$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: sXhBeD/ILL4Sw/3k1GcSHM4YoT4IKjN6nphZ5T4v4JI= Subject key identifier: E6:03:BA:F7:C0:1B:B6:8A:C0:BE:42:79:D5:EA:6E:2F:E8:77:17:76 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0167 Signing time: Sat 31 May 2025 03:33:55 +0000 Manifest this update: Sat 31 May 2025 03:33:54 +0000 Manifest next update: Sat 07 Jun 2025 03:33:54 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: c5siakg46RmsGV7HQ4mzNwqqm4PxHO/8uCKQaJ3KQU8=) 2: F287261014C311EE89C2C021C4F9AE02.roa (hash: h2JTkH5cDdzaWjiM7lCs6Ni3E0awofcV4Wu5xaJdDqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: May 31 03:33:54 2025 GMT Not After : Jun 7 03:33:54 2025 GMT Subject: CN=683a78a3-7424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:8a:c0:7e:b9:b9:80:45:02:c5:64:80:f9: 77:d8:c0:9b:0f:ef:3f:d0:12:44:19:38:10:9d:b1: 44:34:09:af:71:e0:2d:45:76:11:20:29:20:f3:d9: 8e:43:61:b2:42:ab:55:e2:d1:b8:a0:46:e5:e5:37: a8:9c:83:3e:05:2f:fd:53:09:16:4a:71:95:3b:4c: 37:66:56:47:b5:be:aa:c6:62:c9:2d:f4:4a:2b:dc: d8:ec:39:03:64:b3:01:85:9c:6d:65:b8:7d:40:9f: f0:11:41:58:0a:b7:9d:98:7c:b8:f9:08:0b:43:61: cb:fb:e0:09:50:38:47:ea:3b:f2:fc:c8:6e:48:b6: 5a:61:ef:b3:e9:5e:ac:a5:96:64:d0:9a:a6:87:e2: df:37:be:41:28:04:b3:7e:e1:1a:9e:9d:88:7b:98: 95:9a:d2:51:8e:3a:f2:33:67:e2:c7:74:c3:43:10: e0:f1:51:68:54:c1:53:81:21:d5:27:18:e7:c3:cc: da:e1:13:96:8b:6b:1d:eb:0a:58:b8:d2:a4:05:ba: 87:1b:14:2a:94:2c:f1:36:e1:2d:ed:c8:ba:9e:c1: 15:8d:39:5a:08:54:7c:59:39:8a:bf:2f:cc:70:f0: ed:2a:4d:fa:05:d1:d0:cd:5d:22:f8:ea:59:b6:7b: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:03:BA:F7:C0:1B:B6:8A:C0:BE:42:79:D5:EA:6E:2F:E8:77:17:76 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:0f:e9:d3:35:b4:9a:dd:32:77:a0:42:86:71:49:09:ac:e5: 91:79:5c:0f:32:c0:45:5c:19:9f:c9:12:28:09:c5:8f:e7:26: 7e:1c:da:fb:f2:a6:a0:d0:e0:85:aa:7e:e5:7c:58:99:30:5f: 2a:38:1e:ec:2e:07:e6:5a:aa:8f:91:5a:89:2d:59:7b:dc:0d: 3e:c7:56:96:2c:a4:9c:1f:24:52:48:9d:f9:d8:bf:51:7f:1e: 19:a3:d5:58:55:42:31:a3:f7:b6:7c:41:62:32:5f:66:cc:46: 69:36:cb:46:97:51:24:74:45:2a:58:a7:16:b6:ad:27:9d:20: 75:46:b0:90:7a:c8:e7:3b:e8:6e:17:30:5a:62:09:f1:79:c2: 85:df:fa:a5:e8:dc:f4:70:6f:f1:13:77:87:82:f3:ff:7d:2d: 81:a8:4d:1f:1a:ac:f2:d7:a7:f8:9d:3a:ee:ae:37:18:7b:b3: 6c:5f:3c:dc:3b:b0:ff:02:20:55:57:88:52:03:c2:e0:02:3b: 1d:b4:d8:20:6f:15:0c:1b:40:8a:61:d4:82:c9:0b:81:be:53: 6f:50:de:12:2d:a9:3d:48:cc:e4:5e:86:55:b6:6e:a5:8a:b3: bc:ff:ef:47:a1:df:a3:5d:b3:4c:9f:8e:8e:9e:02:7f:f3:62: 07:de:7e:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjUwNTMxMDMzMzU0WhcNMjUwNjA3MDMzMzU0WjAYMRYwFAYD VQQDEw02ODNhNzhhMy03NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOuKwH65uYBFAsVkgPl32MCbD+8/0BJEGTgQnbFENAmvceAtRXYRICkg89mO Q2GyQqtV4tG4oEbl5TeonIM+BS/9UwkWSnGVO0w3ZlZHtb6qxmLJLfRKK9zY7DkD ZLMBhZxtZbh9QJ/wEUFYCredmHy4+QgLQ2HL++AJUDhH6jvy/MhuSLZaYe+z6V6s pZZk0Jqmh+LfN75BKASzfuEanp2Ie5iVmtJRjjryM2fix3TDQxDg8VFoVMFTgSHV Jxjnw8za4ROWi2sd6wpYuNKkBbqHGxQqlCzxNuEt7ci6nsEVjTlaCFR8WTmKvy/M cPDtKk36BdHQzV0i+OpZtnt7gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYDuvfA G7aKwL5CedXqbi/odxd2MB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFD+nTNbSa3TJ3oEKGcUkJrOWReVwPMsBFXBmfyRIoCcWP5yZ+HNr7 8qag0OCFqn7lfFiZMF8qOB7sLgfmWqqPkVqJLVl73A0+x1aWLKScHyRSSJ352L9R fx4Zo9VYVUIxo/e2fEFiMl9mzEZpNstGl1EkdEUqWKcWtq0nnSB1RrCQesjnO+hu FzBaYgnxecKF3/ql6Nz0cG/xE3eHgvP/fS2BqE0fGqzy16f4nTrurjcYe7NsXzzc O7D/AiBVV4hSA8LgAjsdtNggbxUMG0CKYdSCyQuBvlNvUN4SLak9SMzkXoZVtm6l irO8/+9Hod+jXbNMn46OngJ/82IH3n59 -----END CERTIFICATE-----Generated at Sat May 31 17:42:35 2025 by rpki-client