$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft File: _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json) Hash identifier: jMItqNnmZzaK+EX0VQvU4rhaTqYB6G4HOcWU2Y0BtQ8= Subject key identifier: 3B:6F:25:EB:D6:A9:8C:7B:1E:CE:76:27:41:AD:8E:78:9A:B8:91:8B Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09 Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft Manifest number: 14 Signing time: Fri 25 Apr 2025 07:01:38 +0000 Manifest this update: Fri 25 Apr 2025 07:01:37 +0000 Manifest next update: Fri 02 May 2025 07:01:37 +0000 Files and hashes: 1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: ugySG0ftDco2kJLSvSkzVF1DHbROa8t6Iqb2Ptyi5HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509 Validity Not Before: Apr 25 07:01:37 2025 GMT Not After : May 2 07:01:37 2025 GMT Subject: CN=680b3351-0091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f4:ae:36:26:5f:ff:3e:2a:63:8c:a5:9f:6f: f5:80:5a:2b:4b:64:2d:52:87:f6:6c:da:5a:1f:b0: 6a:a6:c1:43:4c:38:5d:ae:22:99:04:6f:77:f8:04: 44:25:5f:55:49:fa:ae:b8:f8:99:12:75:28:1f:44: 13:c1:da:b6:b6:b0:fe:1b:17:1f:a7:d5:3e:cb:3d: b1:84:bf:f3:de:e7:d4:0c:67:81:43:ea:11:05:4c: 35:f4:87:8c:f8:df:e9:b2:d2:c6:e4:bf:97:f0:55: b3:a6:d6:70:64:32:47:52:d3:b5:23:b3:c4:5a:d8: 55:55:62:f9:d1:43:f6:fb:93:59:3c:7e:74:39:7d: 20:11:61:9a:73:5c:4c:90:94:76:a7:29:55:7c:9f: 21:e6:57:5c:f3:fa:0a:3d:fb:64:24:5f:37:8a:33: 80:57:37:8d:73:1b:dd:f7:cd:ed:56:03:d8:5e:02: c9:5d:49:ae:74:fe:c6:f1:0c:8f:a8:6b:89:c9:17: 79:9a:42:91:e3:11:39:f4:4e:09:d5:ae:bd:2c:3d: 1a:80:67:55:b8:43:86:06:9f:fa:7f:b1:96:54:0d: 5f:d2:09:13:dc:2f:cd:4e:f7:d6:e9:35:39:a9:4e: cf:f3:4d:17:77:95:01:a5:af:54:8c:4c:26:69:b2: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6F:25:EB:D6:A9:8C:7B:1E:CE:76:27:41:AD:8E:78:9A:B8:91:8B X509v3 Authority Key Identifier: keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:57:59:d9:db:d1:0e:d7:b2:29:1d:6e:bb:8d:31:c2:62:5e: c7:ec:09:88:6a:6e:2a:78:20:07:11:e8:1f:a2:5a:aa:d8:53: aa:78:d9:e2:ae:f4:22:31:bc:f7:80:4b:fb:f5:ef:c6:45:df: 51:86:0f:ed:7e:ae:0c:c8:ba:1e:1e:8a:d3:f7:70:a5:37:f1: af:70:3a:86:a0:47:d4:1f:2a:b5:62:bf:53:cb:08:05:82:a0: 37:9b:93:98:96:80:5e:36:6e:0a:7f:14:c6:47:30:1b:02:ca: 3c:bc:41:2e:61:33:24:c6:61:a6:c2:1a:de:af:57:de:77:1b: 09:80:b0:41:d2:76:da:9c:d3:2f:ca:f2:7a:97:62:db:d8:d4: 85:86:b0:a8:6c:63:f9:67:a8:75:90:e3:58:2b:3c:c7:a6:04: 34:67:b1:97:94:65:e9:f2:83:69:16:3b:d0:1b:73:c8:19:2d: 35:5a:02:81:b4:04:b4:2c:c9:07:d9:cd:bd:8c:b7:3a:22:e1: ef:e0:a2:7a:d7:9c:bb:4a:d7:e0:b4:8c:ba:82:d4:ac:6f:ab: d1:85:8b:1a:d3:2a:a4:01:a0:28:15:1f:e3:2e:aa:88:da:5f: dd:41:29:0d:14:dd:1d:57:f7:ee:0e:53:01:59:4e:0f:ce:d5: da:f0:99:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZGRTExMC8GA1UEBRMoRkY3QzA2ODkyNTE4NjczRUNDRTA0NkI2QTcxN0YzNTND RTUzQzUwOTAeFw0yNTA0MjUwNzAxMzdaFw0yNTA1MDIwNzAxMzdaMBgxFjAUBgNV BAMTDTY4MGIzMzUxLTAwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf9K42Jl//PipjjKWfb/WAWitLZC1Sh/Zs2lofsGqmwUNMOF2uIpkEb3f4BEQl X1VJ+q64+JkSdSgfRBPB2ra2sP4bFx+n1T7LPbGEv/Pe59QMZ4FD6hEFTDX0h4z4 3+my0sbkv5fwVbOm1nBkMkdS07Ujs8Ra2FVVYvnRQ/b7k1k8fnQ5fSARYZpzXEyQ lHanKVV8nyHmV1zz+go9+2QkXzeKM4BXN41zG933ze1WA9heAsldSa50/sbxDI+o a4nJF3maQpHjETn0TgnVrr0sPRqAZ1W4Q4YGn/p/sZZUDV/SCRPcL81O99bpNTmp Ts/zTRd3lQGlr1SMTCZpsnz7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO28l69ap jHseznYnQa2OeJq4kYswHwYDVR0jBBgwFoAU/3wGiSUYZz7M4Ea2pxfzU85TxQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkZFLzkwRkU0NzIwMDgz NzExRjA5REI5MUI3MEM0RjlBRTAyL18zd0dpU1VZWno3TTRFYTJweGZ6VTg1VHhR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzN3R2lTVVlaejdNNEVhMnB4ZnpVODVUeFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkZFLzkwRkU0NzIwMDgzNzExRjA5REI5MUI3MEM0RjlBRTAyL18zd0dpU1VZWno3 TTRFYTJweGZ6VTg1VHhRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABFXWdnb0Q7XsikdbruNMcJiXsfsCYhqbip4IAcR6B+iWqrYU6p42eKu 9CIxvPeAS/v178ZF31GGD+1+rgzIuh4eitP3cKU38a9wOoagR9QfKrViv1PLCAWC oDebk5iWgF42bgp/FMZHMBsCyjy8QS5hMyTGYabCGt6vV953GwmAsEHSdtqc0y/K 8nqXYtvY1IWGsKhsY/lnqHWQ41grPMemBDRnsZeUZenyg2kWO9Abc8gZLTVaAoG0 BLQsyQfZzb2Mtzoi4e/gonrXnLtK1+C0jLqC1Kxvq9GFixrTKqQBoCgVH+Muqoja X91BKQ0U3R1X9+4OUwFZTg/O1drwmUw= -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:45 2025 by rpki-client