$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: hmBy/AyTDHZnB11IECqAQR+85/6cY1uI7JtMRc5X46Q= Subject key identifier: 91:74:6B:32:4D:BB:06:A1:51:6B:ED:CA:1C:01:69:0E:3E:2A:28:73 Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: 59 Signing time: Sat 31 May 2025 06:44:52 +0000 Manifest this update: Sat 31 May 2025 06:44:51 +0000 Manifest next update: Sat 07 Jun 2025 06:44:51 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: 9bjh0KQCv/sTRshjfSXjpKs6o6BJNr+iv58PkUi4Lx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: May 31 06:44:51 2025 GMT Not After : Jun 7 06:44:51 2025 GMT Subject: CN=683aa564-950d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:3e:ac:b0:b5:db:f7:21:00:bc:ad:80:09: c1:ae:aa:70:08:0c:6c:d8:dc:2e:0f:f4:f7:a6:fe: 48:da:cb:f3:9d:05:3d:49:cf:4a:e4:f1:28:da:7d: 7a:80:30:b3:0f:2d:74:59:59:a6:de:69:2d:8e:40: a6:09:17:dd:12:57:50:5e:47:a0:27:e1:a1:b1:a9: 40:90:c4:03:3d:8a:e0:e7:f5:f5:54:39:0b:5f:7d: 21:04:9c:e2:a1:ea:86:9f:ef:48:fe:50:03:f0:5a: bb:98:59:cf:15:a4:9f:1d:3a:c5:88:cd:49:dd:68: 3e:50:22:52:63:f7:64:93:b3:b8:18:0c:f9:02:30: e2:c8:cd:6e:2f:59:d9:d7:c0:2e:6e:2e:bc:94:00: 11:65:5d:57:d0:af:f5:0f:fc:80:b7:50:79:44:37: 98:54:58:64:41:5c:df:5e:f9:df:11:39:9a:a4:6b: 08:b1:05:3b:f3:2f:a5:09:48:e2:52:4d:f2:8c:4d: 1d:11:ee:ff:cd:9d:be:cd:35:bb:02:0c:fb:9a:9e: 5e:e2:9d:1c:a6:62:d0:ba:b2:04:9b:64:3f:e2:52: d9:11:37:e6:56:1a:5e:64:b7:dd:e5:d8:9c:e8:99: 83:20:2c:40:31:8f:70:8f:fb:c6:23:15:88:3a:42: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:74:6B:32:4D:BB:06:A1:51:6B:ED:CA:1C:01:69:0E:3E:2A:28:73 X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:8b:b4:42:97:be:18:9b:0c:fd:90:21:05:59:5b:9c:d7:d3: 29:63:1f:1d:89:60:ca:7e:48:5a:3e:b8:fa:64:54:9a:a6:32: 0c:60:04:66:9f:d9:2b:97:87:71:b0:75:de:b4:94:b6:ae:7c: 60:c9:59:d3:2f:ef:f0:19:d9:f8:d7:aa:4c:6e:25:06:7c:ef: 8f:9a:d8:bf:74:72:cb:c0:a7:ff:36:e4:d2:24:68:de:1f:c5: f4:3e:b1:96:a2:e5:81:d0:1d:8b:3d:99:fb:3f:42:08:3d:94: 28:50:8e:77:49:34:1f:eb:1f:34:61:ba:b2:6d:12:ea:98:df: 7c:62:f1:57:02:32:66:97:d5:ea:05:55:d3:4f:a3:dd:8c:83: d4:18:82:61:a6:0a:01:a5:39:53:48:ef:71:85:a6:08:95:25: 07:fc:3e:1c:55:69:f2:8f:93:f9:8f:8f:63:de:8c:03:4a:94: f4:4e:33:c1:eb:84:88:3c:96:8c:d0:87:13:77:10:84:4e:30: 83:f1:23:ed:95:f0:55:88:34:d0:a5:3e:ad:f2:f7:39:d9:eb: fa:8a:8c:ec:d7:74:ec:60:45:4a:0b:0b:28:58:ba:0d:60:d9: 04:ee:05:61:5c:09:0b:3a:f3:d9:2e:a3:66:52:d4:1a:71:e0: d4:65:dc:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzMyQTExMC8GA1UEBRMoREMxMTMwRDg2MTZCQUJDNkNFMDg4RjVGMjBFNjk3MTlB OTlDMzJCQjAeFw0yNTA1MzEwNjQ0NTFaFw0yNTA2MDcwNjQ0NTFaMBgxFjAUBgNV BAMTDTY4M2FhNTY0LTk1MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrwT6ssLXb9yEAvK2ACcGuqnAIDGzY3C4P9Pem/kjay/OdBT1Jz0rk8SjafXqA MLMPLXRZWabeaS2OQKYJF90SV1BeR6An4aGxqUCQxAM9iuDn9fVUOQtffSEEnOKh 6oaf70j+UAPwWruYWc8VpJ8dOsWIzUndaD5QIlJj92STs7gYDPkCMOLIzW4vWdnX wC5uLryUABFlXVfQr/UP/IC3UHlEN5hUWGRBXN9e+d8ROZqkawixBTvzL6UJSOJS TfKMTR0R7v/Nnb7NNbsCDPuanl7inRymYtC6sgSbZD/iUtkRN+ZWGl5kt93l2Jzo mYMgLEAxj3CP+8YjFYg6Qh6jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkXRrMk27 BqFRa+3KHAFpDj4qKHMwHwYDVR0jBBgwFoAU3BEw2GFrq8bOCI9fIOaXGamcMrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MzJBLzA4OUJDNEU2QjYz MTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01y cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0JFdzJHRnJxOGJPQ0k5ZklPYVhHYW1jTXJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MzJBLzA4OUJDNEU2QjYzMTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThi T0NJOWZJT2FYR2FtY01ycy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFWLtEKXvhibDP2QIQVZW5zX0yljHx2JYMp+SFo+uPpkVJqmMgxgBGaf 2SuXh3Gwdd60lLaufGDJWdMv7/AZ2fjXqkxuJQZ874+a2L90csvAp/825NIkaN4f xfQ+sZai5YHQHYs9mfs/Qgg9lChQjndJNB/rHzRhurJtEuqY33xi8VcCMmaX1eoF VdNPo92Mg9QYgmGmCgGlOVNI73GFpgiVJQf8PhxVafKPk/mPj2PejANKlPROM8Hr hIg8lozQhxN3EIROMIPxI+2V8FWINNClPq3y9znZ6/qKjOzXdOxgRUoLCyhYug1g 2QTuBWFcCQs689kuo2ZS1Bpx4NRl3Ls= -----END CERTIFICATE-----Generated at Sat May 31 14:38:08 2025 by rpki-client