$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json) Hash identifier: /n0ShYvK6vCi5xh+wMsWPYhrT/x8AraWsDr/gKVe5rw= Subject key identifier: D5:1A:2A:FF:91:6A:23:EB:08:B6:E4:00:F2:E3:91:A7:22:F2:51:47 Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft Manifest number: 3D Signing time: Fri 25 Apr 2025 06:29:47 +0000 Manifest this update: Fri 25 Apr 2025 06:29:46 +0000 Manifest next update: Fri 02 May 2025 06:29:46 +0000 Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: 4PL1BMrVAKu8lUuyhpHi7NoiYxRVVNbEXrHMg5tEJhs=) 2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: HaAP7uUg1XzzgFWY/CdSRARMCuA2gGNyuumYnBvV1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Validity Not Before: Apr 25 06:29:46 2025 GMT Not After : May 2 06:29:46 2025 GMT Subject: CN=680b2bda-665c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:c1:da:04:3f:43:dc:91:9f:13:27:4e:d4: 14:6c:9f:2f:40:bd:f9:93:71:9d:f6:b8:1c:8b:e9: aa:6e:d3:ae:69:33:f3:04:28:e4:eb:6e:03:d9:39: 7e:a7:cf:63:04:c0:09:52:35:8e:e0:1e:bd:0d:77: 78:4f:ec:aa:5c:45:fd:11:85:d7:ff:ff:d5:27:89: c6:8d:8d:48:39:fd:6e:93:ec:0c:16:d0:54:36:fd: 6f:09:89:ae:6c:61:de:61:e4:bd:f5:af:2f:23:a2: 89:7f:85:f2:c3:8b:7b:54:10:31:cf:94:a8:2f:5a: af:95:40:90:e5:96:22:b5:96:aa:af:98:53:e0:68: 08:2f:87:1d:ae:88:85:16:f4:f7:38:fb:a9:07:cb: 55:e6:4e:6c:36:4f:5d:ce:e9:a4:9b:9e:61:45:88: d5:a3:cf:59:8a:8d:e4:b4:77:24:3b:cb:4a:2d:97: ae:be:74:85:48:b1:9b:55:f2:c9:16:6f:25:40:cc: c5:74:fa:ec:37:f5:d6:2c:07:ec:df:1e:72:84:c5: fc:8e:7b:b1:4e:03:2c:71:09:6d:45:d9:6b:de:83: de:a0:df:8c:f1:c9:e8:72:6a:a0:5d:03:0c:33:f7: 0a:cf:68:62:f3:48:2e:90:65:fa:76:3c:cf:24:4d: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1A:2A:FF:91:6A:23:EB:08:B6:E4:00:F2:E3:91:A7:22:F2:51:47 X509v3 Authority Key Identifier: keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bc:ce:2a:1f:17:74:aa:9d:38:66:67:58:56:51:44:a5:bc: 4d:7b:ae:c1:18:1c:54:85:f8:a0:ce:df:73:71:15:5e:f5:d7: 01:77:e5:fd:30:36:6d:94:55:ec:f9:12:03:16:a4:f3:18:2c: 9f:c6:52:01:2a:89:6e:b6:c6:fe:df:b1:eb:11:69:08:71:8a: 88:ea:4c:a8:3a:ec:0e:c8:89:04:89:0f:99:d7:03:ac:a8:7c: c8:36:24:cf:64:84:6d:15:63:9a:ae:ea:35:63:64:ea:73:3c: ba:57:63:23:e6:52:7d:33:5a:ce:42:a1:88:fd:eb:70:41:9a: c1:f2:a4:d7:76:62:fd:7d:27:c0:bf:c6:a5:49:2f:2f:45:99: 36:b0:7a:8b:c1:c8:98:e9:c7:85:66:5e:95:f7:da:75:7d:c8: 9d:5b:9e:d8:dd:8d:5a:31:05:f5:04:e3:73:e9:17:be:03:a5: 59:4c:cf:c3:51:b3:28:a6:ea:a0:79:40:72:e3:04:e4:0e:d2: 05:83:d4:5f:aa:f7:df:a4:df:41:68:74:86:67:27:12:7b:89: 6b:d1:67:8a:e8:01:88:b4:80:1f:e1:c7:fb:54:73:b3:a1:bc: a1:03:77:0f:1c:ab:01:5f:78:66:85:e2:84:b7:a9:8a:60:ac: c3:3c:7d:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoQUU3M0I3MDU0OEZGNDIyRUQwMkQ1OUQxQ0EyNTc5M0Ew NUU5RTQyQTAeFw0yNTA0MjUwNjI5NDZaFw0yNTA1MDIwNjI5NDZaMBgxFjAUBgNV BAMTDTY4MGIyYmRhLTY2NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGw8HaBD9D3JGfEydO1BRsny9AvfmTcZ32uByL6apu065pM/MEKOTrbgPZOX6n z2MEwAlSNY7gHr0Nd3hP7KpcRf0Rhdf//9UnicaNjUg5/W6T7AwW0FQ2/W8Jia5s Yd5h5L31ry8jool/hfLDi3tUEDHPlKgvWq+VQJDlliK1lqqvmFPgaAgvhx2uiIUW 9Pc4+6kHy1XmTmw2T13O6aSbnmFFiNWjz1mKjeS0dyQ7y0otl66+dIVIsZtV8skW byVAzMV0+uw39dYsB+zfHnKExfyOe7FOAyxxCW1F2Wveg96g34zxyehyaqBdAwwz 9wrPaGLzSC6QZfp2PM8kTXVFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1Roq/5Fq I+sItuQA8uORpyLyUUcwHwYDVR0jBBgwFoAUrnO3BUj/Qi7QLVnRyiV5OgXp5Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzUwMTA5ODc2Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcm5PM0JVal9RaTdRTFZuUnlpVjVPZ1hwNUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzUwMTA5ODc2Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3 UUxWblJ5aVY1T2dYcDVDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADq8ziofF3SqnThmZ1hWUUSlvE17rsEYHFSF+KDO33NxFV711wF35f0w Nm2UVez5EgMWpPMYLJ/GUgEqiW62xv7fsesRaQhxiojqTKg67A7IiQSJD5nXA6yo fMg2JM9khG0VY5qu6jVjZOpzPLpXYyPmUn0zWs5CoYj963BBmsHypNd2Yv19J8C/ xqVJLy9FmTaweovByJjpx4VmXpX32nV9yJ1bntjdjVoxBfUE43PpF74DpVlMz8NR syim6qB5QHLjBOQO0gWD1F+q99+k30FodIZnJxJ7iWvRZ4roAYi0gB/hx/tUc7Oh vKEDdw8cqwFfeGaF4oS3qYpgrMM8fWo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:32 2025 by rpki-client