$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: uF5xM4zHRKpsDHL9xW1zDncmuE5pVBcbht0wpGtavts= Subject key identifier: 3D:46:4C:DF:98:AC:B8:D0:32:03:C2:30:97:6A:5E:8E:97:29:85:F3 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 034D Signing time: Fri 25 Apr 2025 00:47:34 +0000 Manifest this update: Fri 25 Apr 2025 00:47:34 +0000 Manifest next update: Fri 02 May 2025 00:47:34 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: UH2/1RGM0qA+8VrcoGDcC8qE9pAEDVIbTTUJHXdscBk=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Apr 25 00:47:34 2025 GMT Not After : May 2 00:47:34 2025 GMT Subject: CN=680adba6-7435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:7d:8a:25:b9:08:64:41:31:3d:bc:ce:c2: dd:78:64:95:68:44:40:f1:c1:47:a8:f3:34:64:de: 3f:60:6c:e8:72:dc:06:f3:79:b8:97:04:2b:ad:6e: 55:ee:8e:ec:d2:5c:6d:d9:8d:6e:bf:bd:76:6a:4c: bf:76:f4:ee:8c:94:ad:74:4f:80:d2:74:34:ee:59: 6a:08:41:ce:86:00:66:a6:c2:22:fe:37:22:86:11: 2f:03:9c:3a:be:9e:61:d3:3c:35:80:90:e7:6d:1c: 6a:db:1b:4b:e1:b6:a3:e7:b0:53:a0:b2:5c:e5:fb: 2d:24:6a:72:90:33:fe:c3:1f:73:b0:46:81:2f:90: f0:47:8a:f9:1a:46:6d:d7:58:c7:d0:65:b2:de:0f: 14:b8:ff:d7:f3:f7:84:38:00:c1:f6:ac:19:32:53: 5b:73:97:33:8b:9a:ef:f2:02:ad:db:86:d8:57:7b: a7:a8:48:42:44:f4:c1:2e:32:6f:48:aa:9b:37:17: 1d:9e:0f:25:d3:16:1e:7f:f2:c6:50:fe:4d:73:3a: 7e:8a:8f:ba:60:0b:ec:06:82:c4:ae:5d:7a:75:3e: 87:5d:8b:c6:cb:c5:fb:71:7b:3b:c7:07:ea:8f:23: f0:4a:f9:94:0d:31:81:f7:b9:5e:19:93:c1:ea:48: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:46:4C:DF:98:AC:B8:D0:32:03:C2:30:97:6A:5E:8E:97:29:85:F3 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e9:7e:7a:75:71:27:7c:d7:4a:ab:dd:c6:22:e3:d4:a4:e2: 8d:d6:35:d8:6d:b3:a6:d2:e3:8f:0c:9e:d3:d5:5d:91:7c:8b: 22:29:c3:15:39:27:34:fe:3c:65:9b:34:f6:3d:be:b9:d5:90: 65:36:b8:a1:86:5a:bb:d8:68:a0:0f:18:5b:98:38:9b:1e:97: ee:6d:a0:46:8e:ee:a9:ff:4b:22:9e:79:a1:45:57:d0:70:18: a8:08:f0:db:d0:17:1b:63:0e:93:da:ac:67:3f:f8:01:f8:97: 84:df:7c:de:d4:d6:81:e7:37:f7:46:8e:3a:68:74:d8:32:82: 6b:be:e4:37:ad:b8:ce:7b:2d:fc:be:26:ee:8d:dc:37:3d:c5: 80:ce:b3:5f:e3:41:7a:c1:a4:2b:3e:ca:1e:8d:56:05:ae:06: 45:3f:39:8f:16:af:3f:7a:58:8d:ac:20:c3:b5:fc:79:62:0c: 1f:62:1d:aa:6c:ca:4c:7c:ff:4d:11:84:3d:d8:53:5b:28:b0: c9:fa:c0:8d:6e:24:ff:92:4c:70:fc:fa:33:3b:e3:fa:be:92: 9e:70:b1:fb:a3:0b:19:fd:9e:cf:3a:6b:f3:b0:6b:91:ee:8f: 82:e0:d7:44:6d:02:d7:3c:cf:ca:07:cd:6e:70:dc:fb:83:9f: 4e:17:68:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUwNDI1MDA0NzM0WhcNMjUwNTAyMDA0NzM0WjAYMRYwFAYD VQQDEw02ODBhZGJhNi03NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAZ9iiW5CGRBMT28zsLdeGSVaERA8cFHqPM0ZN4/YGzoctwG83m4lwQrrW5V 7o7s0lxt2Y1uv712aky/dvTujJStdE+A0nQ07llqCEHOhgBmpsIi/jcihhEvA5w6 vp5h0zw1gJDnbRxq2xtL4baj57BToLJc5fstJGpykDP+wx9zsEaBL5DwR4r5GkZt 11jH0GWy3g8UuP/X8/eEOADB9qwZMlNbc5czi5rv8gKt24bYV3unqEhCRPTBLjJv SKqbNxcdng8l0xYef/LGUP5Nczp+io+6YAvsBoLErl16dT6HXYvGy8X7cXs7xwfq jyPwSvmUDTGB97leGZPB6kj8eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1GTN+Y rLjQMgPCMJdqXo6XKYXzMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd6X56dXEnfNdKq93GIuPUpOKN1jXYbbOm0uOPDJ7T1V2RfIsiKcMV OSc0/jxlmzT2Pb651ZBlNrihhlq72GigDxhbmDibHpfubaBGju6p/0sinnmhRVfQ cBioCPDb0BcbYw6T2qxnP/gB+JeE33ze1NaB5zf3Ro46aHTYMoJrvuQ3rbjOey38 vibujdw3PcWAzrNf40F6waQrPsoejVYFrgZFPzmPFq8/eliNrCDDtfx5YgwfYh2q bMpMfP9NEYQ92FNbKLDJ+sCNbiT/kkxw/PozO+P6vpKecLH7owsZ/Z7POmvzsGuR 7o+C4NdEbQLXPM/KB81ucNz7g59OF2jI -----END CERTIFICATE-----Generated at Sat Apr 26 17:18:42 2025 by rpki-client