$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft File: mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json) Hash identifier: VDXDQOe/3MBmNOLNtvbnV58LRQyMOGVWPcZRRHe9bWU= Subject key identifier: 56:95:4B:C8:9D:08:18:6C:BE:B4:99:E4:50:2A:E4:E8:9E:8C:9C:C1 Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 Certificate issuer: /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft Manifest number: 0770 Signing time: Thu 24 Apr 2025 21:20:55 +0000 Manifest this update: Thu 24 Apr 2025 21:20:54 +0000 Manifest next update: Thu 01 May 2025 21:20:54 +0000 Files and hashes: 1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: 7+eMZ2PKt7gnOfrUjCXvOgUBMLo4/PP5TgyQ3xIj09M=) 2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Validity Not Before: Apr 24 21:20:54 2025 GMT Not After : May 1 21:20:54 2025 GMT Subject: CN=680aab36-309d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:c0:31:4c:c9:44:91:78:0a:30:6e:75:7b: b2:41:f8:11:91:82:4a:3b:cf:73:c3:e6:ac:54:f4: 49:47:e3:ff:fc:ee:1d:96:cd:8d:8d:45:2e:72:99: 50:10:4f:1a:b6:40:7b:85:98:6d:8a:0c:bd:d5:ed: 57:16:f8:fa:8b:78:12:87:57:a3:f8:b6:3d:1a:c3: 66:fa:05:9e:e5:9c:1a:cf:4d:b9:2c:34:3d:83:54: 44:9a:94:3a:15:b8:00:3c:49:41:48:76:0d:3b:2f: af:fb:34:a2:76:b4:2a:3b:d0:52:84:16:f1:1c:01: 22:a0:8a:90:b4:e4:fc:d9:59:4b:e9:01:bc:0b:1d: 5f:a7:d5:fe:a2:27:48:26:1c:88:92:4d:52:1d:21: 6b:ad:08:94:db:43:3b:5f:2a:06:3c:0d:d5:3d:b3: 49:95:ec:28:0e:a5:74:d0:7c:29:61:f8:a6:86:d0: b5:27:17:84:1e:01:25:6d:01:5f:49:f3:f0:ed:e6: c7:09:7d:b1:95:42:b9:62:15:fd:de:b3:bf:11:a5: 0a:f3:5c:6d:a8:06:d2:28:5d:73:30:a8:af:58:69: 26:56:9d:25:81:f4:91:5a:6d:35:29:e3:72:9c:58: d5:54:df:2c:65:97:53:46:3e:a7:a7:e8:22:bf:e5: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:95:4B:C8:9D:08:18:6C:BE:B4:99:E4:50:2A:E4:E8:9E:8C:9C:C1 X509v3 Authority Key Identifier: keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c6:b2:a2:f3:43:8c:9d:23:5b:d6:a7:38:41:33:70:cd:47: 97:6e:07:1f:56:f9:7a:f7:bb:fa:ce:cf:46:d2:a6:d7:94:90: e3:b6:0b:f9:cc:c4:85:9a:a4:d8:d4:6c:33:6a:3b:02:f9:c7: c9:b6:b9:82:08:a2:d5:e2:9f:bb:3b:9d:5c:7d:29:49:0e:32: dd:09:e1:71:72:70:e3:d9:fb:59:97:69:ca:e6:5e:e6:a4:18: 8f:a9:d2:6a:f2:b9:30:84:d2:77:de:06:f0:28:98:5e:14:8b: 70:93:60:c4:1c:e8:96:81:48:35:29:8a:36:ab:a6:d1:78:ff: f7:06:cc:d5:cc:7b:67:bd:a2:24:38:14:42:c0:db:be:df:4d: 1b:da:53:9b:22:46:39:c5:16:0d:43:cf:ea:12:ba:c5:91:93: ba:c8:cf:e9:99:3f:3f:40:ba:a5:b3:50:bd:88:8e:22:5a:67: 55:9c:3a:17:f7:05:b3:41:93:a3:b0:ee:66:67:0f:22:1a:44: b9:65:35:fd:b7:b3:1a:43:11:e8:1b:26:f8:90:12:7e:83:d6: 6b:f4:8a:1f:b3:19:04:ed:c5:e8:8e:9d:54:b8:cf:3a:d1:e6: c8:8d:ac:06:7f:11:8c:99:a1:62:8a:5b:0e:2b:c4:ec:4f:2a: 8b:4e:3f:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFENTFBOThDQzg3 MTkxM0YzQTkwHhcNMjUwNDI0MjEyMDU0WhcNMjUwNTAxMjEyMDU0WjAYMRYwFAYD VQQDEw02ODBhYWIzNi0zMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rrAMUzJRJF4CjBudXuyQfgRkYJKO89zw+asVPRJR+P//O4dls2NjUUucplQ EE8atkB7hZhtigy91e1XFvj6i3gSh1ej+LY9GsNm+gWe5Zwaz025LDQ9g1REmpQ6 FbgAPElBSHYNOy+v+zSidrQqO9BShBbxHAEioIqQtOT82VlL6QG8Cx1fp9X+oidI JhyIkk1SHSFrrQiU20M7XyoGPA3VPbNJlewoDqV00HwpYfimhtC1JxeEHgElbQFf SfPw7ebHCX2xlUK5YhX93rO/EaUK81xtqAbSKF1zMKivWGkmVp0lgfSRWm01KeNy nFjVVN8sZZdTRj6np+giv+XivQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaVS8id CBhsvrSZ5FAq5OiejJzBMB8GA1UdIwQYMBaAFJnNwOq+GAQSYRmh1RqYzIcZE/Op MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0Y3Ri9FMzdFNUIzMjE1 MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJCSmhHYUhWR3BqTWh4a1Q4 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jM0E2cjRZQkJKaEdhSFZHcGpNaHhrVDg2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0Y3Ri9FMzdFNUIzMjE1MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJC SmhHYUhWR3BqTWh4a1Q4NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjxrKi80OMnSNb1qc4QTNwzUeXbgcfVvl697v6zs9G0qbXlJDjtgv5 zMSFmqTY1GwzajsC+cfJtrmCCKLV4p+7O51cfSlJDjLdCeFxcnDj2ftZl2nK5l7m pBiPqdJq8rkwhNJ33gbwKJheFItwk2DEHOiWgUg1KYo2q6bReP/3BszVzHtnvaIk OBRCwNu+300b2lObIkY5xRYNQ8/qErrFkZO6yM/pmT8/QLqls1C9iI4iWmdVnDoX 9wWzQZOjsO5mZw8iGkS5ZTX9t7MaQxHoGyb4kBJ+g9Zr9IofsxkE7cXojp1UuM86 0ebIjawGfxGMmaFiilsOK8TsTyqLTj8q -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:22 2025 by rpki-client