$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: VEv4RIhtJqHbExU1TVzVG30XWlWJznkqk/kc7XWwO14= Subject key identifier: E6:70:07:BD:2D:C1:6D:9D:9C:85:6C:DB:38:6C:4D:E5:10:36:7D:98 Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 0386 Signing time: Sat 31 May 2025 01:03:46 +0000 Manifest this update: Sat 31 May 2025 01:03:46 +0000 Manifest next update: Sat 07 Jun 2025 01:03:46 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: 1NHRkW6gIgimDyAlPomy9eRjpaXBI33qu/gxCMzi8CU=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vZ/WaADoEuy2hBBHTZfwXR0fuTeB5hZjwEti8AL2NUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: May 31 01:03:46 2025 GMT Not After : Jun 7 01:03:46 2025 GMT Subject: CN=683a5572-4154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:e9:f6:6e:e1:8a:e6:f7:33:d1:67:5b:a0: 2f:25:02:53:6a:18:6e:e9:db:78:0d:54:30:de:47: 17:e5:21:42:cc:ea:3c:6e:bc:01:e4:a1:cf:03:f0: cf:b4:db:7f:58:c2:d8:58:d2:ff:91:cf:31:02:03: bb:52:c6:ef:07:ef:52:73:0d:29:10:89:06:58:c7: 31:3f:a2:67:fe:8b:e8:1e:d5:88:91:c3:6f:dc:44: 1d:f7:c0:10:71:9b:09:9b:5f:ab:d8:6f:24:ae:7e: df:74:72:6e:97:f6:af:0a:33:e3:f0:a7:53:ed:f7: b7:66:bb:5e:2c:a0:97:3b:5e:e6:54:b4:8a:d6:58: 5b:3b:7f:5a:b1:a1:05:4d:b0:af:35:10:c4:45:fc: b3:8c:e5:6a:ec:e6:99:8f:02:4c:75:fc:8b:25:08: 26:7f:2a:ae:70:38:28:a4:d0:d6:44:8f:34:7a:b4: 10:1d:03:7d:1b:e1:f5:e9:c7:20:f9:0e:4d:f7:e9: db:95:e7:60:f8:cf:7f:94:48:15:20:8d:9f:10:80: df:de:93:20:7c:be:10:f8:50:b4:c4:cf:83:4a:a4: 5e:e8:4e:dc:2a:b7:b7:72:e3:cc:59:fc:ea:dd:e4: e7:cd:81:5f:2c:e1:73:c5:be:71:a2:4b:01:ea:1c: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:70:07:BD:2D:C1:6D:9D:9C:85:6C:DB:38:6C:4D:E5:10:36:7D:98 X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a8:8e:a4:8b:06:b3:53:6f:0b:f7:8a:e7:94:59:d8:83:31: 25:a0:2a:64:57:ab:ed:7e:38:d1:f2:28:42:18:a9:94:0e:10: f9:1b:70:79:76:fc:53:5f:bf:cf:28:3e:69:47:f1:4f:4e:b4: 5b:b8:82:cc:ec:9e:7f:81:7c:98:1f:2e:a5:a8:d6:02:10:7b: fe:55:2d:f8:91:e4:e1:b3:4e:55:85:a7:5e:a2:c8:70:69:35: 9d:e2:cb:48:cc:3b:e3:c1:80:df:ef:dd:06:82:3b:28:49:5a: 8c:2b:6c:b9:1c:e8:a5:2d:fc:1e:fa:53:a7:eb:26:62:59:61: 52:f6:8b:48:c2:c9:ce:af:7d:20:3a:3c:58:c0:bb:ad:63:09: 95:93:04:e6:f1:61:4d:9b:14:07:eb:51:a4:59:0e:71:84:60: a7:91:7d:4f:7a:54:e0:6a:ca:88:8e:bb:e6:86:db:b6:94:68: 4d:47:8f:ca:fc:3f:35:fa:b8:88:81:e2:38:42:2d:7d:20:6f: 22:d9:af:f8:19:cb:85:f9:34:50:ac:66:63:55:c7:97:85:46: 1f:25:06:c3:48:8c:c6:63:36:2b:1b:9d:0c:6b:ea:03:94:21: dd:52:a9:7b:c3:c0:9c:ba:bb:65:83:ce:22:eb:07:91:19:01: 3b:40:eb:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjUwNTMxMDEwMzQ2WhcNMjUwNjA3MDEwMzQ2WjAYMRYwFAYD VQQDEw02ODNhNTU3Mi00MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKfp9m7hiub3M9FnW6AvJQJTahhu6dt4DVQw3kcX5SFCzOo8brwB5KHPA/DP tNt/WMLYWNL/kc8xAgO7UsbvB+9Scw0pEIkGWMcxP6Jn/ovoHtWIkcNv3EQd98AQ cZsJm1+r2G8krn7fdHJul/avCjPj8KdT7fe3ZrteLKCXO17mVLSK1lhbO39asaEF TbCvNRDERfyzjOVq7OaZjwJMdfyLJQgmfyqucDgopNDWRI80erQQHQN9G+H16ccg +Q5N9+nbledg+M9/lEgVII2fEIDf3pMgfL4Q+FC0xM+DSqRe6E7cKre3cuPMWfzq 3eTnzYFfLOFzxb5xoksB6hwgPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZwB70t wW2dnIVs2zhsTeUQNn2YMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbqI6kiwazU28L94rnlFnYgzEloCpkV6vtfjjR8ihCGKmUDhD5G3B5 dvxTX7/PKD5pR/FPTrRbuILM7J5/gXyYHy6lqNYCEHv+VS34keThs05Vhadeoshw aTWd4stIzDvjwYDf790GgjsoSVqMK2y5HOilLfwe+lOn6yZiWWFS9otIwsnOr30g OjxYwLutYwmVkwTm8WFNmxQH61GkWQ5xhGCnkX1PelTgasqIjrvmhtu2lGhNR4/K /D81+riIgeI4Qi19IG8i2a/4GcuF+TRQrGZjVceXhUYfJQbDSIzGYzYrG50Ma+oD lCHdUql7w8Ccurtlg84i6weRGQE7QOtq -----END CERTIFICATE-----Generated at Sat May 31 15:42:06 2025 by rpki-client