$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: CYPkEysvdrHLQU5jYhATMMYMvCrjHHTIDO3wfIaibVE= Subject key identifier: A4:A3:13:0D:12:6F:7B:0F:0D:E8:1A:30:2D:B9:C5:E4:96:69:06:FB Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 0949 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 0943 Signing time: Fri 30 May 2025 20:58:22 +0000 Manifest this update: Fri 30 May 2025 20:58:22 +0000 Manifest next update: Fri 06 Jun 2025 20:58:22 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: hajb2IGpPSYzDfV+ek98Wz1xkCoue9ME4476LHdqJrI=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: ZywlM5GpBNObiLKXkyaLQIw8TaELpknwXgtbraf7xO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2377 (0x949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: May 30 20:58:22 2025 GMT Not After : Jun 6 20:58:22 2025 GMT Subject: CN=683a1bee-120b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:57:07:60:56:85:53:4c:a8:8a:fe:07:a2: 2d:52:ae:d6:04:a4:a7:44:6d:1a:6d:56:28:39:de: 2c:65:71:f6:38:52:95:62:96:4c:ec:72:ce:de:b6: 84:6a:0f:b4:50:5a:5a:1b:a6:bb:3f:54:8d:ba:42: dc:c1:6a:c1:a1:44:47:f7:99:b9:24:93:fe:cb:c8: bb:45:d3:12:ab:a5:b1:2f:b1:98:1e:cf:b1:c8:3f: 74:87:30:85:47:7d:e9:33:7d:b1:d1:4e:02:9d:3e: e8:95:72:fa:07:b5:a8:9c:a8:bd:14:c4:ee:88:87: 92:86:c5:69:cf:fe:36:e1:1c:f5:20:9b:91:54:74: 1c:7c:83:d4:79:50:54:fe:72:f3:04:6d:5a:1c:d8: 52:ae:8d:85:78:28:d4:7e:7c:48:b6:0c:76:e5:cd: 42:a0:0d:87:33:4d:84:f2:11:dd:f2:92:c0:2c:d1: 55:66:c7:65:44:b4:5c:ab:ed:99:38:79:f7:f3:d7: bb:0c:af:f7:c5:84:6d:1c:d0:e2:9d:7d:b1:32:ad: a3:22:04:e9:43:81:7c:ba:1b:52:74:d7:82:2d:02: d0:fc:38:3d:d4:0c:02:e0:7b:af:96:ef:4a:f9:da: 76:f4:69:98:7c:68:bf:8e:55:87:aa:f4:38:2d:32: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A3:13:0D:12:6F:7B:0F:0D:E8:1A:30:2D:B9:C5:E4:96:69:06:FB X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:45:80:09:6b:fc:33:44:ce:93:b6:4d:2f:f3:ec:97:a8:88: f2:0d:c0:66:d1:c5:24:b2:a4:fc:14:d8:db:ca:ee:29:05:ee: f7:34:94:49:c3:9c:85:19:56:f4:c1:ea:24:fd:29:f4:d6:96: 9a:2d:e4:51:7e:ab:a2:15:94:6a:fd:94:81:d7:80:68:72:6e: 0d:01:f1:0e:4f:fc:23:fe:01:25:0a:9b:4d:82:ae:d0:0f:4a: 13:dd:27:d2:47:7c:30:9c:6a:3d:38:f9:0f:f0:fc:ca:44:55: 54:84:88:35:da:49:b7:20:22:8e:45:26:c2:4e:11:9c:72:ae: bd:3f:69:c0:90:ff:9c:91:6e:fc:02:73:ec:0a:89:2c:a2:5d: 16:33:78:3d:fc:0f:42:6a:e1:0c:03:28:7c:44:ce:7f:f1:6a: 5c:52:d7:29:af:0a:c2:85:f9:2d:a5:f3:9b:9c:1f:e2:d5:31: 4c:cc:f6:6d:26:7b:44:57:ac:ee:26:11:e3:33:28:dd:f5:83: 11:91:10:cb:cf:2a:7f:7c:9d:78:7c:89:2e:6f:8b:02:9e:c3: 51:a4:f4:7b:42:b0:f7:3c:e0:f5:e9:01:42:7e:5e:2b:d9:5d: 66:e3:5a:39:dc:48:2a:d4:b9:1f:41:c6:1f:43:17:b9:38:66: a3:ba:c2:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjUwNTMwMjA1ODIyWhcNMjUwNjA2MjA1ODIyWjAYMRYwFAYD VQQDEw02ODNhMWJlZS0xMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA9XB2BWhVNMqIr+B6ItUq7WBKSnRG0abVYoOd4sZXH2OFKVYpZM7HLO3raE ag+0UFpaG6a7P1SNukLcwWrBoURH95m5JJP+y8i7RdMSq6WxL7GYHs+xyD90hzCF R33pM32x0U4CnT7olXL6B7WonKi9FMTuiIeShsVpz/424Rz1IJuRVHQcfIPUeVBU /nLzBG1aHNhSro2FeCjUfnxItgx25c1CoA2HM02E8hHd8pLALNFVZsdlRLRcq+2Z OHn389e7DK/3xYRtHNDinX2xMq2jIgTpQ4F8uhtSdNeCLQLQ/Dg91AwC4Huvlu9K +dp29GmYfGi/jlWHqvQ4LTJIFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSjEw0S b3sPDegaMC25xeSWaQb7MB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYRYAJa/wzRM6Ttk0v8+yXqIjyDcBm0cUksqT8FNjbyu4pBe73NJRJ w5yFGVb0weok/Sn01paaLeRRfquiFZRq/ZSB14Bocm4NAfEOT/wj/gElCptNgq7Q D0oT3SfSR3wwnGo9OPkP8PzKRFVUhIg12km3ICKORSbCThGccq69P2nAkP+ckW78 AnPsCoksol0WM3g9/A9CauEMAyh8RM5/8WpcUtcprwrChfktpfObnB/i1TFMzPZt JntEV6zuJhHjMyjd9YMRkRDLzyp/fJ14fIkub4sCnsNRpPR7QrD3POD16QFCfl4r 2V1m41o53Egq1LkfQcYfQxe5OGajusJh -----END CERTIFICATE-----Generated at Sat May 31 16:53:40 2025 by rpki-client