$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: yYxFIFW2gM5SY3lRwlVkwXsnrGCLPPNuxxoWGVVJQ3M= Subject key identifier: 20:80:DB:E9:FB:F9:35:00:EB:89:D5:BF:64:FC:16:9B:AD:0D:E5:19 Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: 69 Signing time: Fri 25 Apr 2025 05:54:55 +0000 Manifest this update: Fri 25 Apr 2025 05:54:54 +0000 Manifest next update: Fri 02 May 2025 05:54:54 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: e0XPxex21tiapDNQhJuWjvRoB2g9NvVWqPsI1Sp2kvg=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Apr 25 05:54:54 2025 GMT Not After : May 2 05:54:54 2025 GMT Subject: CN=680b23ae-65e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:c4:3c:94:cd:1e:09:80:81:4e:e1:5b:78: 4d:04:67:c3:75:b8:ac:4b:76:17:ea:0b:db:f0:5c: 86:1f:09:b6:70:bd:c7:81:b7:b4:f5:4e:63:7a:2e: cc:58:13:79:25:7c:a6:e6:b5:cc:4a:f8:ac:a8:55: 9f:74:c9:06:b2:b7:c9:52:76:d5:57:23:dc:ae:f7: d9:ad:20:9c:4f:11:bd:ce:29:e8:e3:2f:dc:46:b9: d1:01:39:e1:42:45:c3:c7:d2:da:3d:f0:b3:49:87: d2:ea:31:97:00:2a:03:2b:e1:fb:be:00:14:cb:8c: 38:f4:fd:83:67:3e:f8:85:6e:c7:de:87:7f:9d:63: 1b:13:48:2a:0b:f8:d6:0b:99:bf:94:27:5d:4c:fb: 2e:1c:2d:86:b8:be:7f:25:cb:27:02:95:a9:0c:58: d3:92:85:bb:86:8b:3d:e2:09:ed:b7:ea:7e:4f:1b: 51:86:a9:d4:8d:32:eb:12:45:ef:e2:8e:4f:b6:57: 02:c5:31:17:fe:f1:44:c6:7a:ab:d4:84:39:0e:9e: e5:de:c7:64:c7:40:28:0d:e8:9a:ef:bc:6b:33:f2: d7:63:ef:fe:d2:e6:a5:95:cf:2b:4e:c5:66:11:4a: 9f:fa:70:76:d9:94:f3:50:99:7f:d1:66:e9:4f:e4: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:80:DB:E9:FB:F9:35:00:EB:89:D5:BF:64:FC:16:9B:AD:0D:E5:19 X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6e:10:e4:34:63:26:e4:a1:62:68:bf:89:c8:d6:65:1c:b9: 8d:40:42:c1:1e:13:11:fe:1a:36:73:70:29:57:3f:1c:e6:e0: 46:05:9e:e0:23:f2:4c:74:d3:8a:b0:91:e0:ab:ab:86:65:f4: 20:81:6d:3b:21:8e:f8:f8:84:4f:b5:dc:e0:85:fe:dd:07:7c: bb:3c:53:83:4c:04:16:cd:b7:54:fe:59:45:a6:c1:4e:ec:02: b2:d0:d6:14:32:32:33:c8:74:0a:1d:26:eb:f7:51:86:83:92: 4b:1e:8e:94:a0:a3:61:cf:b6:0e:06:55:57:7d:ab:4e:fd:65: 42:44:74:01:d4:19:ce:53:58:4d:e6:e2:e7:e0:7a:39:3b:47: dc:8c:d9:30:bc:d9:8e:c1:91:9b:70:9c:b5:ae:71:4e:3a:29: 94:82:f5:f7:73:c6:e4:ac:dd:55:87:81:8f:2c:96:cd:72:4e: eb:94:d1:ce:b3:37:6a:7c:d8:42:b4:61:ab:4e:5d:8a:12:64: b8:30:91:92:9a:09:30:81:ba:ff:f1:48:56:ff:fb:e0:d5:06: df:37:5b:7d:44:38:cb:2c:82:2e:51:68:4c:d6:e1:ca:b6:32: 5a:77:01:b2:61:50:6f:3a:4d:81:d9:3a:af:a2:3b:f0:59:02: f4:3c:78:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoREQ1NzQ2MEYwQzEyQkUwNTQ2MTNBMkY0Mjk2N0IwN0RB NTY4N0JGMDAeFw0yNTA0MjUwNTU0NTRaFw0yNTA1MDIwNTU0NTRaMBgxFjAUBgNV BAMTDTY4MGIyM2FlLTY1ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDejMQ8lM0eCYCBTuFbeE0EZ8N1uKxLdhfqC9vwXIYfCbZwvceBt7T1TmN6LsxY E3klfKbmtcxK+KyoVZ90yQayt8lSdtVXI9yu99mtIJxPEb3OKejjL9xGudEBOeFC RcPH0to98LNJh9LqMZcAKgMr4fu+ABTLjDj0/YNnPviFbsfeh3+dYxsTSCoL+NYL mb+UJ11M+y4cLYa4vn8lyycClakMWNOShbuGiz3iCe236n5PG1GGqdSNMusSRe/i jk+2VwLFMRf+8UTGeqvUhDkOnuXex2THQCgN6JrvvGsz8tdj7/7S5qWVzytOxWYR Sp/6cHbZlPNQmX/RZulP5FeXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIIDb6fv5 NQDridW/ZPwWm60N5RkwHwYDVR0jBBgwFoAU3VdGDwwSvgVGE6L0KWewfaVoe/Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzVBMTgyQzdDODUy MzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2Vf QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1ZkR0R3d1N2Z1ZHRTZMMEtXZXdmYVZvZV9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzVBMTgyQzdDODUyMzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdW R0U2TDBLV2V3ZmFWb2VfQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxuEOQ0YybkoWJov4nI1mUcuY1AQsEeExH+GjZzcClXPxzm4EYFnuAj 8kx004qwkeCrq4Zl9CCBbTshjvj4hE+13OCF/t0HfLs8U4NMBBbNt1T+WUWmwU7s ArLQ1hQyMjPIdAodJuv3UYaDkksejpSgo2HPtg4GVVd9q079ZUJEdAHUGc5TWE3m 4ufgejk7R9yM2TC82Y7BkZtwnLWucU46KZSC9fdzxuSs3VWHgY8sls1yTuuU0c6z N2p82EK0YatOXYoSZLgwkZKaCTCBuv/xSFb/++DVBt83W31EOMssgi5RaEzW4cq2 Mlp3AbJhUG86TYHZOq+iO/BZAvQ8eAw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:34 2025 by rpki-client