 31 May 2025 05:12:56 +0000 Manifest next update: Sat 07 Jun 2025 05:12:56 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: YymWF/nZu/6SksKil213nsqGeBzzXnt88IlgQdLu7dM=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: May 31 05:12:56 2025 GMT Not After : Jun 7 05:12:56 2025 GMT Subject: CN=683a8fd8-97e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:51:1f:a4:d3:30:2a:f0:60:9b:f5:f6:93: 16:7d:a1:8e:db:1c:6b:20:74:b7:8f:7b:9f:26:14: d1:50:4c:45:be:d2:43:00:da:65:eb:59:ae:74:f5: b4:c9:55:09:19:dc:97:c0:19:1f:3f:ef:ac:28:c9: a1:32:4d:97:97:12:51:03:9d:d8:3d:1a:26:2c:d7: c0:d7:4e:1f:15:dc:c7:e4:dc:be:6f:b7:3f:44:0c: 54:9e:cc:00:e0:4c:37:30:90:87:4a:c2:28:cb:33: 1c:7e:11:40:4c:ff:c6:7d:71:82:0e:50:3a:8b:b5: f2:6c:15:20:3c:23:4d:16:f8:05:f7:f2:61:78:45: 19:fc:9c:60:f1:8f:8d:91:ed:b6:e5:cd:ac:1e:c9: 8e:24:3c:c8:37:b0:90:7d:4f:7a:eb:03:9a:8a:cc: 5c:99:77:d4:bc:bb:dd:70:27:a3:7b:6f:23:f4:ab: 37:35:ab:e1:35:ce:7e:03:8b:b1:8d:6c:36:ff:cd: de:5f:0e:90:e2:a6:04:1b:09:aa:eb:2e:37:d8:87: 38:f0:7e:c6:23:c3:47:0a:c0:b6:e8:38:e6:6b:b3: e3:1f:3d:eb:e2:26:c6:c7:a0:7e:b6:39:6d:ad:72: 40:91:02:56:eb:99:a2:2f:6d:0f:12:6b:51:a5:5a: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E5:FD:0A:26:AD:AD:38:6B:9C:53:6A:42:D7:C4:FB:90:59:B5:BA X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:03:ec:4a:a6:58:55:93:aa:d2:43:95:2e:d2:bd:46:16:ca: 90:30:be:d3:8d:e9:21:72:6c:1b:8f:62:d4:e0:09:ec:de:c6: af:3f:d4:af:07:95:61:61:cf:69:ed:5b:f2:18:a3:ea:a7:2c: bc:8b:b9:73:24:a1:95:99:ca:de:52:e9:f6:97:96:08:c8:2b: 76:a3:e0:c0:64:d8:48:2d:ae:af:1f:b0:9a:61:53:22:51:62: ca:5b:1b:1b:17:52:e0:f8:b2:a6:3e:df:3a:15:8e:01:d5:be: 32:93:93:e8:85:11:e3:10:5b:b8:45:a6:2e:22:0f:17:15:be: 3e:27:9d:11:63:17:69:c7:43:6b:68:d2:10:3d:b5:6e:36:8b: 34:44:a6:bb:7d:db:a6:64:7a:a8:85:3a:2b:c5:a4:a6:20:94: 2c:f8:9d:12:6c:63:a2:c2:99:34:c1:41:2a:b4:6a:51:be:b3: 99:e3:95:96:08:98:b5:68:fa:00:c5:d8:5b:50:74:46:30:9a: 30:de:28:f7:01:e8:fa:15:67:b0:7b:8e:12:02:25:22:57:c0: 85:9b:dc:fe:b9:11:75:59:54:e8:ab:52:69:b0:eb:38:66:db: 46:4d:59:d7:d9:54:78:3c:83:11:4e:a7:36:77:2f:49:d7:e5: fe:d2:fb:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUwNTMxMDUxMjU2WhcNMjUwNjA3MDUxMjU2WjAYMRYwFAYD VQQDEw02ODNhOGZkOC05N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUVRH6TTMCrwYJv19pMWfaGO2xxrIHS3j3ufJhTRUExFvtJDANpl61mudPW0 yVUJGdyXwBkfP++sKMmhMk2XlxJRA53YPRomLNfA104fFdzH5Ny+b7c/RAxUnswA 4Ew3MJCHSsIoyzMcfhFATP/GfXGCDlA6i7XybBUgPCNNFvgF9/JheEUZ/Jxg8Y+N ke225c2sHsmOJDzIN7CQfU966wOaisxcmXfUvLvdcCeje28j9Ks3NavhNc5+A4ux jWw2/83eXw6Q4qYEGwmq6y432Ic48H7GI8NHCsC26Djma7PjHz3r4ibGx6B+tjlt rXJAkQJW65miL20PEmtRpVrC4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/l/Qom ra04a5xTakLXxPuQWbW6MB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAA+xKplhVk6rSQ5Uu0r1GFsqQML7Tjekhcmwbj2LU4Ans3savP9Sv B5VhYc9p7VvyGKPqpyy8i7lzJKGVmcreUun2l5YIyCt2o+DAZNhILa6vH7CaYVMi UWLKWxsbF1Lg+LKmPt86FY4B1b4yk5PohRHjEFu4RaYuIg8XFb4+J50RYxdpx0Nr aNIQPbVuNos0RKa7fdumZHqohTorxaSmIJQs+J0SbGOiwpk0wUEqtGpRvrOZ45WW CJi1aPoAxdhbUHRGMJow3ij3Aej6FWewe44SAiUiV8CFm9z+uRF1WVToq1JpsOs4 ZttGTVnX2VR4PIMRTqc2dy9J1+X+0vtn -----END CERTIFICATE-----Generated at Sat May 31 17:17:31 2025 by rpki-client