$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json) Hash identifier: DOurj2EV5IrOw7IJsULUXGhLo1NYhtl7lzgJafUg+AA= Subject key identifier: 47:2E:A1:13:7B:C5:52:E2:6A:75:80:00:0D:9F:70:D0:98:27:B7:85 Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft Manifest number: 0139 Signing time: Fri 25 Apr 2025 03:32:29 +0000 Manifest this update: Fri 25 Apr 2025 03:32:28 +0000 Manifest next update: Fri 02 May 2025 03:32:28 +0000 Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: uD9lhYeSGw/B52iDM6GK+/Ki5vljvWJ1uw9kr4bMRFU=) 2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: 0Dz92F7ct8bVXTADuiwvMmdgfbqvyjCznAHcDYM7e2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Validity Not Before: Apr 25 03:32:28 2025 GMT Not After : May 2 03:32:28 2025 GMT Subject: CN=680b024c-96f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:16:44:b0:d0:80:1b:52:67:40:61:72:f9: 10:4c:75:e7:68:9a:8b:d2:88:19:dd:62:c8:a2:8d: 5e:ac:62:52:2a:ef:aa:a0:65:cc:0a:6b:03:d4:d6: 87:40:10:1c:a7:e5:0b:d8:ce:fe:2e:94:e9:4f:7b: b9:b9:ae:27:a3:8f:56:54:94:14:37:a7:3f:06:60: e5:dd:ac:4f:f5:e5:29:aa:b6:25:29:3c:f0:f9:c0: 82:eb:fc:40:d5:d3:ce:50:a1:18:16:12:e7:58:84: 27:8b:49:34:0a:db:da:96:94:98:4f:f4:d2:ae:61: 8f:f6:9f:58:3f:00:5d:ec:01:40:14:22:68:52:df: fe:3e:bb:9d:63:72:78:57:27:5a:3b:b8:e9:c9:70: 85:61:a9:a2:37:82:a3:67:9e:ba:4d:09:25:0c:c2: 3a:3f:39:c2:31:97:73:03:7d:37:5b:df:1b:cf:ad: 5a:37:3c:81:a0:9e:d4:3e:4c:5a:24:3c:4e:f8:8a: 7d:c0:c1:52:64:47:cd:b4:bc:a8:25:0a:57:a3:54: 25:2d:c7:5f:a4:d3:19:f7:24:ad:b9:92:40:d2:55: 55:63:d4:5d:9d:a1:77:ba:b0:40:6f:47:b2:e2:47: d5:82:0c:81:d2:e2:ad:34:dd:9b:b3:b3:34:cf:07: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2E:A1:13:7B:C5:52:E2:6A:75:80:00:0D:9F:70:D0:98:27:B7:85 X509v3 Authority Key Identifier: keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:fc:ac:89:86:e1:5f:f9:bd:66:35:e4:1f:91:08:c9:42:3d: 5c:d2:eb:e4:1c:a9:64:c4:41:a2:77:c1:dc:3f:5b:42:4d:c2: d8:d6:c4:48:e9:b1:18:92:89:98:e3:d8:dd:bb:0d:1d:79:36: 6b:ef:ec:b5:83:43:63:66:4c:74:54:bf:00:47:97:d0:79:72: ef:ca:eb:e9:6f:4e:65:d4:6e:5a:3e:ba:0a:6e:e1:4a:fb:a4: 05:db:f3:52:48:31:2b:16:28:ae:ee:73:8b:72:94:f4:c0:78: e8:31:58:25:2d:58:7a:9e:de:14:f2:36:31:cd:b2:69:c7:83: 87:28:89:fe:71:19:dd:55:8d:fa:40:b7:e9:1b:7d:12:93:f0: b8:44:45:75:5b:b2:b1:88:68:06:58:a1:c5:cd:e8:3c:49:86: 35:1a:09:f5:6f:b1:ad:5d:07:90:a9:d0:e6:88:43:e3:6f:aa: a5:d1:80:32:46:8e:2e:1f:fe:77:13:57:2b:0d:db:4b:bc:04: 09:98:9d:6a:42:b8:2f:c9:86:b5:e7:6e:a5:73:57:72:ac:50: f2:6f:21:73:0a:18:18:61:8f:2c:b8:25:a0:fb:cb:c5:62:cb: c7:55:cb:28:87:49:c5:5b:24:6b:ce:bf:ef:93:9f:ea:cb:fb: 81:11:b9:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJBRDIyODMzMDQy MTUxODJFNDUwHhcNMjUwNDI1MDMzMjI4WhcNMjUwNTAyMDMzMjI4WjAYMRYwFAYD VQQDEw02ODBiMDI0Yy05NmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT0WRLDQgBtSZ0BhcvkQTHXnaJqL0ogZ3WLIoo1erGJSKu+qoGXMCmsD1NaH QBAcp+UL2M7+LpTpT3u5ua4no49WVJQUN6c/BmDl3axP9eUpqrYlKTzw+cCC6/xA 1dPOUKEYFhLnWIQni0k0CtvalpSYT/TSrmGP9p9YPwBd7AFAFCJoUt/+PrudY3J4 VydaO7jpyXCFYamiN4KjZ566TQklDMI6PznCMZdzA303W98bz61aNzyBoJ7UPkxa JDxO+Ip9wMFSZEfNtLyoJQpXo1QlLcdfpNMZ9yStuZJA0lVVY9RdnaF3urBAb0ey 4kfVggyB0uKtNN2bs7M0zwfyGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcuoRN7 xVLianWAAA2fcNCYJ7eFMB8GA1UdIwQYMBaAFN4JUl9XqVW6by0yrSKDMEIVGC5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUMzMi9DNEVBMUI5RTQ2 RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZicHZMVEt0SW9Nd1FoVVlM a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNnbFNYMWVwVmJwdkxUS3RJb013UWhVWUxrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZi cHZMVEt0SW9Nd1FoVVlMa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw/KyJhuFf+b1mNeQfkQjJQj1c0uvkHKlkxEGid8HcP1tCTcLY1sRI 6bEYkomY49jduw0deTZr7+y1g0NjZkx0VL8AR5fQeXLvyuvpb05l1G5aProKbuFK +6QF2/NSSDErFiiu7nOLcpT0wHjoMVglLVh6nt4U8jYxzbJpx4OHKIn+cRndVY36 QLfpG30Sk/C4REV1W7KxiGgGWKHFzeg8SYY1Ggn1b7GtXQeQqdDmiEPjb6ql0YAy Ro4uH/53E1crDdtLvAQJmJ1qQrgvyYa1526lc1dyrFDybyFzChgYYY8suCWg+8vF YsvHVcsoh0nFWyRrzr/vk5/qy/uBEbme -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:37 2025 by rpki-client