$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json) Hash identifier: 7EeTl0SOFA5aLYlcLxx5BSxEEI5/1mM9pt+1bbMoJkU= Subject key identifier: 78:61:0E:A3:E3:E0:07:09:A5:C0:14:A2:D3:E7:E8:B0:A1:F8:08:AD Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft Manifest number: 07D6 Signing time: Thu 24 Apr 2025 20:54:09 +0000 Manifest this update: Thu 24 Apr 2025 20:54:08 +0000 Manifest next update: Thu 01 May 2025 20:54:08 +0000 Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: Nr9STnHRRpzqSOVz5z0W2JRaDlfaqqPS8bGCT29aWGw=) 2: 187415DE3E6F11EEA236AD17C4F9AE02.roa (hash: oCp4PWI4KP913wPG7fBsv0AeBkh1JffMER8sLvsvQsc=) 3: 39DE80CE3E6F11EEA7233D2CC4F9AE02.roa (hash: 47zwqpP9eAhOCqvzUy9fMqxxS+0iNoZWW8K5tbmry+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Validity Not Before: Apr 24 20:54:08 2025 GMT Not After : May 1 20:54:08 2025 GMT Subject: CN=680aa4f0-9793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:d1:bd:90:44:16:00:31:de:06:6c:63:e8: d1:2d:fd:ef:27:d4:8f:ce:9d:1f:82:1b:aa:45:e3: de:d0:b8:d5:7d:c2:9a:c6:dd:c1:6b:1b:38:9d:49: f9:4d:66:6d:73:fa:15:cb:a7:d1:bf:71:d0:7e:11: f9:66:e8:9c:31:1e:9c:69:cc:c5:d4:56:3a:28:25: ad:d9:a8:ad:f6:c6:f2:3e:64:94:52:8c:51:d5:1f: e4:24:4b:b2:7c:83:08:c6:95:73:a0:0b:71:b1:9c: 72:31:f9:21:4d:54:13:49:34:a4:cb:0a:c0:66:95: e3:db:37:65:df:3d:ba:ed:3f:6c:18:02:de:ca:81: 27:2c:c4:19:e7:e6:99:6d:6c:28:99:96:a7:fd:09: 78:6f:f8:bf:16:59:e4:c6:7d:ad:75:e7:3a:1c:4a: 76:06:cb:39:1b:e4:fd:00:48:42:ea:1b:5b:33:d9: f1:39:6a:fa:da:bb:82:c0:7c:97:eb:98:d7:62:d7: 01:50:7e:a9:13:74:1f:45:19:e0:d7:8b:8a:55:30: b3:25:73:46:43:d8:1d:4a:5c:8a:78:ed:4f:88:d6: b6:d5:21:ef:88:d9:f1:74:3f:b4:95:b8:19:47:18: 11:39:66:ad:fa:27:56:90:6c:62:86:e3:20:ab:4c: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:61:0E:A3:E3:E0:07:09:A5:C0:14:A2:D3:E7:E8:B0:A1:F8:08:AD X509v3 Authority Key Identifier: keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:75:28:50:9d:be:40:94:a4:fc:77:86:ec:50:0b:3a:bc:47: 54:ec:a6:db:74:6c:e7:78:cc:4f:42:91:e9:48:b4:ce:bd:82: 3e:ea:94:03:c4:c2:42:93:34:31:51:4f:d6:d5:e7:d4:63:34: c1:67:b5:4d:0a:65:82:24:15:83:22:8f:a0:c1:69:54:c7:5b: a4:fc:fc:47:3c:0b:a4:15:f2:a8:2d:59:79:43:0a:10:6d:5f: f7:b5:e8:ed:d4:48:51:e5:53:7b:98:e5:46:0b:4f:ed:41:c5: a2:df:74:0b:bc:98:25:f2:e8:56:a8:3e:71:d4:a1:0f:c9:8d: d4:0a:01:49:87:dd:e8:de:b1:6b:97:4a:a7:d1:80:0d:ec:df: d3:0c:17:08:e7:e6:d5:f8:53:46:f0:2b:d9:3a:fb:1e:59:35: 75:ba:72:cf:bc:dd:8a:06:da:6c:1f:6b:22:78:77:56:c1:51: 34:d4:a6:d4:fc:2c:23:7e:52:9f:1c:67:5b:64:bc:dd:29:fc: b9:60:9b:a4:16:a9:67:7e:5d:69:ec:a0:d5:3d:37:c4:fe:3f: a8:ae:60:67:cd:4d:7e:fe:90:a2:e9:4a:19:4d:82:74:ef:37: 42:db:d8:2a:be:98:c9:a1:6e:7a:ac:4e:24:c4:6e:d7:b2:79: e9:64:96:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG RUU0MDZDMTgwHhcNMjUwNDI0MjA1NDA4WhcNMjUwNTAxMjA1NDA4WjAYMRYwFAYD VQQDEw02ODBhYTRmMC05NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5/RvZBEFgAx3gZsY+jRLf3vJ9SPzp0fghuqRePe0LjVfcKaxt3Baxs4nUn5 TWZtc/oVy6fRv3HQfhH5ZuicMR6caczF1FY6KCWt2ait9sbyPmSUUoxR1R/kJEuy fIMIxpVzoAtxsZxyMfkhTVQTSTSkywrAZpXj2zdl3z267T9sGALeyoEnLMQZ5+aZ bWwomZan/Ql4b/i/Flnkxn2tdec6HEp2Bss5G+T9AEhC6htbM9nxOWr62ruCwHyX 65jXYtcBUH6pE3QfRRng14uKVTCzJXNGQ9gdSlyKeO1PiNa21SHviNnxdD+0lbgZ RxgROWat+idWkGxihuMgq0wpGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhhDqPj 4AcJpcAUotPn6LCh+AitMB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE4Qi83RTBDRUVGQUVFQjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2 M2plREVxZFotc3ItNUFiQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOdShQnb5AlKT8d4bsUAs6vEdU7KbbdGzneMxPQpHpSLTOvYI+6pQD xMJCkzQxUU/W1efUYzTBZ7VNCmWCJBWDIo+gwWlUx1uk/PxHPAukFfKoLVl5QwoQ bV/3tejt1EhR5VN7mOVGC0/tQcWi33QLvJgl8uhWqD5x1KEPyY3UCgFJh93o3rFr l0qn0YAN7N/TDBcI5+bV+FNG8CvZOvseWTV1unLPvN2KBtpsH2sieHdWwVE01KbU /CwjflKfHGdbZLzdKfy5YJukFqlnfl1p7KDVPTfE/j+ormBnzU1+/pCi6UoZTYJ0 7zdC29gqvpjJoW56rE4kxG7XsnnpZJbI -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:23 2025 by rpki-client