$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: R6I6z10LUgRqfLehLz7ogq+apsPrfx4n8YdKn8A2T0w= Subject key identifier: 75:87:C8:1D:C2:FB:A5:CE:DB:75:B9:D1:58:DA:69:13:3B:13:B1:0F Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: C4 Signing time: Fri 25 Apr 2025 04:51:25 +0000 Manifest this update: Fri 25 Apr 2025 04:51:24 +0000 Manifest next update: Fri 02 May 2025 04:51:24 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: IbKB0n38NBKWfld137Icq4WwoaohU54xCshGnSFuFJc=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Apr 25 04:51:24 2025 GMT Not After : May 2 04:51:24 2025 GMT Subject: CN=680b14cd-449c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:36:3d:be:75:4a:a8:53:1a:20:1f:d3:f6: 00:4b:03:6d:0b:3b:54:b6:87:2d:29:5f:b7:95:44: 51:6d:af:7b:ce:96:12:80:ef:f2:cb:fe:01:c2:1a: 5d:05:95:ba:f5:77:24:6b:2a:90:79:c2:f7:7a:13: 0d:1b:d7:87:92:b7:e1:d9:6f:69:87:1f:c3:29:c1: 9a:28:71:1e:ee:d9:f5:b0:f5:5c:ea:5c:e8:e9:2d: a1:6d:75:d8:dd:fc:dd:11:ea:56:88:2e:87:e9:f9: 57:33:b7:7a:f2:69:d7:f0:20:20:8c:7c:66:e2:03: 77:7a:d4:5c:fe:71:48:c1:86:80:4d:fa:52:aa:e1: 7f:01:c8:7e:70:01:91:e0:33:72:75:03:37:de:46: 45:8a:a8:4d:2b:78:17:07:54:f1:ee:1a:65:37:ab: f1:4e:1f:27:9f:b0:97:eb:55:6b:20:dc:11:59:9c: 4e:75:f8:60:e3:23:55:8c:29:27:90:9a:ee:7d:d6: 78:93:dc:9d:23:6b:d2:ea:c4:c7:bb:64:00:b1:ec: 1a:a2:c9:4c:2e:df:34:00:58:c5:dc:cd:26:10:22: d7:35:67:49:5c:fb:b6:42:20:47:f7:e2:8a:a0:7e: 8e:6c:8b:bd:81:9e:a7:7e:63:ee:fe:0a:39:4a:28: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:C8:1D:C2:FB:A5:CE:DB:75:B9:D1:58:DA:69:13:3B:13:B1:0F X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e6:1c:01:98:68:2d:a4:2c:9f:9a:9c:ef:3c:e1:63:2c:d6: 37:99:38:ae:33:b7:30:59:07:88:fb:68:c5:62:49:5f:5e:af: da:6e:58:84:ab:36:fe:9b:01:a9:c1:35:c8:15:3f:c2:4c:ba: 4b:8a:26:9a:5b:06:4f:94:ea:9d:37:d9:2d:03:9f:42:1a:77: 28:83:f3:d5:83:90:44:c4:0f:60:82:c9:b0:1b:5f:f5:0d:7b: fc:3a:e4:fe:79:ed:ad:e2:4f:8c:fe:cb:02:d9:96:4b:d1:4f: b1:99:1f:8e:2f:5a:52:02:46:db:df:be:e9:95:37:cd:19:c4: 9b:c8:08:73:18:31:83:c0:2d:6f:5f:d2:8b:f9:ee:a2:9f:e6: 3f:b5:f7:b6:22:0b:1a:e6:55:9c:58:fa:f9:3b:6f:3f:e8:46: 0c:51:04:00:3f:bc:6e:53:38:97:20:11:10:6f:a3:22:ac:6d: 61:5c:e3:32:a0:68:36:d7:a6:c5:a3:b9:f6:b3:03:bd:8f:a9: 8a:a7:74:98:48:d8:2f:bd:af:c8:af:75:2f:83:27:e6:e4:2a: cc:10:b4:8a:45:a4:25:25:61:b6:b8:6f:5e:d3:86:cc:9c:bc: 84:8b:eb:fe:25:fb:e9:07:2c:9a:d0:67:bd:be:20:78:58:9b: 68:f0:e5:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUwNDI1MDQ1MTI0WhcNMjUwNTAyMDQ1MTI0WjAYMRYwFAYD VQQDEw02ODBiMTRjZC00NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAA2Pb51SqhTGiAf0/YASwNtCztUtoctKV+3lURRba97zpYSgO/yy/4Bwhpd BZW69XckayqQecL3ehMNG9eHkrfh2W9phx/DKcGaKHEe7tn1sPVc6lzo6S2hbXXY 3fzdEepWiC6H6flXM7d68mnX8CAgjHxm4gN3etRc/nFIwYaATfpSquF/Ach+cAGR 4DNydQM33kZFiqhNK3gXB1Tx7hplN6vxTh8nn7CX61VrINwRWZxOdfhg4yNVjCkn kJrufdZ4k9ydI2vS6sTHu2QAsewaoslMLt80AFjF3M0mECLXNWdJXPu2QiBH9+KK oH6ObIu9gZ6nfmPu/go5Sii3JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWHyB3C +6XO23W50VjaaRM7E7EPMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO5hwBmGgtpCyfmpzvPOFjLNY3mTiuM7cwWQeI+2jFYklfXq/abliE qzb+mwGpwTXIFT/CTLpLiiaaWwZPlOqdN9ktA59CGncog/PVg5BExA9ggsmwG1/1 DXv8OuT+ee2t4k+M/ssC2ZZL0U+xmR+OL1pSAkbb377plTfNGcSbyAhzGDGDwC1v X9KL+e6in+Y/tfe2Igsa5lWcWPr5O28/6EYMUQQAP7xuUziXIBEQb6MirG1hXOMy oGg216bFo7n2swO9j6mKp3SYSNgvva/Ir3Uvgyfm5CrMELSKRaQlJWG2uG9e04bM nLyEi+v+JfvpByya0Ge9viB4WJto8OUx -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:39 2025 by rpki-client