$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: yqzHDNjrDxhMkJsfD+HHqTK4BjF3R4eyKgvFPwWYhTQ= Subject key identifier: EB:CF:E3:2C:13:38:50:C1:58:81:0A:8F:85:3E:9E:D0:77:FC:28:77 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: 80 Signing time: Fri 25 Apr 2025 05:37:58 +0000 Manifest this update: Fri 25 Apr 2025 05:37:57 +0000 Manifest next update: Fri 02 May 2025 05:37:57 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: rHIXcy9ceNWX/+7BDgRnPzBF1CsGf0hxPBIYE2eVvEc=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qWDPCZUNoXxLfCTQ51artmgIDTxez9EecMCL2qvkzMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Apr 25 05:37:57 2025 GMT Not After : May 2 05:37:57 2025 GMT Subject: CN=680b1fb6-374f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cd:94:48:fa:70:47:ef:c9:52:e1:e1:da:35: d3:04:5f:2d:ba:16:de:31:db:87:70:ff:9c:4b:12: e7:ed:43:57:e8:95:c5:29:0c:c0:51:91:14:45:15: e0:cb:ea:a8:55:3a:ce:f8:8a:f5:d6:62:7f:77:20: 6f:e6:f3:5f:bc:c6:c9:33:f9:81:c9:e4:9a:19:f6: 62:bf:b1:35:87:fb:e2:4e:6d:8d:0a:9d:20:5c:63: 8d:1a:a9:cc:3b:c3:b0:38:88:03:1c:c4:12:60:bd: 99:f3:24:b0:ca:40:b4:9c:bf:c5:e6:57:5b:87:c3: e1:3b:bf:59:ea:00:a9:c1:3c:e5:3a:51:d7:a0:15: b1:5b:ac:24:ee:9f:7f:7c:8e:92:f6:0f:74:1d:70: 77:18:fd:50:b6:1a:ec:dc:c8:e3:aa:c1:72:96:23: 88:54:c6:4d:b2:37:84:95:f2:d9:3a:bd:a2:f5:4d: 35:83:32:93:67:0b:ac:26:c7:db:e9:f6:5e:d1:2e: af:ea:8b:f5:9c:15:ea:46:0d:8f:85:c9:ff:60:41: 7b:9c:6d:84:56:a7:3f:1d:b8:8a:1d:c6:58:5d:d6: 80:e5:93:5e:a4:51:dc:87:52:e1:8d:05:1f:aa:f1: 87:3c:b0:d7:0d:8b:4c:34:45:ed:0b:15:86:d8:c6: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CF:E3:2C:13:38:50:C1:58:81:0A:8F:85:3E:9E:D0:77:FC:28:77 X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d2:41:6a:4e:1d:bc:39:a6:2d:fb:32:76:b9:e9:c1:95:3f: 57:f2:36:20:a3:14:96:15:ad:25:0e:65:82:d1:2c:20:76:44: 9c:7c:f2:ad:06:c5:fa:bd:6b:3d:34:88:0b:43:62:1e:e9:36: 74:92:9b:d2:8d:52:8d:9c:6d:e1:a8:f9:13:f9:82:b1:76:4c: c5:38:4a:6d:ae:cd:3a:04:6e:73:b0:dc:98:77:a9:74:bd:3f: 86:d6:ef:1d:5e:d5:7e:bb:9c:d3:c4:0b:f5:3c:02:d2:7f:03: 7e:bd:db:31:30:b7:2c:b8:9c:81:9e:a1:49:bd:c6:e1:47:56: 07:0b:d7:07:3f:a3:94:fd:02:51:34:5e:01:a5:47:d3:37:e9: 0c:09:57:92:f6:15:5b:aa:e5:d4:44:aa:74:27:a6:52:88:fe: c2:11:4e:38:85:cc:a2:c6:d8:c0:d0:9b:ce:73:5a:0f:73:1a: dc:5e:b0:af:68:a6:e4:70:d6:67:b6:75:41:12:64:ef:f5:09: ee:fd:c0:93:3d:8b:fd:36:3d:14:e0:b4:95:9b:e3:f7:50:38: 01:88:88:ef:d6:76:0c:e8:af:b8:bc:d7:67:e7:7b:2f:b2:67: b9:ca:f8:c0:84:71:67:1c:34:6e:8b:55:75:43:80:7d:44:c7: ff:94:2b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF OTg4Nzg2NjcwHhcNMjUwNDI1MDUzNzU3WhcNMjUwNTAyMDUzNzU3WjAYMRYwFAYD VQQDEw02ODBiMWZiNi0zNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAns2USPpwR+/JUuHh2jXTBF8tuhbeMduHcP+cSxLn7UNX6JXFKQzAUZEURRXg y+qoVTrO+Ir11mJ/dyBv5vNfvMbJM/mByeSaGfZiv7E1h/viTm2NCp0gXGONGqnM O8OwOIgDHMQSYL2Z8ySwykC0nL/F5ldbh8PhO79Z6gCpwTzlOlHXoBWxW6wk7p9/ fI6S9g90HXB3GP1Qthrs3MjjqsFyliOIVMZNsjeElfLZOr2i9U01gzKTZwusJsfb 6fZe0S6v6ov1nBXqRg2Phcn/YEF7nG2EVqc/HbiKHcZYXdaA5ZNepFHch1LhjQUf qvGHPLDXDYtMNEXtCxWG2MbWtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvP4ywT OFDBWIEKj4U+ntB3/Ch3MB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhC M1dBTjBxWVhocnpwaUhobWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB50kFqTh28OaYt+zJ2uenBlT9X8jYgoxSWFa0lDmWC0SwgdkScfPKt BsX6vWs9NIgLQ2Ie6TZ0kpvSjVKNnG3hqPkT+YKxdkzFOEptrs06BG5zsNyYd6l0 vT+G1u8dXtV+u5zTxAv1PALSfwN+vdsxMLcsuJyBnqFJvcbhR1YHC9cHP6OU/QJR NF4BpUfTN+kMCVeS9hVbquXURKp0J6ZSiP7CEU44hcyixtjA0JvOc1oPcxrcXrCv aKbkcNZntnVBEmTv9Qnu/cCTPYv9Nj0U4LSVm+P3UDgBiIjv1nYM6K+4vNdn53sv sme5yvjAhHFnHDRui1V1Q4B9RMf/lCsF -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:21 2025 by rpki-client