$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: LoQ07s1PuNWzdFHZFaZa6xvY5+9agAtOhgd3pu7hcHo= Subject key identifier: 51:A9:75:F3:23:09:0D:7D:00:1B:79:7D:FC:D0:DB:42:D8:78:76:C0 Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 080B Signing time: Thu 24 Apr 2025 20:49:09 +0000 Manifest this update: Thu 24 Apr 2025 20:49:08 +0000 Manifest next update: Thu 01 May 2025 20:49:08 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: BfPpQExHZ06/3CgLSVTQU6a/YSxHLc1mJQeqWn5BBSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: Apr 24 20:49:08 2025 GMT Not After : May 1 20:49:08 2025 GMT Subject: CN=680aa3c5-c5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:a5:0d:69:80:35:77:8f:02:fc:36:d0:0c: 55:4e:67:44:b9:4b:21:f5:2f:71:d9:38:35:5d:e9: 2a:2d:11:15:9e:26:4a:d8:3f:33:03:da:16:9f:2c: 85:ee:91:2b:c4:ad:32:6a:e9:07:8b:b9:a8:68:77: 26:61:2c:db:91:46:c8:6f:bb:4b:1b:0e:a4:71:47: 1e:18:4c:b1:3b:e0:4f:4c:d5:a2:8b:94:40:f8:02: f3:12:11:1f:0b:1a:bd:b0:28:2d:8f:53:00:0d:92: ed:ac:40:bf:ad:84:62:f8:43:dd:f1:42:4c:e1:5b: 9f:fc:38:de:ce:11:67:42:a6:fc:e8:49:e7:38:b1: a3:ad:7e:9b:c0:f9:6a:c5:ee:1d:25:54:07:a7:7d: a4:86:04:5a:04:45:2b:ee:86:bf:c5:42:15:b5:18: fc:8c:c1:62:16:a3:15:6d:f1:14:fb:47:fa:20:77: e6:c7:53:90:15:5c:c4:7c:5d:d5:01:ac:d5:40:8b: f3:6b:35:c5:bc:87:83:fb:f4:cb:0b:3f:a0:64:68: bc:68:54:33:2e:43:fa:4d:8b:be:82:bf:db:09:c4: af:9d:c2:60:d2:f2:d6:af:6d:47:74:8d:05:5e:61: 4a:8b:dc:95:be:77:2d:93:26:98:2d:b3:d0:63:78: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A9:75:F3:23:09:0D:7D:00:1B:79:7D:FC:D0:DB:42:D8:78:76:C0 X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1b:31:4e:b3:79:8a:82:63:f6:bf:df:00:66:15:6e:83:5c: 62:1d:fe:e0:c9:87:a9:1a:60:84:f3:cf:6d:fe:bc:37:ba:de: 68:55:8b:50:cc:3e:a4:e2:0d:0c:a7:74:ea:d0:95:24:df:78: de:95:0a:18:8f:62:3f:d0:59:7c:2e:95:3c:f4:c2:4c:48:60: 93:63:73:1b:70:da:53:21:5d:4e:52:a3:6b:c6:47:8b:1d:ec: 6d:e9:62:82:59:7c:20:4d:48:ae:01:9d:df:3f:37:9f:9d:33: f7:77:2b:a9:c2:c7:3a:c4:ce:ac:b2:45:da:76:f1:e6:bc:6c: 53:7a:f9:dc:37:b4:f0:75:87:a4:40:47:8a:ae:48:b3:ef:d9: 86:6a:b6:bb:df:7d:ce:60:19:7a:8d:95:b1:01:50:f4:7e:68: fa:79:54:5f:47:86:d8:9e:6e:bc:35:36:bb:ac:f2:a9:6e:93: 35:ee:11:b4:fd:b6:9a:55:c9:1e:de:08:7b:d6:13:66:40:1d: f5:6a:0e:d3:55:bd:36:e1:a3:23:cf:1d:de:7f:2b:d1:5e:48: b2:f8:23:18:29:64:bc:97:13:8d:4c:de:45:0c:ab:ef:98:0d: 15:4a:f7:ef:ee:fe:88:2a:be:77:d2:b0:9a:8a:9a:eb:03:f2: 3e:e7:02:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjUwNDI0MjA0OTA4WhcNMjUwNTAxMjA0OTA4WjAYMRYwFAYD VQQDEw02ODBhYTNjNS1jNWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdylDWmANXePAvw20AxVTmdEuUsh9S9x2Tg1XekqLREVniZK2D8zA9oWnyyF 7pErxK0yaukHi7moaHcmYSzbkUbIb7tLGw6kcUceGEyxO+BPTNWii5RA+ALzEhEf Cxq9sCgtj1MADZLtrEC/rYRi+EPd8UJM4Vuf/DjezhFnQqb86EnnOLGjrX6bwPlq xe4dJVQHp32khgRaBEUr7oa/xUIVtRj8jMFiFqMVbfEU+0f6IHfmx1OQFVzEfF3V AazVQIvzazXFvIeD+/TLCz+gZGi8aFQzLkP6TYu+gr/bCcSvncJg0vLWr21HdI0F XmFKi9yVvnctkyaYLbPQY3jOTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGpdfMj CQ19ABt5ffzQ20LYeHbAMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLGzFOs3mKgmP2v98AZhVug1xiHf7gyYepGmCE889t/rw3ut5oVYtQ zD6k4g0Mp3Tq0JUk33jelQoYj2I/0Fl8LpU89MJMSGCTY3MbcNpTIV1OUqNrxkeL Hext6WKCWXwgTUiuAZ3fPzefnTP3dyupwsc6xM6sskXadvHmvGxTevncN7TwdYek QEeKrkiz79mGara7333OYBl6jZWxAVD0fmj6eVRfR4bYnm68NTa7rPKpbpM17hG0 /baaVcke3gh71hNmQB31ag7TVb024aMjzx3efyvRXkiy+CMYKWS8lxONTN5FDKvv mA0VSvfv7v6IKr530rCaiprrA/I+5wJP -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:35 2025 by rpki-client