$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: /Dxkf4htAq8PTbeCGFxbw6feIXQiE4RzPXPFuHUexVs= Subject key identifier: 95:0A:7B:3B:09:06:3E:58:7D:75:A0:10:32:52:8D:0E:03:FB:B5:E1 Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0A3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0A35 Signing time: Fri 30 May 2025 19:56:42 +0000 Manifest this update: Fri 30 May 2025 19:56:41 +0000 Manifest next update: Fri 06 Jun 2025 19:56:41 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: ygoy6w8oYpmw+kybKcSXUkt4gIKZOeDGG5xZBEarI9w=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: VtwEbio1gRB7Ch5LlsoNkh9yhOMrAAqsTjIWAhPZFj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620 (0xa3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: May 30 19:56:41 2025 GMT Not After : Jun 6 19:56:41 2025 GMT Subject: CN=683a0d7a-9e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:48:68:3c:2e:f8:00:d5:c7:6a:11:55:da: fa:02:94:b5:bc:31:ad:af:7a:fa:08:e6:69:05:5b: 4c:3c:8f:39:c7:c7:8b:ef:7b:67:71:95:ef:c5:76: 04:cb:35:32:8a:b6:9a:28:9a:eb:f4:37:df:6e:a9: 2e:e4:cc:83:72:37:9a:ec:da:fe:46:e3:78:3f:ea: b6:c5:3a:dc:6e:c0:c3:b5:8b:d8:9c:b8:ef:40:e8: 8e:67:19:5a:61:a6:86:ad:aa:b0:ef:19:9d:b0:bf: 62:0e:51:10:6f:5d:d6:66:89:b3:2a:0f:e5:17:22: 4d:0f:04:45:d4:a9:64:ce:ba:36:76:83:45:37:32: 57:31:a2:d3:db:f1:49:ea:d0:5e:64:ce:24:17:32: 04:44:95:77:0c:22:0d:6a:fd:6f:4c:84:20:72:88: 52:eb:2a:fb:df:9f:e0:6d:de:37:fc:7d:f4:f5:75: 69:58:4b:8b:92:7a:84:93:4f:4a:43:95:d3:17:a6: b2:d2:17:70:cf:88:3a:d3:9a:78:dd:05:bc:7e:73: 6f:a2:31:3e:b5:ba:90:72:20:51:47:76:c2:c6:8d: d7:56:7b:23:58:34:80:e2:69:e2:3a:83:a5:2a:f0: aa:8f:e1:b3:a0:3b:b9:35:d6:5c:bf:60:a4:71:3b: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0A:7B:3B:09:06:3E:58:7D:75:A0:10:32:52:8D:0E:03:FB:B5:E1 X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:65:a9:07:9f:2f:31:37:48:1d:4e:84:80:12:01:2b:14:cd: 6e:6f:cf:60:0e:b7:46:26:14:85:0c:1b:29:bb:06:f6:8b:56: ff:17:3f:ea:93:22:b1:8d:4f:51:17:f9:6e:8a:21:5c:fd:a9: 2b:a9:60:c0:3b:08:3a:66:a2:88:58:b7:cc:83:c0:a2:d7:a3: 5b:ac:04:c1:0b:a2:66:ca:2f:79:06:75:dc:8c:5f:ac:04:fa: 47:35:b8:f2:0e:64:fc:da:77:84:7b:11:9f:2d:5b:46:04:fb: ea:34:a5:7f:d4:56:57:89:c0:2f:56:c9:9e:d2:1c:75:ad:47: 0c:09:b1:a5:18:79:32:e6:db:17:28:e4:36:c8:83:3a:8e:45: be:fd:59:1a:44:1e:6b:c3:52:a0:a7:66:97:6a:62:c0:d8:1d: 94:d9:95:cf:25:5e:4f:da:38:51:f5:a0:2c:eb:19:2b:5c:4a: d9:0c:0f:92:f6:42:96:5f:84:df:c0:7b:99:c8:ae:66:5b:02: 1d:3f:7b:ee:5f:41:62:62:d5:11:ba:e7:b5:37:9a:74:54:d5: 8c:b6:71:c5:e6:71:23:15:b5:90:bb:5e:3d:34:e2:5e:d0:3c: 03:78:20:ae:50:37:93:15:ce:fa:6d:d1:5d:02:7f:35:18:c4: 58:96:02:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjUwNTMwMTk1NjQxWhcNMjUwNjA2MTk1NjQxWjAYMRYwFAYD VQQDEw02ODNhMGQ3YS05ZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziNIaDwu+ADVx2oRVdr6ApS1vDGtr3r6COZpBVtMPI85x8eL73tncZXvxXYE yzUyiraaKJrr9Dffbqku5MyDcjea7Nr+RuN4P+q2xTrcbsDDtYvYnLjvQOiOZxla YaaGraqw7xmdsL9iDlEQb13WZomzKg/lFyJNDwRF1Klkzro2doNFNzJXMaLT2/FJ 6tBeZM4kFzIERJV3DCINav1vTIQgcohS6yr735/gbd43/H309XVpWEuLknqEk09K Q5XTF6ay0hdwz4g605p43QW8fnNvojE+tbqQciBRR3bCxo3XVnsjWDSA4mniOoOl KvCqj+GzoDu5NdZcv2CkcTutNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUKezsJ Bj5YfXWgEDJSjQ4D+7XhMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcZakHny8xN0gdToSAEgErFM1ub89gDrdGJhSFDBspuwb2i1b/Fz/q kyKxjU9RF/luiiFc/akrqWDAOwg6ZqKIWLfMg8Ci16NbrATBC6Jmyi95BnXcjF+s BPpHNbjyDmT82neEexGfLVtGBPvqNKV/1FZXicAvVsme0hx1rUcMCbGlGHky5tsX KOQ2yIM6jkW+/VkaRB5rw1Kgp2aXamLA2B2U2ZXPJV5P2jhR9aAs6xkrXErZDA+S 9kKWX4TfwHuZyK5mWwIdP3vuX0FiYtURuue1N5p0VNWMtnHF5nEjFbWQu149NOJe 0DwDeCCuUDeTFc76bdFdAn81GMRYlgIK -----END CERTIFICATE-----Generated at Sat May 31 17:32:52 2025 by rpki-client