$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: PUMq8KaKFjebUucF8nv9YGy99dX3hjZqW1cmddAHRzE= Subject key identifier: 86:78:30:5F:7B:6B:BB:FB:BC:A1:E3:C1:59:13:24:41:69:2C:AB:65 Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0C64 Signing time: Fri 30 May 2025 18:31:37 +0000 Manifest this update: Fri 30 May 2025 18:31:36 +0000 Manifest next update: Fri 06 Jun 2025 18:31:36 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: qu2MuiTvOwSQ18Siseft3DZ2KzckESgryoEC97KW0W0=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 3at8OHhr3TWPa09hDLUXiFFjg44cS/0xW9KQOVKngqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: May 30 18:31:36 2025 GMT Not After : Jun 6 18:31:36 2025 GMT Subject: CN=6839f989-43a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:8d:3a:66:fc:09:95:82:83:d8:30:70:d5: 4d:9b:96:1d:8a:6e:61:74:47:18:0c:54:83:0a:4d: 9c:05:2c:93:97:3b:13:e5:48:32:12:f2:71:89:6f: d9:0e:5d:d4:e0:cf:34:f4:60:65:5a:d2:f2:0d:e5: b8:47:32:3e:6f:ca:46:ea:a7:53:7a:02:cb:84:c4: b7:31:03:22:8e:42:65:9c:f0:46:b4:3a:54:d2:ad: ff:9c:c3:c3:60:a4:73:17:43:5f:e9:d1:8c:e9:11: ed:e9:6d:ae:23:a0:b4:81:84:99:4b:61:4c:43:e3: 61:20:40:48:19:a7:aa:a5:a1:ca:b3:09:9d:e6:cb: 6b:48:1a:e4:78:04:86:89:a3:82:b2:6b:5e:0a:4c: 5c:98:a6:dd:f9:a9:bc:8c:24:c9:a0:f7:29:59:47: 4f:f6:00:11:e2:63:7f:0a:70:05:ef:94:77:16:00: a1:77:05:05:ca:01:b3:b2:da:79:dc:17:32:e1:d8: 67:cf:b0:6e:4d:a1:0c:7e:af:e6:ef:8a:22:9f:eb: 7b:c2:83:67:69:ed:8c:ee:33:62:f4:6e:cb:4a:9a: d5:1d:1a:a7:bb:26:d5:2e:78:9a:e6:17:5c:42:cd: fb:a4:4b:2b:3e:dd:57:bb:a4:00:76:2c:41:1e:a3: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:78:30:5F:7B:6B:BB:FB:BC:A1:E3:C1:59:13:24:41:69:2C:AB:65 X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ce:8c:c0:30:26:a5:c6:07:67:f2:e7:a0:5b:35:f8:cf:d0: 7e:a9:ce:34:81:63:1b:28:44:45:c4:9e:c1:b4:ed:84:62:d4: 44:bd:e3:2c:41:cf:ad:a8:0b:fc:da:bf:53:d2:93:ae:14:a5: b0:5f:b7:db:f8:1c:4d:4f:c3:c5:27:d1:c9:32:bb:70:86:94: 25:55:4d:96:12:06:d6:57:d0:e3:14:96:93:84:73:22:3c:42: a4:91:07:68:46:16:a7:34:a2:52:6f:47:37:f4:b9:e0:d8:66: 2c:09:91:d7:08:d5:fb:dc:c5:66:1a:5a:d8:39:ed:ff:af:2c: d7:da:e0:48:9b:2b:bc:06:8c:21:42:24:34:db:52:b4:3a:e7: 06:3d:51:ef:e8:fd:bb:2b:42:46:1c:ca:42:d3:48:3c:ed:82: 87:64:03:8a:3d:d4:08:a3:8a:1e:a3:e1:e4:dd:d9:4d:db:2a: 5d:c6:bc:ee:45:24:ae:f3:58:a1:37:63:61:78:e1:74:77:51: ed:a2:75:45:10:48:bd:74:53:8c:c6:7a:dd:aa:43:1d:ca:d0: c7:fd:b0:de:e3:c8:43:e2:35:3a:f5:b6:1c:7a:37:79:72:a6: 5d:d4:b7:99:18:59:6d:03:38:1a:ba:9c:67:f2:43:f8:ab:e5: 5d:70:29:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjUwNTMwMTgzMTM2WhcNMjUwNjA2MTgzMTM2WjAYMRYwFAYD VQQDEw02ODM5Zjk4OS00M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJeNOmb8CZWCg9gwcNVNm5Ydim5hdEcYDFSDCk2cBSyTlzsT5UgyEvJxiW/Z Dl3U4M809GBlWtLyDeW4RzI+b8pG6qdTegLLhMS3MQMijkJlnPBGtDpU0q3/nMPD YKRzF0Nf6dGM6RHt6W2uI6C0gYSZS2FMQ+NhIEBIGaeqpaHKswmd5strSBrkeASG iaOCsmteCkxcmKbd+am8jCTJoPcpWUdP9gAR4mN/CnAF75R3FgChdwUFygGzstp5 3Bcy4dhnz7BuTaEMfq/m74oin+t7woNnae2M7jNi9G7LSprVHRqnuybVLnia5hdc Qs37pEsrPt1Xu6QAdixBHqM5TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ4MF97 a7v7vKHjwVkTJEFpLKtlMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAszozAMCalxgdn8uegWzX4z9B+qc40gWMbKERFxJ7BtO2EYtREveMs Qc+tqAv82r9T0pOuFKWwX7fb+BxNT8PFJ9HJMrtwhpQlVU2WEgbWV9DjFJaThHMi PEKkkQdoRhanNKJSb0c39Lng2GYsCZHXCNX73MVmGlrYOe3/ryzX2uBImyu8Bowh QiQ021K0OucGPVHv6P27K0JGHMpC00g87YKHZAOKPdQIo4oeo+Hk3dlN2ypdxrzu RSSu81ihN2NheOF0d1HtonVFEEi9dFOMxnrdqkMdytDH/bDe48hD4jU69bYcejd5 cqZd1LeZGFltAzgaupxn8kP4q+VdcCmW -----END CERTIFICATE-----Generated at Sat May 31 15:47:00 2025 by rpki-client