$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: qdC2wNhZNZiyPqCN6fqy/0ZL+HEoXNcP9Y9cwSuFzGU= Subject key identifier: 12:3E:EC:3D:DC:FE:86:66:DF:B9:CA:A9:EF:00:1B:E0:5D:D1:D4:48 Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 013F Signing time: Sat 31 May 2025 03:58:53 +0000 Manifest this update: Sat 31 May 2025 03:58:52 +0000 Manifest next update: Sat 07 Jun 2025 03:58:52 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: nG+CDbPb3MldaeSVffkP1bcL8P26w/cMeudwEYhQbuU=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: May 31 03:58:52 2025 GMT Not After : Jun 7 03:58:52 2025 GMT Subject: CN=683a7e7c-f5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:27:3f:b4:a8:a9:21:ed:7a:65:ef:ff:47: 31:14:c2:53:6a:5d:35:a4:a8:1d:fe:5f:74:84:e2: df:f2:9d:bc:ee:3f:30:77:22:e1:0d:0f:d9:55:c2: 0c:54:c7:c6:04:40:be:6f:ee:10:cb:9c:bf:b8:71: ff:00:cc:b1:d0:b8:d3:59:4f:df:04:ac:d9:6b:02: ba:47:28:23:24:ff:04:b8:80:33:c0:1e:a1:1c:14: 23:47:60:20:87:3c:ba:37:46:cc:a2:b4:92:cc:01: 1a:38:73:dc:c6:41:5e:25:b3:37:2a:69:08:7b:a1: 97:6d:e4:82:9e:94:bd:a9:ee:85:a9:13:b9:aa:0b: 70:06:96:a3:dc:5b:50:75:ff:44:a3:4d:de:57:36: 18:97:2c:b7:57:ca:e4:cf:96:eb:37:ee:42:f3:b3: 62:30:25:c8:1a:8a:bc:ea:6d:48:07:c9:9a:0d:2c: ca:fd:80:fc:4e:35:7b:ad:bc:5c:4b:39:aa:15:4d: ea:c1:9d:77:76:ef:2a:87:47:ce:42:f3:07:ec:e0: 37:6d:45:00:13:38:1a:e6:74:77:6b:1e:8c:01:dc: 26:14:ba:70:39:28:17:e9:42:69:93:a1:af:af:9c: 06:6c:16:eb:af:27:55:0c:2b:ad:dd:4c:4f:00:85: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3E:EC:3D:DC:FE:86:66:DF:B9:CA:A9:EF:00:1B:E0:5D:D1:D4:48 X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8c:4f:b4:10:69:da:e6:e4:d2:3e:39:57:87:b8:8e:17:37: 1c:48:fa:ba:a0:22:6f:c1:19:af:fa:6f:b3:81:41:89:7c:72: c7:e0:a2:6e:5e:7e:da:0d:20:f7:fa:ba:f4:56:d6:c7:46:7d: 99:e8:93:16:70:e1:46:91:0f:8f:69:5f:ae:85:bb:c5:16:09: 49:e5:d3:20:73:2b:d7:11:80:94:58:98:bf:55:e7:f4:19:e1: 25:6d:a4:d1:03:b4:e3:99:5b:ae:22:5d:7a:ba:71:63:e8:58: bd:cb:35:5d:39:35:31:11:a0:85:8a:d3:c0:15:d2:55:b8:37: 85:ea:79:f7:1e:33:4a:2b:5d:c6:4e:b7:dc:4b:4e:22:00:e8: fc:96:85:55:a8:26:22:42:42:15:a9:b5:c8:51:da:ee:c6:be: ac:d3:7e:3b:2d:82:15:c4:c9:2b:51:8b:66:24:d4:3f:6a:c4: 49:e4:93:e3:91:a9:0a:66:ee:0c:01:49:8c:33:9b:91:aa:02: 52:0e:f7:f9:d8:f5:dc:67:72:f6:aa:36:dc:19:78:a7:b2:b3: c5:e1:6c:ed:07:24:ee:5b:82:d1:00:97:50:85:ab:da:c0:3c: ea:6e:4c:21:35:00:e4:97:57:f1:f4:b2:e6:0e:ac:b9:5c:60: 03:aa:8a:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUwNTMxMDM1ODUyWhcNMjUwNjA3MDM1ODUyWjAYMRYwFAYD VQQDEw02ODNhN2U3Yy1mNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5UnP7SoqSHtemXv/0cxFMJTal01pKgd/l90hOLf8p287j8wdyLhDQ/ZVcIM VMfGBEC+b+4Qy5y/uHH/AMyx0LjTWU/fBKzZawK6RygjJP8EuIAzwB6hHBQjR2Ag hzy6N0bMorSSzAEaOHPcxkFeJbM3KmkIe6GXbeSCnpS9qe6FqRO5qgtwBpaj3FtQ df9Eo03eVzYYlyy3V8rkz5brN+5C87NiMCXIGoq86m1IB8maDSzK/YD8TjV7rbxc SzmqFU3qwZ13du8qh0fOQvMH7OA3bUUAEzga5nR3ax6MAdwmFLpwOSgX6UJpk6Gv r5wGbBbrrydVDCut3UxPAIWBCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI+7D3c /oZm37nKqe8AG+Bd0dRIMB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAjE+0EGna5uTSPjlXh7iOFzccSPq6oCJvwRmv+m+zgUGJfHLH4KJu Xn7aDSD3+rr0VtbHRn2Z6JMWcOFGkQ+PaV+uhbvFFglJ5dMgcyvXEYCUWJi/Vef0 GeElbaTRA7TjmVuuIl16unFj6Fi9yzVdOTUxEaCFitPAFdJVuDeF6nn3HjNKK13G TrfcS04iAOj8loVVqCYiQkIVqbXIUdruxr6s0347LYIVxMkrUYtmJNQ/asRJ5JPj kakKZu4MAUmMM5uRqgJSDvf52PXcZ3L2qjbcGXinsrPF4WztByTuW4LRAJdQhava wDzqbkwhNQDkl1fx9LLmDqy5XGADqopi -----END CERTIFICATE-----Generated at Sat May 31 15:02:52 2025 by rpki-client