$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: LL3fc4NlRfcxuSX6S8ATLOynnBf077+zX/YcBqaUUeg= Subject key identifier: 38:B6:E3:AA:D9:71:77:9C:69:46:4F:75:F5:15:DC:00:20:CA:C0:C3 Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: FF Signing time: Sat 31 May 2025 04:47:56 +0000 Manifest this update: Sat 31 May 2025 04:47:55 +0000 Manifest next update: Sat 07 Jun 2025 04:47:55 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: YZoPXv9aKjzD/0yC0Uz5AntxB8+xpuIc/FVh2bySLSU=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: May 31 04:47:55 2025 GMT Not After : Jun 7 04:47:55 2025 GMT Subject: CN=683a89fb-9331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:5c:d7:56:1c:76:1b:2d:c5:d2:f0:81:5e: a6:00:52:e3:75:e8:09:88:85:89:bf:6c:55:6f:43: 40:df:81:f4:10:8f:73:54:86:01:ee:07:2e:4e:da: 61:18:28:fd:63:16:9e:af:cd:68:d0:d7:4a:5a:c2: ca:8c:74:69:8b:9b:88:2d:f4:6e:32:bd:0e:ac:02: 18:a5:5e:c9:d2:c0:f6:20:43:fd:5f:77:3e:32:95: 60:0f:99:fd:23:0e:f6:1c:3c:9b:3b:73:fe:63:f7: 55:6b:84:a4:d3:d2:82:07:2d:3e:36:ca:94:44:82: 40:e0:5c:ea:c1:b9:78:e5:c9:b1:1e:ad:6e:f7:56: 0b:6a:c7:b6:77:f8:a7:c2:94:9b:d2:1c:92:1c:f0: 2d:7d:e3:5b:73:d1:1d:60:1f:36:69:0c:21:50:aa: bd:5a:de:76:93:a1:4b:7b:85:89:ab:19:54:ae:67: 24:cb:53:c5:73:0a:b2:6a:c8:54:a3:a3:4d:a9:17: 11:76:0e:11:02:30:4c:e8:6a:4b:d1:cb:6a:ae:58: e4:f7:09:53:f9:6f:db:5a:49:af:6c:1d:c6:6e:eb: 32:1c:44:71:e6:fa:08:53:1e:3c:27:00:a7:0a:c0: f4:54:36:2d:ed:2f:53:61:5b:78:a3:10:71:59:0b: e1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B6:E3:AA:D9:71:77:9C:69:46:4F:75:F5:15:DC:00:20:CA:C0:C3 X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c2:a1:ce:7e:06:ed:e0:60:c4:e0:12:fd:78:ec:43:45:11: f2:32:8d:f9:70:97:00:4e:71:9c:17:47:da:ec:aa:aa:35:81: e0:fe:24:3e:fb:4d:b4:d2:9b:35:ef:df:66:b8:94:a4:e5:ec: e4:b8:75:42:4d:0b:d2:c5:63:e6:40:a8:13:ac:23:c9:11:d5: 9e:2c:61:f4:31:be:a9:ad:ec:ad:56:0e:0a:ee:34:6a:de:7a: da:4a:3d:7b:5f:d2:d1:2a:51:d5:30:15:af:e8:dc:50:bd:50: 25:2c:74:2a:a3:ae:4c:a4:18:3e:bf:48:1d:58:b4:99:a5:fe: 78:6f:1a:e7:70:a3:6a:e6:0e:7e:69:26:fa:5e:d5:a1:91:3f: b0:1e:cd:f7:d0:9e:37:a7:4d:a3:5d:0e:25:29:9e:26:6b:d3: 3e:a2:4a:aa:19:80:22:7a:0e:80:ce:f9:72:53:39:4b:be:8c: 66:46:d1:60:7c:80:ac:d4:a8:b0:71:ea:9c:59:34:ca:8d:58: 2f:5a:b4:c2:3a:fe:a5:f8:ef:ee:af:f2:f9:21:a9:9c:c6:d4: de:9b:1b:9a:b5:bc:a1:1e:b1:8c:06:cd:f5:e3:64:f3:29:86: 3e:a7:51:6c:1a:40:df:ab:02:41:9c:28:39:18:af:55:56:00: 1e:c7:3f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUwNTMxMDQ0NzU1WhcNMjUwNjA3MDQ0NzU1WjAYMRYwFAYD VQQDEw02ODNhODlmYi05MzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+hc11YcdhstxdLwgV6mAFLjdegJiIWJv2xVb0NA34H0EI9zVIYB7gcuTtph GCj9Yxaer81o0NdKWsLKjHRpi5uILfRuMr0OrAIYpV7J0sD2IEP9X3c+MpVgD5n9 Iw72HDybO3P+Y/dVa4Sk09KCBy0+NsqURIJA4Fzqwbl45cmxHq1u91YLase2d/in wpSb0hySHPAtfeNbc9EdYB82aQwhUKq9Wt52k6FLe4WJqxlUrmcky1PFcwqyashU o6NNqRcRdg4RAjBM6GpL0ctqrljk9wlT+W/bWkmvbB3GbusyHERx5voIUx48JwCn CsD0VDYt7S9TYVt4oxBxWQvhiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDi246rZ cXecaUZPdfUV3AAgysDDMB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5wqHOfgbt4GDE4BL9eOxDRRHyMo35cJcATnGcF0fa7KqqNYHg/iQ+ +0200ps1799muJSk5ezkuHVCTQvSxWPmQKgTrCPJEdWeLGH0Mb6preytVg4K7jRq 3nraSj17X9LRKlHVMBWv6NxQvVAlLHQqo65MpBg+v0gdWLSZpf54bxrncKNq5g5+ aSb6XtWhkT+wHs330J43p02jXQ4lKZ4ma9M+okqqGYAieg6AzvlyUzlLvoxmRtFg fICs1KiwceqcWTTKjVgvWrTCOv6l+O/ur/L5IamcxtTemxuatbyhHrGMBs3142Tz KYY+p1FsGkDfqwJBnCg5GK9VVgAexz/0 -----END CERTIFICATE-----Generated at Sat May 31 16:25:49 2025 by rpki-client