$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json) Hash identifier: zRhkxE5u/I8cezreb6ZZ2/ttvVXEWVZ+9hSfYFv/IaA= Subject key identifier: F3:0B:5D:FE:65:1F:34:EB:10:82:2E:A1:B9:3D:31:73:03:2A:C1:8D Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Certificate serial: 1B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft Manifest number: 1B3B Signing time: Fri 30 May 2025 16:27:54 +0000 Manifest this update: Fri 30 May 2025 16:27:53 +0000 Manifest next update: Fri 06 Jun 2025 16:27:53 +0000 Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: hKJWZKKpqdJBqlOpCSDr5AJdU6R4F20XuVs73y2PK5A=) 2: D129428E25DF11E7AC03C03EC4F9AE02.roa (hash: 26Hx4AkbPRTYM9L9rQHlirDpC55IRFhPxlOYhEhXmNA=) 3: 20772F82207611E7AD8F8459C4F9AE02.roa (hash: ItkNWWq8nRtDa6uB2Q8iwUXsM5xJRUOh/lTQOL6uROM=) 4: 920126A625F011E7AB40BB69C4F9AE02.roa (hash: VGx79HjfctMAH3951trK9IBgyFBPVt62lhijc0hOVt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7005 (0x1b5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Validity Not Before: May 30 16:27:53 2025 GMT Not After : Jun 6 16:27:53 2025 GMT Subject: CN=6839dc8a-a0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:db:d5:37:f8:8c:58:7e:ed:e4:16:ec:de:f4: e4:e0:fa:59:02:4c:e7:63:c2:1f:65:e4:8a:26:03: 5b:90:f2:34:79:bf:b8:bb:11:94:01:20:b7:af:49: 3b:b1:ee:c8:26:c0:39:be:8d:5d:e1:02:73:7b:af: f7:80:23:b9:69:81:2c:04:c7:3b:d2:af:dc:56:94: 10:bc:c6:fa:b8:bc:b1:de:fa:13:d9:cb:84:e0:76: 06:99:10:f4:fc:f8:cb:c3:cc:9c:c6:b2:8d:cf:84: ff:68:b4:af:8a:9f:ac:59:5f:86:04:de:47:c1:43: 35:79:22:51:d4:b4:0d:d5:2c:60:49:c5:cf:9e:ca: 25:af:94:6d:85:43:7a:ae:3b:b0:ee:12:8f:06:0b: bd:3b:55:93:d6:ea:b9:14:52:56:a7:ea:de:b1:22: b2:9c:a2:02:d9:1e:48:be:f9:64:88:44:ac:30:71: 73:80:de:d2:5d:9d:d2:b0:18:53:cc:91:94:87:02: d7:92:e8:34:25:71:e3:7f:52:f9:af:d8:72:ed:f0: 50:97:00:2b:e0:f7:5d:61:9e:db:94:e3:ac:c9:b9: 8c:96:39:34:21:5d:47:e9:dd:ea:fc:eb:ed:4c:3d: 4c:bc:c7:48:0c:b6:b3:9c:0b:17:71:05:9f:5b:fe: e1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0B:5D:FE:65:1F:34:EB:10:82:2E:A1:B9:3D:31:73:03:2A:C1:8D X509v3 Authority Key Identifier: keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c7:a5:cd:36:fe:ef:33:5b:73:07:72:f0:0c:fa:55:66:62: 57:0e:30:59:b1:8d:33:ab:cb:a0:67:82:8e:8c:6c:83:33:08: a9:91:3f:47:67:71:a1:c9:06:33:35:a7:c8:a8:8c:29:e4:fe: d7:b5:30:86:0f:79:71:49:a9:1b:ac:14:18:b8:38:78:f1:b3: df:ed:69:80:02:3c:62:bf:f2:87:af:4c:ef:c4:70:de:fb:d8: bc:fe:05:46:55:c5:0d:7f:d5:5d:2f:4d:3d:ff:92:34:77:67: 34:50:8f:07:9a:4d:c7:7b:56:2d:ac:f2:62:f9:77:5c:5e:e2: 75:4d:e2:73:9a:54:f5:0d:5a:1f:ca:66:d5:2d:9e:58:a5:4b: 4a:d2:46:e3:f7:70:ea:53:df:70:10:98:7c:a5:67:69:cd:c0: 47:6c:6f:01:31:5a:c3:d2:2c:6f:95:b8:6f:17:4e:a1:a4:8b: ff:d0:e7:39:e8:03:ca:f8:f7:ec:e9:71:4f:af:25:a7:f5:0f: b3:96:ba:3f:e3:f9:eb:ac:30:a9:ef:21:aa:fc:d9:4e:c2:d2: 00:c7:6f:b4:a5:97:b9:cc:5f:4e:41:cc:33:a4:5a:46:e9:ab: a7:7c:63:dd:fa:f7:e6:00:3d:50:c7:ce:47:11:bd:d7:63:ce: fc:8e:1b:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0RTExMTAvBgNVBAUTKERDMUIzOUI1NEY2MDg5MUFDNzc4QTkzMTZENzFCMEJF ODAwNjM5NkUwHhcNMjUwNTMwMTYyNzUzWhcNMjUwNjA2MTYyNzUzWjAYMRYwFAYD VQQDEw02ODM5ZGM4YS1hMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8dvVN/iMWH7t5Bbs3vTk4PpZAkznY8IfZeSKJgNbkPI0eb+4uxGUASC3r0k7 se7IJsA5vo1d4QJze6/3gCO5aYEsBMc70q/cVpQQvMb6uLyx3voT2cuE4HYGmRD0 /PjLw8ycxrKNz4T/aLSvip+sWV+GBN5HwUM1eSJR1LQN1SxgScXPnsolr5RthUN6 rjuw7hKPBgu9O1WT1uq5FFJWp+resSKynKIC2R5IvvlkiESsMHFzgN7SXZ3SsBhT zJGUhwLXkug0JXHjf1L5r9hy7fBQlwAr4PddYZ7blOOsybmMljk0IV1H6d3q/Ovt TD1MvMdIDLaznAsXcQWfW/7hUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMLXf5l HzTrEIIuobk9MXMDKsGNMB8GA1UdIwQYMBaAFNwbObVPYIkax3ipMW1xsL6ABjlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzRFMS8yMDA0RjE0NDE2 MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lSckhlS2t4YlhHd3ZvQUdP VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCczV0VTlnaVJySGVLa3hiWEd3dm9BR09XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzRFMS8yMDA0RjE0NDE2MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lS ckhlS2t4YlhHd3ZvQUdPVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOx6XNNv7vM1tzB3LwDPpVZmJXDjBZsY0zq8ugZ4KOjGyDMwipkT9H Z3GhyQYzNafIqIwp5P7XtTCGD3lxSakbrBQYuDh48bPf7WmAAjxiv/KHr0zvxHDe +9i8/gVGVcUNf9VdL009/5I0d2c0UI8Hmk3He1YtrPJi+XdcXuJ1TeJzmlT1DVof ymbVLZ5YpUtK0kbj93DqU99wEJh8pWdpzcBHbG8BMVrD0ixvlbhvF06hpIv/0Oc5 6APK+Pfs6XFPryWn9Q+zlro/4/nrrDCp7yGq/NlOwtIAx2+0pZe5zF9OQcwzpFpG 6aunfGPd+vfmAD1Qx85HEb3XY878jhuE -----END CERTIFICATE-----Generated at Sat May 31 16:46:57 2025 by rpki-client