$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: ebPHL4lEHzh+uo0BvcfrqFFGMp2++PM1h5awdP1a4TQ= Subject key identifier: 78:D5:A3:44:EE:BE:2B:5B:BF:68:D6:4B:B9:76:AB:19:B9:BE:78:04 Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 0330 Signing time: Sat 31 May 2025 01:18:26 +0000 Manifest this update: Sat 31 May 2025 01:18:25 +0000 Manifest next update: Sat 07 Jun 2025 01:18:25 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: ZbCvuscb073tjaXMo2RPMYAjZXC0oh2cydqTqdThE9Q=) 2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6JpjDff62wDTfk1naPEndRnRsudFZskUVlbVd/hGOl8=) 3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: +vJahyBsj/iwD6Uf+V5LVvoqUetqk1SrdYTgQvG1J8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: May 31 01:18:25 2025 GMT Not After : Jun 7 01:18:25 2025 GMT Subject: CN=683a58e1-244f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:87:5e:78:95:1a:b7:63:9f:a2:22:73:60:4c: d0:c8:bb:40:49:33:45:e2:86:ba:24:ce:7c:84:f2: a5:f4:32:ee:62:94:5f:6c:ab:68:fa:d5:d3:93:89: 54:1e:1f:91:aa:a6:a3:7a:e6:78:c2:e4:a2:fe:65: 87:7f:07:15:04:1c:4f:73:c2:c0:14:7a:94:b7:a8: 51:84:81:55:06:b2:8b:28:af:2a:fd:13:bc:ac:20: 92:b5:d0:7c:b6:e5:d3:f5:af:69:56:8a:e7:70:df: 0e:90:0e:9e:69:aa:0b:69:c7:a8:62:04:1b:e0:47: e5:a3:33:b6:60:7a:1d:4d:b2:43:47:73:9f:ed:3f: ea:c2:54:50:c1:37:c4:d3:f4:4c:ab:7f:3b:3c:ef: fa:9e:86:ea:b0:8f:15:da:e7:c4:18:2b:01:28:1a: a5:4f:e5:45:0f:d4:e7:c9:cf:76:f0:6c:a8:b9:3d: 71:81:c2:49:b1:eb:93:1b:e1:c2:0a:03:d8:24:03: 10:db:1b:2f:0c:bc:72:1c:6f:59:1f:3f:5c:78:be: 82:7c:2b:68:84:a9:bc:98:84:5f:71:3f:d2:65:7e: d9:5a:bf:87:14:72:c5:45:fe:71:e0:1a:14:f4:e9: 66:b7:0f:b1:90:95:0f:da:63:cc:7f:b1:ec:10:1e: d4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D5:A3:44:EE:BE:2B:5B:BF:68:D6:4B:B9:76:AB:19:B9:BE:78:04 X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d6:75:c9:a1:12:fa:8f:fd:ad:e2:4c:eb:92:27:2f:c2:ec: aa:b8:45:72:ab:61:f3:52:f9:e2:28:87:d2:e3:a5:05:63:77: 01:0e:ca:e7:92:d9:00:46:9b:1c:0f:8c:2b:39:06:97:ff:34: 03:1a:26:db:3f:5e:ba:88:c9:bb:ce:24:0b:d1:3d:52:be:81: 02:0c:b3:8f:7e:27:74:34:34:45:41:67:f4:02:39:04:f6:59: 70:64:54:c3:37:38:ef:21:f5:47:58:5c:f2:65:f6:ea:66:7d: ac:87:4d:b0:f3:9f:30:fa:08:69:1a:fa:75:a9:fc:27:1e:9a: 9b:ff:8b:a8:b3:74:16:76:07:36:7e:d5:3c:52:b4:7a:d5:0a: 21:0d:8a:d8:68:a4:fa:b2:ca:bb:dd:4f:63:ed:1f:80:e2:58: 36:bb:0e:15:ee:1f:59:74:fb:9c:56:39:b6:c9:2a:07:ae:6b: 0c:8c:c3:6d:ef:03:a2:16:2e:6e:f1:5a:21:75:43:f0:f0:e8: 99:d4:90:cb:fe:ca:e1:37:cf:83:9e:a0:66:83:ec:46:0f:94: 97:ac:d9:97:76:5b:0d:53:09:3b:91:8d:c8:3a:75:26:5a:c3: b9:3e:6e:64:d3:dd:71:fc:ff:2c:67:8c:28:23:62:b8:59:7b: 0b:5d:1c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjUwNTMxMDExODI1WhcNMjUwNjA3MDExODI1WjAYMRYwFAYD VQQDEw02ODNhNThlMS0yNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44deeJUat2OfoiJzYEzQyLtASTNF4oa6JM58hPKl9DLuYpRfbKto+tXTk4lU Hh+RqqajeuZ4wuSi/mWHfwcVBBxPc8LAFHqUt6hRhIFVBrKLKK8q/RO8rCCStdB8 tuXT9a9pVorncN8OkA6eaaoLaceoYgQb4EflozO2YHodTbJDR3Of7T/qwlRQwTfE 0/RMq387PO/6nobqsI8V2ufEGCsBKBqlT+VFD9Tnyc928GyouT1xgcJJseuTG+HC CgPYJAMQ2xsvDLxyHG9ZHz9ceL6CfCtohKm8mIRfcT/SZX7ZWr+HFHLFRf5x4BoU 9Olmtw+xkJUP2mPMf7HsEB7UgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjVo0Tu vitbv2jWS7l2qxm5vngEMB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP1nXJoRL6j/2t4kzrkicvwuyquEVyq2HzUvniKIfS46UFY3cBDsrn ktkARpscD4wrOQaX/zQDGibbP166iMm7ziQL0T1SvoECDLOPfid0NDRFQWf0AjkE 9llwZFTDNzjvIfVHWFzyZfbqZn2sh02w858w+ghpGvp1qfwnHpqb/4uos3QWdgc2 ftU8UrR61QohDYrYaKT6ssq73U9j7R+A4lg2uw4V7h9ZdPucVjm2ySoHrmsMjMNt 7wOiFi5u8VohdUPw8OiZ1JDL/srhN8+DnqBmg+xGD5SXrNmXdlsNUwk7kY3IOnUm WsO5Pm5k091x/P8sZ4woI2K4WXsLXRzi -----END CERTIFICATE-----Generated at Sat May 31 16:54:57 2025 by rpki-client