$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: qEciReITkXFU/aCPtsrH/wRwaxKPO7L+hKdI6Z5eU+I= Subject key identifier: 47:0A:FE:03:2A:79:54:2C:5B:01:4B:7E:4D:50:F0:7F:49:5E:17:D8 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1D0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1CF9 Signing time: Thu 24 Apr 2025 16:10:33 +0000 Manifest this update: Thu 24 Apr 2025 16:10:32 +0000 Manifest next update: Thu 01 May 2025 16:10:32 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: yrP+vyTk9KV7ETi+m2ZdaiKeBwxf8/+HH3iTDbdzHmU=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: kc6Qio1nm2R7Nmekjn2RQdz6FiLOSkIgyD8v0SWSLok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7437 (0x1d0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Apr 24 16:10:32 2025 GMT Not After : May 1 16:10:32 2025 GMT Subject: CN=680a6279-4566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:2a:5f:6a:3f:6c:9c:6e:c4:90:ac:f9:1f: 03:62:d6:a1:79:9a:61:58:13:17:59:eb:d4:0d:61: 7e:50:0a:aa:9e:c9:17:25:d6:81:c3:8e:87:ee:39: 5f:93:35:55:73:b4:ec:b1:6c:07:6d:4b:01:0a:fd: 8a:00:4c:3d:6d:d2:8d:f1:c2:99:05:3a:09:70:50: 38:1a:d2:ba:57:ae:0d:24:1c:a9:92:c2:2a:85:e3: 32:78:90:33:0f:35:e0:a8:84:17:88:14:ec:dc:f4: 87:b2:b1:51:a6:40:3d:3b:52:2f:85:81:2c:26:96: e3:89:27:ce:52:cf:6b:4d:4f:27:c7:63:6e:d5:6b: 06:ca:d6:8d:26:60:5e:8d:90:67:9a:8c:64:99:7e: bb:4c:d8:cb:6b:b4:12:43:0e:68:cc:b1:d3:14:6a: ba:26:df:cc:76:62:05:77:ae:53:1f:ac:e5:24:a0: ef:4f:13:a8:fb:a1:bc:96:45:27:4b:ed:23:38:3f: f0:eb:ed:b4:c2:a0:9c:c9:e2:d2:9b:36:30:36:88: 7e:da:3c:9b:53:41:50:b4:b5:61:2d:fd:6d:bf:07: c6:c1:0e:26:d3:a5:ef:d4:40:c8:77:0b:c0:9c:4d: f0:ee:d2:2b:4d:47:29:2f:31:d9:14:ac:23:ed:93: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0A:FE:03:2A:79:54:2C:5B:01:4B:7E:4D:50:F0:7F:49:5E:17:D8 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b1:2c:be:0a:dc:15:8d:f3:fc:10:88:30:01:c0:a9:bd:0c: 20:ba:81:84:09:60:ed:74:1b:23:fc:bf:c1:35:83:42:cd:3d: f3:f3:0d:c3:d1:cc:33:10:66:14:83:b4:4d:57:24:e5:76:72: 92:6c:b6:45:06:36:89:6f:5b:1b:39:cb:e8:70:7a:a9:ad:b3: 4d:0a:93:90:9a:3d:c1:f9:80:bc:cf:fa:26:2d:00:a6:be:11: 76:b9:65:b3:47:92:27:de:e1:a6:97:2d:49:c8:41:01:7b:ce: dc:32:cb:9c:7a:eb:22:d5:14:ae:2e:3e:38:81:05:76:9c:3e: 52:68:ac:d0:36:b9:6b:10:74:f2:54:79:d5:03:55:75:04:2e: 10:ba:1e:65:c0:be:d4:96:cd:53:2d:92:c5:89:f1:24:e6:e9: 8d:f8:0b:e2:82:6a:97:d5:6e:77:25:17:5d:e2:f6:21:2f:94: f0:41:1e:93:97:6b:fa:97:88:5a:a7:01:70:58:54:65:34:77: 9c:94:62:95:d0:0c:d8:1e:0e:0d:30:ab:1b:43:4d:f6:94:a1: f6:7c:c2:b5:2a:7b:b3:89:bd:18:56:23:f0:da:1d:34:e8:e1: 70:ae:d0:53:d7:1c:72:f7:4c:e7:ff:00:b9:15:b7:1a:ab:46: 5e:97:f7:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjUwNDI0MTYxMDMyWhcNMjUwNTAxMTYxMDMyWjAYMRYwFAYD VQQDEw02ODBhNjI3OS00NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dEqX2o/bJxuxJCs+R8DYtaheZphWBMXWevUDWF+UAqqnskXJdaBw46H7jlf kzVVc7TssWwHbUsBCv2KAEw9bdKN8cKZBToJcFA4GtK6V64NJBypksIqheMyeJAz DzXgqIQXiBTs3PSHsrFRpkA9O1IvhYEsJpbjiSfOUs9rTU8nx2Nu1WsGytaNJmBe jZBnmoxkmX67TNjLa7QSQw5ozLHTFGq6Jt/MdmIFd65TH6zlJKDvTxOo+6G8lkUn S+0jOD/w6+20wqCcyeLSmzYwNoh+2jybU0FQtLVhLf1tvwfGwQ4m06Xv1EDIdwvA nE3w7tIrTUcpLzHZFKwj7ZMvlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcK/gMq eVQsWwFLfk1Q8H9JXhfYMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEsSy+CtwVjfP8EIgwAcCpvQwguoGECWDtdBsj/L/BNYNCzT3z8w3D 0cwzEGYUg7RNVyTldnKSbLZFBjaJb1sbOcvocHqprbNNCpOQmj3B+YC8z/omLQCm vhF2uWWzR5In3uGmly1JyEEBe87cMsuceusi1RSuLj44gQV2nD5SaKzQNrlrEHTy VHnVA1V1BC4Quh5lwL7Uls1TLZLFifEk5umN+AvigmqX1W53JRdd4vYhL5TwQR6T l2v6l4hapwFwWFRlNHeclGKV0AzYHg4NMKsbQ032lKH2fMK1Knuzib0YViPw2h00 6OFwrtBT1xxy90zn/wC5Fbcaq0Zel/eI -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:15 2025 by rpki-client