$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: hbBEhucKFH9gwtfnET+rPevriNdfDgKswfra6pOg20g= Subject key identifier: F4:EB:DB:08:46:AF:67:F7:7C:F3:51:EE:BB:C3:93:AC:6F:74:E4:AC Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 02EC Signing time: Fri 25 Apr 2025 01:04:30 +0000 Manifest this update: Fri 25 Apr 2025 01:04:29 +0000 Manifest next update: Fri 02 May 2025 01:04:29 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: Wm/fW8Bt55aWRoORlqvAqnjaxq8Z9L4Rjusw5cNs3xg=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: eVqCt6jrx+C1JB/X7OKow2VBehCM/YMsmg/5OjY9iwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Apr 25 01:04:29 2025 GMT Not After : May 2 01:04:29 2025 GMT Subject: CN=680adf9d-73d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:b0:6b:76:8e:ab:1b:b0:5f:f1:0c:d8:7d: eb:06:79:ed:a2:cc:53:64:be:7d:5e:c3:99:70:e8: c6:b7:26:8e:65:df:48:16:b6:66:bd:5f:9b:ad:94: c2:96:3a:33:2e:f8:24:bd:82:24:e6:34:fd:02:d0: b4:d4:ae:43:5e:2a:e4:df:3e:83:cf:99:9d:06:e6: 6a:bf:9e:09:fc:1f:d8:68:f5:8c:f7:7b:95:9d:7a: 4e:d1:1d:bd:a6:57:e0:6e:58:b6:87:b1:db:c1:94: 0c:84:d0:e3:6f:3d:83:aa:9f:12:ec:f1:a3:9a:9e: 51:f9:27:a6:fb:2e:0e:cf:d9:3e:a3:d0:f4:16:8a: 0f:07:7a:e4:57:e6:08:c8:cd:67:aa:7a:45:2a:bd: ef:43:d7:1f:cc:f1:21:46:ea:df:38:8f:97:03:ac: d9:33:3d:32:82:1a:e7:21:b9:1e:2e:3c:95:0e:fd: 73:7b:f2:4b:56:f5:55:dc:2d:da:b3:1c:13:0b:e3: 2c:a8:17:0a:44:ab:33:e3:f9:52:78:c9:19:85:03: ed:55:72:0b:ae:de:18:82:6c:7f:33:3c:f3:61:43: 9e:b6:6b:88:79:ad:7f:b4:1e:44:8a:42:52:ea:99: 15:2d:ad:30:27:3d:ee:2b:bc:aa:7c:45:86:b3:20: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EB:DB:08:46:AF:67:F7:7C:F3:51:EE:BB:C3:93:AC:6F:74:E4:AC X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ac:00:1b:bc:e5:16:35:d4:63:b9:87:e8:8b:c7:43:9f:99: 29:83:95:84:00:7d:bb:f8:e8:60:aa:26:6c:f9:ab:16:ce:eb: 3e:24:f8:ab:36:b6:b0:4a:cd:18:91:98:0e:5b:72:43:f0:2d: 16:a7:ee:0c:da:f2:0c:09:95:08:55:e7:4b:bc:fc:19:a2:57: 47:c7:55:64:8e:4f:71:4e:7c:37:36:23:f7:2a:72:aa:68:2e: 91:95:e1:1e:73:a6:62:2e:e2:e5:e4:4b:ac:3c:6a:fd:3c:27: a4:20:28:f0:b6:3a:eb:58:e1:a3:98:8a:52:da:2d:a4:1b:05: 86:7a:59:b5:88:46:3e:11:1e:79:f6:50:a3:0d:b7:13:e0:d9: 4b:27:72:52:0d:77:58:27:81:11:e4:75:d4:35:5f:c8:d5:fe: a5:1a:e1:e9:ef:04:02:df:7f:62:0b:33:88:76:80:d3:27:cb: 3f:d2:88:24:37:ce:51:c8:3c:cd:e1:53:a9:d6:8e:6e:30:b7: dd:06:86:f1:ef:7a:69:fb:36:14:de:11:fc:b4:13:ab:bc:35: ba:da:bc:7d:98:87:4a:b2:cd:93:9d:ce:0c:59:b9:b5:97:7c: 04:b0:8a:6f:3b:b7:d7:a4:45:88:c0:04:16:3d:cf:56:0b:5c: 84:f2:02:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjUwNDI1MDEwNDI5WhcNMjUwNTAyMDEwNDI5WjAYMRYwFAYD VQQDEw02ODBhZGY5ZC03M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrGwa3aOqxuwX/EM2H3rBnntosxTZL59XsOZcOjGtyaOZd9IFrZmvV+brZTC ljozLvgkvYIk5jT9AtC01K5DXirk3z6Dz5mdBuZqv54J/B/YaPWM93uVnXpO0R29 plfgbli2h7HbwZQMhNDjbz2Dqp8S7PGjmp5R+Sem+y4Oz9k+o9D0FooPB3rkV+YI yM1nqnpFKr3vQ9cfzPEhRurfOI+XA6zZMz0yghrnIbkeLjyVDv1ze/JLVvVV3C3a sxwTC+MsqBcKRKsz4/lSeMkZhQPtVXILrt4Ygmx/MzzzYUOetmuIea1/tB5EikJS 6pkVLa0wJz3uK7yqfEWGsyC3KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTr2whG r2f3fPNR7rvDk6xvdOSsMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqrAAbvOUWNdRjuYfoi8dDn5kpg5WEAH27+OhgqiZs+asWzus+JPir NrawSs0YkZgOW3JD8C0Wp+4M2vIMCZUIVedLvPwZoldHx1Vkjk9xTnw3NiP3KnKq aC6RleEec6ZiLuLl5EusPGr9PCekICjwtjrrWOGjmIpS2i2kGwWGelm1iEY+ER55 9lCjDbcT4NlLJ3JSDXdYJ4ER5HXUNV/I1f6lGuHp7wQC339iCzOIdoDTJ8s/0ogk N85RyDzN4VOp1o5uMLfdBobx73pp+zYU3hH8tBOrvDW62rx9mIdKss2Tnc4MWbm1 l3wEsIpvO7fXpEWIwAQWPc9WC1yE8gKC -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:43 2025 by rpki-client