$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: TKf33iKqGWb03zp8Whi5Iyo25ZrEa8JR2Z0X+nLxEVk= Subject key identifier: 0D:DE:BD:AB:C0:5F:60:67:76:A9:C6:37:42:4C:57:1E:3C:78:55:85 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1E94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1E7D Signing time: Thu 24 Apr 2025 16:04:29 +0000 Manifest this update: Thu 24 Apr 2025 16:04:29 +0000 Manifest next update: Thu 01 May 2025 16:04:29 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: JUUI7kBK4KbD1EM+k/daizFLDdAKCvEICcAz1pzlj1I=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: h0HyLn8ocWGb9KjF4xTUCCRX3RLDUFI2FgHziz/KxqQ=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7828 (0x1e94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Apr 24 16:04:29 2025 GMT Not After : May 1 16:04:29 2025 GMT Subject: CN=680a610d-6fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:05:45:0e:11:bf:dd:11:0e:b2:18:bb:db: 56:d3:19:e2:44:ab:a6:4e:36:2b:68:c3:81:a5:6e: 8a:3a:25:1b:c0:39:32:f3:d5:73:1e:2b:33:e9:a3: bb:d2:b3:aa:c6:a9:30:b8:e6:80:99:4a:46:26:51: 87:13:ff:80:8d:d8:35:a8:42:c0:36:b1:43:04:3b: 9c:a5:19:06:c4:5d:31:59:d3:16:f9:9f:e0:08:74: 67:64:5c:05:40:98:2d:da:07:42:6c:7f:a8:1c:61: 82:02:90:44:e5:17:d2:31:75:34:b7:cf:74:5c:a1: ed:95:28:ae:e5:2d:30:90:ab:eb:a5:06:06:08:f1: 65:41:00:a1:ea:1b:f1:d6:8f:6e:5c:d6:26:e9:fb: 20:a0:04:b9:ec:1d:47:cd:7f:11:a3:f5:2d:3c:0b: 18:9b:ee:4a:81:04:c0:0c:79:8d:b9:55:08:3d:e0: 90:a8:32:16:9f:7d:99:d8:d3:86:48:54:bd:ca:33: ec:33:45:c0:c5:c9:2e:bd:9a:e2:2e:37:44:98:4a: 10:41:5f:fd:73:f8:f8:00:44:6f:7c:73:08:73:48: d2:a0:c2:b0:c9:cb:13:46:a8:68:ef:05:86:29:72: 31:d7:c1:84:b9:a7:d0:39:65:5d:bc:85:cf:71:30: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DE:BD:AB:C0:5F:60:67:76:A9:C6:37:42:4C:57:1E:3C:78:55:85 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:17:34:f4:a0:9d:6c:94:7f:a7:3c:99:94:92:f9:8c:b6:5d: 42:a1:89:e4:d3:1c:bb:20:fe:df:c1:49:a1:10:c5:04:fc:fb: 29:29:5f:38:9f:88:91:1c:69:ac:5a:6c:fe:c1:cd:cf:78:c1: 5e:75:7a:4b:d2:18:4d:d5:0a:90:12:08:79:3a:d6:63:4c:60: 58:c6:44:f1:3b:35:f7:78:54:40:83:d7:b7:98:a4:2d:39:37: 10:05:90:13:2d:3f:7d:2f:02:34:a6:77:8e:c0:a5:cc:d5:74: a4:67:d7:bf:4e:ee:2f:58:07:a4:50:41:4a:9e:7f:94:04:49: 91:22:46:69:e9:37:b2:51:ab:7c:22:b0:72:cf:f8:0e:b8:9c: 05:95:12:27:03:2c:b1:69:b8:a7:bc:2b:e0:f6:25:48:fa:75: 5d:c2:64:c1:ce:3f:9b:18:c8:7b:60:92:0d:c2:b7:0f:04:bb: f7:00:3f:ec:ae:d0:82:7f:d8:2c:d4:73:b9:66:f8:aa:5d:d0: b9:0e:c7:26:64:6b:b2:56:08:b0:67:cd:7f:50:5d:58:33:c2: 8f:a5:f8:52:b5:04:eb:7b:66:a8:56:30:90:9b:c1:59:ca:89: 6d:d5:65:33:6f:ab:94:d4:0d:82:03:7c:81:d3:68:b5:24:af: f0:19:fb:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjUwNDI0MTYwNDI5WhcNMjUwNTAxMTYwNDI5WjAYMRYwFAYD VQQDEw02ODBhNjEwZC02ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP8FRQ4Rv90RDrIYu9tW0xniRKumTjYraMOBpW6KOiUbwDky89VzHisz6aO7 0rOqxqkwuOaAmUpGJlGHE/+Ajdg1qELANrFDBDucpRkGxF0xWdMW+Z/gCHRnZFwF QJgt2gdCbH+oHGGCApBE5RfSMXU0t890XKHtlSiu5S0wkKvrpQYGCPFlQQCh6hvx 1o9uXNYm6fsgoAS57B1HzX8Ro/UtPAsYm+5KgQTADHmNuVUIPeCQqDIWn32Z2NOG SFS9yjPsM0XAxckuvZriLjdEmEoQQV/9c/j4AERvfHMIc0jSoMKwycsTRqho7wWG KXIx18GEuafQOWVdvIXPcTDgUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3evavA X2BndqnGN0JMVx48eFWFMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADFzT0oJ1slH+nPJmUkvmMtl1CoYnk0xy7IP7fwUmhEMUE/PspKV84 n4iRHGmsWmz+wc3PeMFedXpL0hhN1QqQEgh5OtZjTGBYxkTxOzX3eFRAg9e3mKQt OTcQBZATLT99LwI0pneOwKXM1XSkZ9e/Tu4vWAekUEFKnn+UBEmRIkZp6TeyUat8 IrByz/gOuJwFlRInAyyxabinvCvg9iVI+nVdwmTBzj+bGMh7YJINwrcPBLv3AD/s rtCCf9gs1HO5ZviqXdC5DscmZGuyVgiwZ81/UF1YM8KPpfhStQTre2aoVjCQm8FZ yolt1WUzb6uU1A2CA3yB02i1JK/wGftA -----END CERTIFICATE-----Generated at Sat Apr 26 15:08:54 2025 by rpki-client