$ rpki-client -vvf rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft File: 3qB5KN5ChJYNLNXo50cChCYLMmY.mft (raw, json) Hash identifier: ebwQTmpPE0k1TwG0FGrKGSmagFF/O7ZmINcLj1fyexk= Subject key identifier: F9:A9:D2:50:5F:CD:E5:73:8C:B7:4B:BC:0A:1A:11:FD:93:A9:03:4B Authority key identifier: DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66 Certificate issuer: /CN=A9171AD3/serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266 Certificate serial: 0872 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft Manifest number: 086B Signing time: Thu 24 Apr 2025 20:32:53 +0000 Manifest this update: Thu 24 Apr 2025 20:32:52 +0000 Manifest next update: Thu 01 May 2025 20:32:52 +0000 Files and hashes: 1: 3qB5KN5ChJYNLNXo50cChCYLMmY.crl (hash: BrPIcnoc/TtIV629G5lx3jCMhy1DhzdlL7u1/S0erms=) 2: 186A811414CD11F0AB0B2C0CC4F9AE02.roa (hash: 7eGdphmXtZhUhFX6Ph1uLe9ZqTAdWtlD3BS/u1NYXHQ=) 3: BAA356B66F5611EB8862606AC4F9AE02.roa (hash: hXqRlxWUOgELX8BkSD9GAxJ/+ji0FZnADjlHzze8dU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.crl rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2162 (0x872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171AD3, serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266 Validity Not Before: Apr 24 20:32:52 2025 GMT Not After : May 1 20:32:52 2025 GMT Subject: CN=680a9ff4-881d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:e9:ae:86:1c:45:0e:1d:50:ca:9a:a9:03: 4d:88:17:f4:c4:cf:dc:36:d2:8c:1a:24:53:db:db: 0f:8d:76:ca:1b:36:dd:30:f4:04:56:29:0f:24:3e: 85:e0:75:24:03:cb:e0:50:d0:31:53:a4:d1:09:d1: 8f:7a:68:92:19:3e:0c:04:5b:ba:80:9a:e2:43:dd: 32:38:b8:69:7c:1c:87:8c:78:b8:13:bb:d5:03:3d: 4e:14:4c:09:d1:27:5d:40:64:4a:1a:56:25:5b:ce: a2:76:fe:e6:1d:d3:08:a7:39:59:35:5c:67:2c:c1: 9e:27:01:5a:ac:0c:1b:7c:13:c7:58:d7:81:84:ae: 71:9e:e1:d6:fc:d0:27:2d:7a:d9:ac:21:ce:e1:c5: 56:9d:56:d2:f7:b2:a5:7e:c0:47:6b:1b:c1:23:09: 03:b1:83:5b:38:41:fe:07:9d:c8:7b:06:44:54:08: c5:96:44:4c:2b:94:ce:65:ec:63:8e:8d:9c:15:4e: 1d:1f:77:8f:63:58:70:8b:67:ac:2e:81:fc:32:68: a2:65:b3:b6:51:c8:bd:b7:35:c4:70:b9:ef:b0:a0: d0:b6:04:dc:fb:30:82:2d:1c:a4:07:12:52:93:e7: b3:41:6a:10:f6:5a:50:bf:e6:9e:59:a8:1b:bb:65: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A9:D2:50:5F:CD:E5:73:8C:B7:4B:BC:0A:1A:11:FD:93:A9:03:4B X509v3 Authority Key Identifier: keyid:DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:44:c4:1a:1a:ac:bf:37:8c:aa:18:07:07:41:5a:a5:cf:dc: ca:d0:cc:48:8e:8d:29:85:66:2c:f7:c0:b0:b9:52:47:4f:43: 1c:5e:22:36:89:34:9d:71:eb:ab:c2:78:f7:4b:60:59:67:97: 2e:b7:59:ea:3e:0f:7d:24:00:ef:2a:09:c4:2c:cb:a9:5c:e6: 94:19:f0:46:10:9d:23:ff:51:24:d3:68:d3:5e:14:c9:25:1f: ef:40:bc:f9:4a:b4:23:5f:6a:73:8e:17:cd:5a:fe:2c:e7:98: 58:26:29:7e:21:1c:7a:50:90:cf:15:58:b2:ce:eb:1c:50:be: 8d:85:9a:b8:4f:04:f7:4e:e1:42:d9:15:94:ab:73:a4:f2:60: e3:40:f3:d2:ea:81:8d:64:01:88:b7:c5:5a:c7:1a:37:40:df: 84:22:67:a9:7f:b1:ab:e2:d4:34:d2:5f:9a:ac:bc:4b:a6:28: 19:40:90:e7:67:25:e1:b0:00:39:c0:29:51:15:71:4a:f5:85: 8b:9b:95:be:b0:b2:58:39:c5:5f:28:09:d2:a7:94:1a:8a:d7: d8:b2:ef:b1:26:33:7e:98:49:3f:aa:6e:9f:5c:81:12:44:e5: b8:03:02:e3:3e:76:81:0b:bc:15:6c:e8:8c:bb:0a:05:51:0c: 51:6b:49:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBRDMxMTAvBgNVBAUTKERFQTA3OTI4REU0Mjg0OTYwRDJDRDVFOEU3NDcwMjg0 MjYwQjMyNjYwHhcNMjUwNDI0MjAzMjUyWhcNMjUwNTAxMjAzMjUyWjAYMRYwFAYD VQQDEw02ODBhOWZmNC04ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVnproYcRQ4dUMqaqQNNiBf0xM/cNtKMGiRT29sPjXbKGzbdMPQEVikPJD6F 4HUkA8vgUNAxU6TRCdGPemiSGT4MBFu6gJriQ90yOLhpfByHjHi4E7vVAz1OFEwJ 0SddQGRKGlYlW86idv7mHdMIpzlZNVxnLMGeJwFarAwbfBPHWNeBhK5xnuHW/NAn LXrZrCHO4cVWnVbS97KlfsBHaxvBIwkDsYNbOEH+B53IewZEVAjFlkRMK5TOZexj jo2cFU4dH3ePY1hwi2esLoH8MmiiZbO2Uci9tzXEcLnvsKDQtgTc+zCCLRykBxJS k+ezQWoQ9lpQv+aeWagbu2Xh3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmp0lBf zeVzjLdLvAoaEf2TqQNLMB8GA1UdIwQYMBaAFN6geSjeQoSWDSzV6OdHAoQmCzJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUFEMy8wQkM0Rjg0MEMx QjIxMUVBODMyNzg3NjdDNEY5QUUwMi8zcUI1S041Q2hKWU5MTlhvNTBjQ2hDWUxN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxQjVLTjVDaEpZTkxOWG81MGNDaENZTE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUFEMy8wQkM0Rjg0MEMxQjIxMUVBODMyNzg3NjdDNEY5QUUwMi8zcUI1S041Q2hK WU5MTlhvNTBjQ2hDWUxNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBURMQaGqy/N4yqGAcHQVqlz9zK0MxIjo0phWYs98CwuVJHT0McXiI2 iTSdceurwnj3S2BZZ5cut1nqPg99JADvKgnELMupXOaUGfBGEJ0j/1Ek02jTXhTJ JR/vQLz5SrQjX2pzjhfNWv4s55hYJil+IRx6UJDPFViyzuscUL6NhZq4TwT3TuFC 2RWUq3Ok8mDjQPPS6oGNZAGIt8Vaxxo3QN+EImepf7Gr4tQ00l+arLxLpigZQJDn ZyXhsAA5wClRFXFK9YWLm5W+sLJYOcVfKAnSp5QaitfYsu+xJjN+mEk/qm6fXIES ROW4AwLjPnaBC7wVbOiMuwoFUQxRa0k9 -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:13 2025 by rpki-client