$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: bRPsrzZbXiKAN6opVt4RD0Euh0pLirxz7fUutrLb6kE= Subject key identifier: EC:4B:70:DD:C6:E2:3F:8D:62:AD:10:DA:A0:AB:D1:96:B4:FD:63:33 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0339 Signing time: Fri 25 Apr 2025 00:51:24 +0000 Manifest this update: Fri 25 Apr 2025 00:51:24 +0000 Manifest next update: Fri 02 May 2025 00:51:24 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: TjSivzCCid1Stqz8HNlCH9U1Smdyd82Rb/WNbr9/b98=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: cZx0qXYBX+AYL013+FqThkX1+Tb5yDxAcWdH8ZbjfkA=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: byHK1k9Kptni3DE/dYb+CIJQHhmNjQCYM2tQRu5DpPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Apr 25 00:51:24 2025 GMT Not After : May 2 00:51:24 2025 GMT Subject: CN=680adc8c-838c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:e0:94:51:0f:11:8f:56:30:f9:7f:b5:6e: fe:37:9b:3e:99:3a:a9:d6:e3:7e:c1:12:00:7c:37: ac:79:a3:e7:96:41:a4:3c:66:78:fe:02:af:67:6b: f4:18:fe:2c:16:06:ad:bb:cd:ae:fe:59:16:d8:81: b6:37:bc:bd:28:c3:3e:1a:bf:6b:8a:fa:19:35:ef: 94:29:0f:02:33:6f:03:b1:37:30:3e:fa:3c:16:15: 81:8e:e5:b2:cc:15:6c:08:49:9d:50:77:ee:55:f3: c6:71:23:db:99:72:eb:16:db:11:74:c7:b9:91:05: d0:87:44:8c:c3:69:f2:0b:65:f7:e9:b0:b2:a7:a9: ca:d4:17:f2:bc:8d:5e:d9:a9:cb:1a:ec:8a:53:a5: cd:e1:5f:ca:7e:e7:97:c7:8d:ed:26:c2:f8:02:9f: 0d:9c:b4:a9:c1:f0:08:8c:12:0e:47:d9:6a:8f:4b: 7f:d4:e4:3c:73:94:6f:cc:89:66:70:db:51:a0:03: 5d:4e:c0:55:d2:0b:28:b1:90:a4:08:ac:13:10:50: 03:a7:72:14:29:1b:c5:3c:ff:eb:92:b0:ec:f7:69: 40:42:d7:8b:3f:a2:13:7c:0d:58:44:e2:73:a2:51: 8d:ac:8b:2b:f8:95:95:06:d9:0f:ce:0a:a8:d5:4e: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4B:70:DD:C6:E2:3F:8D:62:AD:10:DA:A0:AB:D1:96:B4:FD:63:33 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:22:21:31:95:6c:e8:c2:8c:53:8e:12:b4:c5:3a:62:5c:7a: 92:7a:72:63:d9:37:ff:3f:8e:d5:fa:95:7f:28:dd:46:ba:28: 77:3b:d9:96:4f:72:b0:af:f6:ec:36:ae:18:c2:dc:02:bf:33: e2:c5:b5:ef:36:72:73:06:d0:00:09:6c:33:8a:53:9a:5b:a3: fe:9e:2d:d8:2b:28:55:5d:24:7c:76:50:c3:65:f0:74:4f:57: 74:0d:0a:33:06:8f:67:c1:43:66:56:0e:90:b4:35:62:84:b5: 38:55:32:f5:fc:7e:cc:9b:cf:fa:54:0d:94:65:6a:ac:d1:6d: 7f:f5:89:74:b3:da:bc:32:ba:39:26:07:a7:18:d5:20:fe:23: 65:c2:c4:5e:b4:d4:07:c5:bf:63:04:0e:8e:2a:9b:b7:61:d0: 61:c4:f9:bd:d5:b6:a9:4e:8b:7e:93:b4:3b:5a:f4:76:dd:98: 3e:47:55:bd:9f:6b:12:84:ff:c6:7c:6e:fd:a9:79:f4:45:e7: bb:7d:cf:4f:d1:63:79:28:ea:96:fb:cc:01:a1:36:9b:f6:70: 32:1e:36:bd:2c:37:64:d2:85:4e:01:24:9f:47:e8:be:fe:6e: 18:6d:47:10:8e:f8:8f:7e:6f:37:4e:5c:ca:38:ee:c1:ce:73: 75:a6:3a:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjUwNDI1MDA1MTI0WhcNMjUwNTAyMDA1MTI0WjAYMRYwFAYD VQQDEw02ODBhZGM4Yy04MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6fglFEPEY9WMPl/tW7+N5s+mTqp1uN+wRIAfDeseaPnlkGkPGZ4/gKvZ2v0 GP4sFgatu82u/lkW2IG2N7y9KMM+Gr9rivoZNe+UKQ8CM28DsTcwPvo8FhWBjuWy zBVsCEmdUHfuVfPGcSPbmXLrFtsRdMe5kQXQh0SMw2nyC2X36bCyp6nK1BfyvI1e 2anLGuyKU6XN4V/KfueXx43tJsL4Ap8NnLSpwfAIjBIOR9lqj0t/1OQ8c5RvzIlm cNtRoANdTsBV0gsosZCkCKwTEFADp3IUKRvFPP/rkrDs92lAQteLP6ITfA1YROJz olGNrIsr+JWVBtkPzgqo1U4i/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxLcN3G 4j+NYq0Q2qCr0Za0/WMzMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRIiExlWzowoxTjhK0xTpiXHqSenJj2Tf/P47V+pV/KN1Guih3O9mW T3Kwr/bsNq4YwtwCvzPixbXvNnJzBtAACWwzilOaW6P+ni3YKyhVXSR8dlDDZfB0 T1d0DQozBo9nwUNmVg6QtDVihLU4VTL1/H7Mm8/6VA2UZWqs0W1/9Yl0s9q8Mro5 JgenGNUg/iNlwsRetNQHxb9jBA6OKpu3YdBhxPm91bapTot+k7Q7WvR23Zg+R1W9 n2sShP/GfG79qXn0Ree7fc9P0WN5KOqW+8wBoTab9nAyHja9LDdk0oVOASSfR+i+ /m4YbUcQjviPfm83TlzKOO7BznN1pjoN -----END CERTIFICATE-----Generated at Sat Apr 26 05:25:37 2025 by rpki-client