$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: hfuw62ehM4xdIxfw+/SLr3wk6MYyI8QuUodWj/Doo5I= Subject key identifier: 80:BF:C5:07:F9:55:67:BD:D8:D3:B0:96:46:5E:A2:F3:F4:A2:73:6F Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 1047 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 103A Signing time: Thu 24 Apr 2025 17:25:05 +0000 Manifest this update: Thu 24 Apr 2025 17:25:04 +0000 Manifest next update: Thu 01 May 2025 17:25:04 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: 9S2njPiDTnpLEpo5OQ7tEDC1YfLw4DdGiDuKri9CyqM=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: OXCPrFm+EsQzPLUI+MTG5d83HdT10aUJkR72TyytJ18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4167 (0x1047) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Apr 24 17:25:04 2025 GMT Not After : May 1 17:25:04 2025 GMT Subject: CN=680a73f1-59c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:9e:b9:01:40:fe:55:21:b5:a6:45:98:32: 0d:29:a3:a3:a5:7d:3f:fc:7f:b2:7e:50:d8:44:dc: 71:dd:ee:88:6d:b2:24:cb:97:ec:a6:af:4a:84:ac: d2:7a:91:6d:b6:3f:fa:21:a2:12:c7:42:11:f0:22: 3d:2e:fa:1d:8d:6e:b1:c9:91:8b:c8:60:0a:d1:0b: a5:8b:a2:e9:35:fb:ac:b6:7c:95:01:00:ee:65:be: 1a:e3:1c:55:1c:38:20:10:0a:ac:2f:45:36:e7:50: 40:f3:e7:26:c3:66:d1:c3:46:48:9b:db:6d:58:2f: b9:81:5c:8a:49:9f:eb:dc:4f:0a:c8:84:d4:c0:09: a8:2e:5b:8c:45:58:22:a3:0e:2b:ec:06:e9:65:a7: 02:5b:4f:6d:32:c5:c8:48:ad:1e:b1:c6:cc:a1:f6: 44:40:e1:28:38:7d:fa:d8:9f:2c:95:50:51:7a:8c: 95:c2:33:4b:61:bb:b6:c7:ad:4c:75:d3:dc:bd:e3: 9c:71:d3:2e:77:22:6e:ac:20:3e:dc:c7:e3:38:a5: e5:f6:8f:a3:19:64:79:e6:ac:25:84:f9:c6:76:15: 79:f1:6f:f9:4c:cf:05:92:84:df:4e:7b:59:08:67: f2:dc:19:88:d0:70:98:3e:ce:a8:40:ff:75:bb:d0: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:C5:07:F9:55:67:BD:D8:D3:B0:96:46:5E:A2:F3:F4:A2:73:6F X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:a1:50:87:7c:87:40:f7:fe:d3:59:3a:c3:5d:9a:77:2c:b8: ba:15:19:ce:a6:f5:19:18:34:cc:e5:bb:a9:a7:af:58:cc:e4: 63:f8:98:cb:ea:5e:03:22:2d:ce:58:35:c9:35:b4:79:21:f7: 97:67:3c:60:a4:ea:35:e8:3e:b0:2a:c7:c9:63:06:31:96:b0: 62:f1:d7:fc:c5:97:1c:77:38:71:74:d4:e2:06:5f:53:52:0f: d0:ff:bf:52:d8:21:97:1d:84:5b:95:ef:b6:86:16:a4:8c:d8: 9c:80:fa:4e:65:76:d4:df:01:2a:16:0b:f8:5b:97:af:42:27: f9:03:a1:9a:e6:63:fd:9b:42:2f:6d:13:66:1f:2a:69:c2:9b: a9:29:a1:8b:c3:1b:27:d6:7c:e0:b5:c8:83:09:31:6d:6d:53: 0e:31:43:3a:8c:69:e6:ae:ca:11:88:96:62:e8:31:5e:cc:37: 63:1b:e1:8d:a7:d0:88:4e:5d:51:4f:5d:6c:e5:0f:62:c6:7d: e9:8a:6a:b0:e3:c3:df:f9:19:f8:88:80:fe:b2:7c:b2:ad:a8: da:9d:c2:76:ba:91:84:bd:3a:45:36:45:22:34:14:64:5d:f5: a1:46:d2:15:1e:49:ed:c9:09:78:2c:39:9d:94:e7:a2:9e:d2: ef:28:7c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUwNDI0MTcyNTA0WhcNMjUwNTAxMTcyNTA0WjAYMRYwFAYD VQQDEw02ODBhNzNmMS01OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzF6euQFA/lUhtaZFmDINKaOjpX0//H+yflDYRNxx3e6IbbIky5fspq9KhKzS epFttj/6IaISx0IR8CI9LvodjW6xyZGLyGAK0Quli6LpNfustnyVAQDuZb4a4xxV HDggEAqsL0U251BA8+cmw2bRw0ZIm9ttWC+5gVyKSZ/r3E8KyITUwAmoLluMRVgi ow4r7AbpZacCW09tMsXISK0escbMofZEQOEoOH362J8slVBReoyVwjNLYbu2x61M ddPcveOccdMudyJurCA+3MfjOKXl9o+jGWR55qwlhPnGdhV58W/5TM8FkoTfTntZ CGfy3BmI0HCYPs6oQP91u9DElQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC/xQf5 VWe92NOwlkZeovP0onNvMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUoVCHfIdA9/7TWTrDXZp3LLi6FRnOpvUZGDTM5bupp69YzORj+JjL 6l4DIi3OWDXJNbR5IfeXZzxgpOo16D6wKsfJYwYxlrBi8df8xZccdzhxdNTiBl9T Ug/Q/79S2CGXHYRble+2hhakjNicgPpOZXbU3wEqFgv4W5evQif5A6Ga5mP9m0Iv bRNmHyppwpupKaGLwxsn1nzgtciDCTFtbVMOMUM6jGnmrsoRiJZi6DFezDdjG+GN p9CITl1RT11s5Q9ixn3pimqw48Pf+Rn4iID+snyyrajancJ2upGEvTpFNkUiNBRk XfWhRtIVHkntyQl4LDmdlOeintLvKHy9 -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:46 2025 by rpki-client