$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json) Hash identifier: kNaGxAEr/ygci8HQ53CcIhl/XoASsEjaNmb4PVG2XkY= Subject key identifier: EC:EC:E4:31:3F:F3:0F:2B:61:7B:C0:0B:A2:3B:17:E7:0B:15:90:2D Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft Manifest number: 04E2 Signing time: Thu 24 Apr 2025 23:32:07 +0000 Manifest this update: Thu 24 Apr 2025 23:32:07 +0000 Manifest next update: Thu 01 May 2025 23:32:07 +0000 Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: Cp8yVJwPtEb4tpEaDbsxSnprI4YoTVEqcHvEUe0XDCI=) 2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rWRqJhH4y787QjbpEE2hN3YZgixRs8J4MQqNG/pdZs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Validity Not Before: Apr 24 23:32:07 2025 GMT Not After : May 1 23:32:07 2025 GMT Subject: CN=680ac9f7-e8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:73:49:b9:fc:a0:38:21:3b:98:98:87:6c:a5: f1:16:6f:29:ee:93:4d:b5:7a:26:8f:4d:f1:79:00: de:b1:48:74:16:c2:d8:6f:74:21:97:e8:2f:a8:bb: 2f:9c:2c:fb:ad:66:d0:87:eb:d8:d0:1e:fc:f6:e8: 6f:ee:58:8f:68:2e:e8:e4:5f:c4:c2:95:be:84:c1: bc:00:90:4c:62:0a:58:93:1c:4f:e8:9a:d6:10:99: ea:8d:e7:38:03:43:f4:21:19:a5:be:1d:fb:22:73: 17:78:4f:c1:4d:67:82:7f:04:18:4f:13:11:de:e7: 65:66:41:7f:78:49:1d:9c:6e:0a:fc:7f:a1:ea:df: ea:c8:00:8a:3d:5e:18:e5:a2:11:49:64:17:f0:2b: b9:65:e8:15:4f:6f:1b:d2:67:e6:c2:c6:6b:b8:63: 9d:7a:72:58:00:e1:a4:b6:38:33:e5:28:8b:73:41: 74:f8:16:b4:49:1c:f5:44:72:4a:c3:f0:ff:38:c0: a9:54:03:51:89:89:07:1e:9d:f3:9d:19:88:be:0d: 18:d3:c5:71:2f:ac:04:b3:3d:b3:35:79:c1:5b:fe: dc:c3:97:1b:31:e5:86:30:86:70:64:e4:86:ff:cc: dd:e6:2c:ac:01:29:68:97:26:16:3a:97:81:ee:51: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EC:E4:31:3F:F3:0F:2B:61:7B:C0:0B:A2:3B:17:E7:0B:15:90:2D X509v3 Authority Key Identifier: keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:9e:9b:98:70:b4:80:17:d4:eb:ce:61:f7:68:6d:f6:5f:52: e8:c0:b7:27:ef:8c:6a:7b:85:c4:7e:7b:4d:ec:01:52:67:18: 6c:42:c4:1c:bf:ec:e8:8b:6d:e1:d7:60:85:7d:96:d4:b7:6d: 30:01:ed:78:39:a4:45:c1:45:c8:cd:9b:bb:c0:6a:7e:97:db: 4c:7b:5d:3f:e5:5e:6e:87:b3:1e:ce:b6:ea:c6:1b:18:a7:80: 28:d5:97:96:3a:1a:73:c0:fe:dc:b6:79:81:5b:a5:2a:8e:c9: c8:dc:f4:f0:00:26:77:7c:6c:6c:bb:05:50:10:84:fe:8f:07: b5:2a:35:0f:37:46:f5:17:fe:0c:99:73:89:11:2b:fa:7b:6b: 2f:0e:ce:52:9d:c3:bb:66:2e:65:04:62:8a:cd:45:67:6d:28: c1:47:0c:a8:b5:86:6c:54:2a:84:33:9d:28:72:ec:59:13:74: a3:fe:47:75:91:21:ed:f6:5e:88:4a:d4:a5:a8:0d:cd:d9:27: 04:f6:50:02:dd:eb:53:57:8a:98:3e:59:2c:55:52:12:62:2e: 9c:57:c5:dd:e9:a3:1a:33:de:c5:5e:2c:e9:99:3d:33:2f:60: 60:57:58:3e:cc:11:40:68:97:15:5a:29:58:92:82:5c:97:ce: ba:a8:9c:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2 M0QxNkVENUYwHhcNMjUwNDI0MjMzMjA3WhcNMjUwNTAxMjMzMjA3WjAYMRYwFAYD VQQDEw02ODBhYzlmNy1lOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XNJufygOCE7mJiHbKXxFm8p7pNNtXomj03xeQDesUh0FsLYb3Qhl+gvqLsv nCz7rWbQh+vY0B789uhv7liPaC7o5F/EwpW+hMG8AJBMYgpYkxxP6JrWEJnqjec4 A0P0IRmlvh37InMXeE/BTWeCfwQYTxMR3udlZkF/eEkdnG4K/H+h6t/qyACKPV4Y 5aIRSWQX8Cu5ZegVT28b0mfmwsZruGOdenJYAOGktjgz5SiLc0F0+Ba0SRz1RHJK w/D/OMCpVANRiYkHHp3znRmIvg0Y08VxL6wEsz2zNXnBW/7cw5cbMeWGMIZwZOSG /8zd5iysASlolyYWOpeB7lGWgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzs5DE/ 8w8rYXvAC6I7F+cLFZAtMB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjExRS8wNkFGMUZCMjEzMTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xM ZGpyVllaa3JBOUZqMFc3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZnpuYcLSAF9TrzmH3aG32X1LowLcn74xqe4XEfntN7AFSZxhsQsQc v+zoi23h12CFfZbUt20wAe14OaRFwUXIzZu7wGp+l9tMe10/5V5uh7MezrbqxhsY p4Ao1ZeWOhpzwP7ctnmBW6UqjsnI3PTwACZ3fGxsuwVQEIT+jwe1KjUPN0b1F/4M mXOJESv6e2svDs5SncO7Zi5lBGKKzUVnbSjBRwyotYZsVCqEM50ocuxZE3Sj/kd1 kSHt9l6IStSlqA3N2ScE9lAC3etTV4qYPlksVVISYi6cV8Xd6aMaM97FXizpmT0z L2BgV1g+zBFAaJcVWilYkoJcl866qJz1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:16 2025 by rpki-client