$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: yqqm7jx8czggVVXTOaa2PhEbH3IMs+eCUwIde8rdHxg= Subject key identifier: E1:3A:A5:EB:DE:40:91:3B:E6:92:C1:FF:F2:BC:B0:CF:07:43:1E:A3 Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 68 Signing time: Fri 25 Apr 2025 06:03:14 +0000 Manifest this update: Fri 25 Apr 2025 06:03:13 +0000 Manifest next update: Fri 02 May 2025 06:03:13 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: WtWU5D1WYulyZ71L9BDTU/IFlZUkOFPfr2bOxH5a9M4=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: ymXlk9RJfi9V2KzOznS96G8RXYI7jJ6rpj+phG/GZks=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: SX03ccnLTHDWWqP2dXM+ZAcRiPmXaj3vkOlikMISxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Apr 25 06:03:13 2025 GMT Not After : May 2 06:03:13 2025 GMT Subject: CN=680b25a2-83fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:9e:6a:1a:f6:c9:0a:74:0d:9d:55:ff:93: bd:0d:fc:95:39:34:c4:36:d8:8c:fa:83:ba:ee:10: 6c:07:88:20:e6:0b:32:24:89:53:e8:79:05:8a:f2: b2:25:23:ef:c1:ba:85:42:41:86:ee:64:7e:d6:50: 19:94:e9:8c:4b:66:2e:a3:40:d9:75:a7:03:77:f9: 40:43:b2:7d:c1:22:5a:2c:5a:be:72:64:c2:f6:a6: c8:8f:9d:ce:39:62:6d:87:dc:e5:55:69:e4:11:8a: a1:88:6c:2a:3b:fb:fa:ca:60:6d:ac:9c:30:d0:d7: 77:03:b2:2f:dd:7e:11:c9:a7:2f:ad:0e:1f:ed:55: 61:00:c0:2e:c5:2b:21:4e:fa:88:2c:2d:8d:f0:43: b7:76:f3:47:28:4c:89:8f:fa:c8:f9:a3:b3:ba:ab: d2:36:95:ec:bb:89:a8:5f:1e:c2:f9:dd:cb:79:44: ea:25:3c:96:24:0e:7a:24:08:6a:07:d7:b7:5f:24: 7f:a1:0a:af:bf:ba:4a:e9:d5:f2:6c:c0:3a:54:d1: 11:31:7b:f5:db:cd:38:95:23:33:43:91:96:db:22: 7b:00:57:42:8f:3f:14:b1:ba:6c:19:b2:5f:6b:1c: 43:7c:24:7f:d7:3a:26:fd:c1:cd:c0:b3:19:d6:16: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3A:A5:EB:DE:40:91:3B:E6:92:C1:FF:F2:BC:B0:CF:07:43:1E:A3 X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:98:18:8f:3f:bb:5b:ae:3e:3e:11:41:76:72:fc:8a:5b:44: fd:b7:0e:de:ee:a9:22:5d:38:f3:52:c9:e5:1f:9f:99:71:59: 83:08:c2:56:04:da:6c:5d:4d:77:5b:e9:6c:01:bc:3d:00:94: 0d:27:15:88:f7:1b:30:64:4f:9a:ab:7e:43:be:2a:c3:06:75: 1b:4c:3b:0e:78:f8:5b:22:02:52:84:c3:94:69:f3:7f:67:2d: 50:37:3b:e6:a9:68:e8:56:ce:d1:84:69:b1:de:b2:9e:59:d3: b7:69:45:35:9e:d8:04:b2:f7:f6:69:38:3f:93:7a:a9:83:09: 61:e8:a1:8b:2d:5e:9b:f2:ee:c2:76:97:f0:b5:06:81:9e:df: f3:0c:f8:48:92:ac:97:8d:3b:d6:ab:e7:48:97:ab:99:f3:cf: fd:7b:0d:25:be:fb:89:ee:51:d9:d5:83:14:8a:ef:86:cc:9a: 79:66:7c:19:08:38:e9:6c:12:af:64:11:ba:af:bc:6a:f3:81: 00:fa:47:c6:21:2c:3f:84:7a:4c:c8:e1:df:75:cf:45:6c:44: 4a:cd:cf:97:2d:6f:b4:a4:02:0c:93:78:4b:ca:a2:72:ba:73: 8b:e3:f4:47:43:59:bc:74:de:0c:89:b1:ef:4b:30:92:e6:37: 12:7d:03:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDc3ODExMC8GA1UEBRMoRERDNURCMzgxRkYxRUNDQTVCOTVBMjg1MTQ3OTJEQ0RC QTQ5MTgyQjAeFw0yNTA0MjUwNjAzMTNaFw0yNTA1MDIwNjAzMTNaMBgxFjAUBgNV BAMTDTY4MGIyNWEyLTgzZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfvp5qGvbJCnQNnVX/k70N/JU5NMQ22Iz6g7ruEGwHiCDmCzIkiVPoeQWK8rIl I+/BuoVCQYbuZH7WUBmU6YxLZi6jQNl1pwN3+UBDsn3BIlosWr5yZML2psiPnc45 Ym2H3OVVaeQRiqGIbCo7+/rKYG2snDDQ13cDsi/dfhHJpy+tDh/tVWEAwC7FKyFO +ogsLY3wQ7d280coTImP+sj5o7O6q9I2ley7iahfHsL53ct5ROolPJYkDnokCGoH 17dfJH+hCq+/ukrp1fJswDpU0RExe/XbzTiVIzNDkZbbInsAV0KPPxSxumwZsl9r HEN8JH/XOib9wc3AsxnWFriTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4Tql695A kTvmksH/8rywzwdDHqMwHwYDVR0jBBgwFoAU3cXbOB/x7MpblaKFFHktzbpJGCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENzc4LzVCOEQ4NjY4OTBF MjExRUY5NzYxMkE0NkM0RjlBRTAyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2NYYk9CX3g3TXBibGFLRkZIa3R6YnBKR0NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE Nzc4LzVCOEQ4NjY4OTBFMjExRUY5NzYxMkE0NkM0RjlBRTAyLzNjWGJPQl94N01w YmxhS0ZGSGt0emJwSkdDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACKYGI8/u1uuPj4RQXZy/IpbRP23Dt7uqSJdOPNSyeUfn5lxWYMIwlYE 2mxdTXdb6WwBvD0AlA0nFYj3GzBkT5qrfkO+KsMGdRtMOw54+FsiAlKEw5Rp839n LVA3O+apaOhWztGEabHesp5Z07dpRTWe2ASy9/ZpOD+TeqmDCWHooYstXpvy7sJ2 l/C1BoGe3/MM+EiSrJeNO9ar50iXq5nzz/17DSW++4nuUdnVgxSK74bMmnlmfBkI OOlsEq9kEbqvvGrzgQD6R8YhLD+EekzI4d91z0VsRErNz5ctb7SkAgyTeEvKonK6 c4vj9EdDWbx03gyJse9LMJLmNxJ9A2I= -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:56 2025 by rpki-client