$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: n15Fpd0oeCmnnAO97UZIEI/CuiCyLCTgfpnePcIfNwQ= Subject key identifier: 4F:B1:D4:AA:3B:F3:F5:D4:E2:34:9A:01:2E:B3:08:59:92:08:61:61 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 1077 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 18F9 Signing time: Thu 24 Apr 2025 17:22:23 +0000 Manifest this update: Thu 24 Apr 2025 17:22:22 +0000 Manifest next update: Thu 01 May 2025 17:22:22 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: lXGxRlSsLWRoypVsqVYef6Tru8Q1cq0It2icPLxb4sM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4215 (0x1077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Apr 24 17:22:22 2025 GMT Not After : May 1 17:22:22 2025 GMT Subject: CN=680a734e-38be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:07:2b:05:71:8f:da:3d:14:7a:43:77:98: 9a:b4:fc:41:68:c4:3a:b0:be:21:35:36:07:11:8f: bc:34:9f:c4:d0:35:2b:62:43:7b:0d:a1:30:f2:07: 75:40:85:c3:28:fb:12:5e:9a:25:00:4d:b3:ee:85: 29:2a:4d:19:fa:14:33:82:cd:dc:e3:12:ed:b4:09: 63:f4:ae:c5:e1:61:d7:f2:e6:7d:9e:07:b1:d2:a0: c1:33:31:7b:50:c7:7d:bf:fe:91:5f:85:9d:95:19: 38:69:f2:be:d3:84:02:93:be:5c:c4:8a:68:69:84: 3e:95:1b:38:2c:d1:11:ed:db:66:1c:f8:90:ae:8f: 1c:7f:1a:c8:df:13:f2:b1:d4:12:9c:29:a8:89:72: 9e:b3:5e:dd:e6:de:bb:00:29:bf:8c:b5:94:5d:2b: 38:b9:07:4c:a4:f7:6d:b0:0c:a1:df:77:6c:b5:dd: c7:5b:d9:ea:cf:ac:41:eb:e1:62:63:dd:b6:27:2b: a6:fb:53:5f:12:f9:40:f0:2e:85:0a:e1:59:f5:22: 0e:d2:f0:ea:0d:9c:f6:60:e5:ef:e8:d6:4f:fb:be: 91:6b:6d:8d:83:ea:fd:a4:77:cb:21:c5:99:05:d8: 5a:77:5d:c2:4f:21:68:ad:da:46:d9:8f:27:14:d7: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B1:D4:AA:3B:F3:F5:D4:E2:34:9A:01:2E:B3:08:59:92:08:61:61 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d7:3b:78:b1:5f:c8:0b:f9:be:3d:32:da:fc:e8:89:1f:fa: 5e:17:9b:2c:be:2c:7c:6f:ba:36:de:1b:0f:b2:e2:69:72:31: fe:ae:1b:0f:c3:67:ed:77:20:b8:c1:44:01:b8:7e:a5:83:e1: d1:af:2d:e7:10:04:9b:a3:e3:00:9b:ac:2d:a4:87:05:0f:29: bc:71:a0:63:b9:6f:71:8d:2a:65:94:da:cb:b7:32:d3:37:8e: a6:74:ee:f7:a9:35:e9:97:29:6e:e6:8b:c2:bc:df:0d:a0:5f: a0:0f:46:4c:3c:9c:0e:72:a6:57:d3:dd:4b:75:e9:4e:d2:c0: 30:36:dc:cb:2d:80:fd:74:96:0e:1d:51:ed:fb:97:8b:76:21: c0:87:47:2c:f2:c9:25:12:e5:79:ae:9f:e0:46:7e:9e:75:cc: ed:2d:1a:12:57:6d:20:c6:0a:93:0c:1a:ac:9c:81:46:1b:5c: 29:12:42:98:35:2e:f5:37:da:3f:9e:b9:e4:f3:9d:79:26:9c: 4e:8c:71:9b:a4:4b:f7:2e:4a:7d:75:0e:f3:46:94:71:4b:ac: 89:1f:f2:96:ed:dc:97:94:e4:27:e3:3c:99:80:ea:26:f9:14: 9a:41:29:06:58:63:52:70:ef:c8:6c:86:7f:d2:59:20:32:7a: aa:10:86:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjUwNDI0MTcyMjIyWhcNMjUwNTAxMTcyMjIyWjAYMRYwFAYD VQQDEw02ODBhNzM0ZS0zOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8IHKwVxj9o9FHpDd5iatPxBaMQ6sL4hNTYHEY+8NJ/E0DUrYkN7DaEw8gd1 QIXDKPsSXpolAE2z7oUpKk0Z+hQzgs3c4xLttAlj9K7F4WHX8uZ9ngex0qDBMzF7 UMd9v/6RX4WdlRk4afK+04QCk75cxIpoaYQ+lRs4LNER7dtmHPiQro8cfxrI3xPy sdQSnCmoiXKes17d5t67ACm/jLWUXSs4uQdMpPdtsAyh33dstd3HW9nqz6xB6+Fi Y922Jyum+1NfEvlA8C6FCuFZ9SIO0vDqDZz2YOXv6NZP+76Ra22Ng+r9pHfLIcWZ Bdhad13CTyFordpG2Y8nFNfIVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+x1Ko7 8/XU4jSaAS6zCFmSCGFhMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU1zt4sV/IC/m+PTLa/OiJH/peF5ssvix8b7o23hsPsuJpcjH+rhsP w2ftdyC4wUQBuH6lg+HRry3nEASbo+MAm6wtpIcFDym8caBjuW9xjSpllNrLtzLT N46mdO73qTXplylu5ovCvN8NoF+gD0ZMPJwOcqZX091LdelO0sAwNtzLLYD9dJYO HVHt+5eLdiHAh0cs8sklEuV5rp/gRn6edcztLRoSV20gxgqTDBqsnIFGG1wpEkKY NS71N9o/nrnk8515JpxOjHGbpEv3Lkp9dQ7zRpRxS6yJH/KW7dyXlOQn4zyZgOom +RSaQSkGWGNScO/IbIZ/0lkgMnqqEIbu -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:02 2025 by rpki-client