$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: kbRddVhT7Ue3tV9xBVDx5+S2U89Vi77TZ1n2EtCVC/o= Subject key identifier: 1C:02:3A:3E:EF:14:00:9D:64:6B:50:97:E9:6E:D3:54:15:3A:EB:3E Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0915 Signing time: Thu 24 Apr 2025 20:11:38 +0000 Manifest this update: Thu 24 Apr 2025 20:11:38 +0000 Manifest next update: Thu 01 May 2025 20:11:38 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: 26e6U2I1cgOX+k/8FSXvUkbGVaipcGUEH1kciBGSBN4=) 2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: bw4sMGnKDiftNLfRmiZR5SdnMpNduWFQjTQlPL6jZYY=) 3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: FPAklaM71rdV3Mf7CFthJcOnotN1vw1BtN7p9xcPR+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2339 (0x923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Apr 24 20:11:38 2025 GMT Not After : May 1 20:11:38 2025 GMT Subject: CN=680a9afa-f0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:98:99:6e:b6:73:bc:a5:0e:4e:f5:97:75: e7:74:d0:52:33:2a:de:07:69:4f:73:83:85:27:84: 80:e1:f4:4e:56:6b:a8:56:4d:78:4e:a6:7b:bb:0e: f3:ca:af:26:a9:4d:57:41:06:54:7e:64:ef:30:c6: 0b:4b:8c:11:26:32:8a:62:a2:11:a2:1d:19:5b:69: 23:fb:5d:a2:48:3e:4f:62:7f:45:27:a3:cb:ba:97: b2:fb:5d:bd:1b:c6:9f:b2:ed:7e:6d:bf:93:3d:fd: 1a:41:30:6a:be:81:bd:50:9c:34:e8:c1:82:29:3e: 08:be:5e:f8:a6:e0:71:91:78:38:ca:bc:fa:ae:1f: b7:92:c7:e5:7d:2d:d7:5a:ed:d8:4f:55:0a:d7:98: 6e:26:6a:2f:b0:a9:a9:7b:d9:19:1f:a9:88:9c:d3: 9b:49:dc:b9:d1:61:3a:40:5f:fa:a4:9b:3e:60:62: 13:22:80:02:d8:8d:f7:8c:d0:fe:63:ee:79:d1:02: 4f:c8:6a:54:aa:f3:6f:cc:1e:6a:02:67:f9:55:fe: eb:5f:b8:d0:22:96:8c:af:6a:99:3a:76:03:34:b9: f1:c9:27:b7:29:f1:00:55:2a:72:18:45:be:7c:a0: ae:c7:23:1c:b6:46:39:a1:62:f4:15:37:75:ce:55: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:02:3A:3E:EF:14:00:9D:64:6B:50:97:E9:6E:D3:54:15:3A:EB:3E X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:64:85:4e:9b:2c:36:d5:50:53:c6:42:e0:ba:63:94:ad:44: 6f:1f:e8:26:68:6a:30:f1:0a:fc:6c:5e:3b:74:1c:f7:e1:66: 37:4c:4a:7e:2f:be:5a:99:df:e2:de:02:74:02:dc:c5:b8:6c: d7:1c:22:d7:c2:50:ee:18:55:73:32:4c:99:6a:e0:ca:a1:9c: 63:42:0a:f2:02:ba:5f:bf:ca:5e:d8:83:17:00:b4:f9:ee:ea: f2:9d:88:8d:5a:d2:bf:83:da:fa:b0:35:63:aa:5a:58:ba:9b: 84:7d:c6:6f:9a:67:11:94:b5:ad:7e:1f:0c:ca:85:e8:77:7c: 7b:bf:f8:b3:d8:e1:e7:bb:2e:0a:d7:a5:de:0b:77:a3:07:0c: 46:42:aa:e7:8b:96:90:cb:d4:5c:54:3a:0c:5b:ee:0e:b0:88: c7:d7:ae:b6:9a:2e:dd:fe:12:69:1f:b0:1b:e0:fa:1a:4b:9c: de:a5:a0:29:0b:73:cf:2d:f2:27:09:07:fd:ce:2b:db:ec:86: ff:ec:40:8b:c8:a0:64:5c:25:7e:6f:51:94:4c:cd:8c:77:2a: 82:04:51:28:f8:22:56:8d:41:83:64:fd:4a:b1:b0:72:45:41: 1c:97:90:43:7b:f0:98:3d:45:32:ea:16:23:43:94:b6:c3:d9: 8f:72:f5:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwNDI0MjAxMTM4WhcNMjUwNTAxMjAxMTM4WjAYMRYwFAYD VQQDEw02ODBhOWFmYS1mMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3duYmW62c7ylDk71l3XndNBSMyreB2lPc4OFJ4SA4fROVmuoVk14TqZ7uw7z yq8mqU1XQQZUfmTvMMYLS4wRJjKKYqIRoh0ZW2kj+12iSD5PYn9FJ6PLupey+129 G8afsu1+bb+TPf0aQTBqvoG9UJw06MGCKT4Ivl74puBxkXg4yrz6rh+3ksflfS3X Wu3YT1UK15huJmovsKmpe9kZH6mInNObSdy50WE6QF/6pJs+YGITIoAC2I33jND+ Y+550QJPyGpUqvNvzB5qAmf5Vf7rX7jQIpaMr2qZOnYDNLnxySe3KfEAVSpyGEW+ fKCuxyMctkY5oWL0FTd1zlWV0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwCOj7v FACdZGtQl+lu01QVOus+MB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMZIVOmyw21VBTxkLgumOUrURvH+gmaGow8Qr8bF47dBz34WY3TEp+ L75amd/i3gJ0AtzFuGzXHCLXwlDuGFVzMkyZauDKoZxjQgryArpfv8pe2IMXALT5 7urynYiNWtK/g9r6sDVjqlpYupuEfcZvmmcRlLWtfh8MyoXod3x7v/iz2OHnuy4K 16XeC3ejBwxGQqrni5aQy9RcVDoMW+4OsIjH1662mi7d/hJpH7Ab4PoaS5zepaAp C3PPLfInCQf9zivb7Ib/7ECLyKBkXCV+b1GUTM2MdyqCBFEo+CJWjUGDZP1KsbBy RUEcl5BDe/CYPUUy6hYjQ5S2w9mPcvVZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:43 2025 by rpki-client