$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft File: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft (raw, json) Hash identifier: kjiLchExa/eqEhG8IcZu4usy4LmICPWUAl3n1RLO6Sc= Subject key identifier: 67:83:A3:64:76:11:89:87:5E:2A:AD:42:0C:E3:7B:B3:0D:12:D0:01 Authority key identifier: 3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3 Certificate issuer: /CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft Manifest number: 0132 Signing time: Fri 25 Apr 2025 03:43:06 +0000 Manifest this update: Fri 25 Apr 2025 03:43:06 +0000 Manifest next update: Fri 02 May 2025 03:43:06 +0000 Files and hashes: 1: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl (hash: qSrhQtr53LzRw4yX0SPd6AS4zKNJradnWroLeM09W5s=) 2: 553596D65DB511EE841C151FC4F9AE02.roa (hash: 5aNVVXrrk5+fzIwBo8UDYAZxVOdmHrz5HqTDIZHkN8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3399, serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3 Validity Not Before: Apr 25 03:43:06 2025 GMT Not After : May 2 03:43:06 2025 GMT Subject: CN=680b04ca-a286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:c3:46:6b:6a:61:23:99:60:8c:79:66:70: 68:1e:f8:db:a3:3b:59:ef:ab:c6:5d:25:d1:2f:42: 30:cb:91:a0:f1:de:a8:c1:bf:5e:48:db:eb:8e:c3: 3d:7e:90:a3:54:29:e5:70:4d:db:13:38:27:4e:1c: be:67:d7:59:55:e9:ff:0f:a9:28:d7:5b:94:4e:dc: db:e6:7b:21:9a:ae:c3:71:08:ae:0f:2e:47:48:6a: 3e:0c:36:28:5d:78:7a:14:d6:3b:c7:95:e8:96:0a: 35:be:a7:c4:65:6c:e3:57:59:fd:5c:c5:70:69:86: f2:23:cd:e7:e3:3c:82:86:e9:b1:5e:e0:20:7d:f6: 94:7c:5b:48:46:d7:a1:27:0a:83:cc:c6:d8:38:9f: 35:aa:e0:6c:fa:98:f6:df:cb:41:83:ec:6b:75:e0: 0d:01:60:be:ec:08:ec:6b:8a:97:00:23:a9:f4:13: 9e:df:3a:ae:a9:30:52:81:b5:2b:73:40:1e:82:c2: 14:c5:c3:5a:21:d5:51:21:7c:90:a0:2d:f9:d0:3e: 4d:9a:8c:fa:40:29:16:93:11:bf:b6:bf:6e:f3:a5: 4c:3d:51:e4:75:36:50:7b:bd:3a:3f:ea:c6:5a:d2: 86:12:0c:b0:99:33:b5:00:26:0c:a3:cf:bb:ba:8f: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:83:A3:64:76:11:89:87:5E:2A:AD:42:0C:E3:7B:B3:0D:12:D0:01 X509v3 Authority Key Identifier: keyid:3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:3a:47:fe:1c:84:38:db:bb:54:8f:1e:b0:c4:85:75:89:4e: 6a:ed:f1:8e:5f:fb:af:75:c2:99:f4:99:4d:99:77:b7:00:30: 2d:b6:24:5a:78:9a:22:ff:99:c7:bc:05:a5:08:58:8d:a6:88: 11:e9:28:a4:42:dd:ce:b6:b5:99:ac:e7:e3:fd:20:43:70:a7: 47:c5:74:83:51:00:f0:86:14:f4:a4:8c:23:77:9d:df:61:50: 73:ae:5b:fc:53:bc:fa:39:b0:84:ea:b2:48:f7:0d:85:6a:12: 88:68:ce:73:55:04:e9:5c:16:af:41:8a:ce:e1:51:93:51:58: b6:be:ea:41:7b:57:17:88:a1:8b:c7:df:3f:b4:6b:7f:2f:91: 43:0e:3b:03:53:88:d2:e2:42:ef:b9:1c:c5:96:5c:39:cc:1b: b6:fd:9a:76:2e:9c:df:1c:85:a1:66:74:39:96:9a:a6:a3:07: 2e:ab:73:98:16:25:ce:30:9b:c9:8f:70:78:14:f5:96:fe:ab: ca:56:92:db:70:92:66:a4:c9:c1:47:7e:30:30:b5:75:e3:18: c3:d2:a4:27:ba:6e:53:40:4f:b7:39:b7:aa:9d:91:d5:ed:f7: a9:28:58:dc:80:6e:b2:91:fa:e5:5d:0b:b1:09:1f:1f:2e:c1: 0f:d6:0c:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzOTkxMTAvBgNVBAUTKDNEQkREN0VENDEyNDgwRTkzNTVDMjdGM0MxMTNCNTY0 MEQzMTg2QjMwHhcNMjUwNDI1MDM0MzA2WhcNMjUwNTAyMDM0MzA2WjAYMRYwFAYD VQQDEw02ODBiMDRjYS1hMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh3DRmtqYSOZYIx5ZnBoHvjboztZ76vGXSXRL0Iwy5Gg8d6owb9eSNvrjsM9 fpCjVCnlcE3bEzgnThy+Z9dZVen/D6ko11uUTtzb5nshmq7DcQiuDy5HSGo+DDYo XXh6FNY7x5Xolgo1vqfEZWzjV1n9XMVwaYbyI83n4zyChumxXuAgffaUfFtIRteh JwqDzMbYOJ81quBs+pj238tBg+xrdeANAWC+7Ajsa4qXACOp9BOe3zquqTBSgbUr c0AegsIUxcNaIdVRIXyQoC350D5Nmoz6QCkWkxG/tr9u86VMPVHkdTZQe706P+rG WtKGEgywmTO1ACYMo8+7uo92swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeDo2R2 EYmHXiqtQgzje7MNEtABMB8GA1UdIwQYMBaAFD291+1BJIDpNVwn88ETtWQNMYaz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzM5OS9CQTY4QzMyODVD QjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dPazFYQ2Z6d1JPMVpBMHho ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BiM1g3VUVrZ09rMVhDZnp3Uk8xWkEweGhyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzM5OS9CQTY4QzMyODVDQjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dP azFYQ2Z6d1JPMVpBMHhock0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCOkf+HIQ427tUjx6wxIV1iU5q7fGOX/uvdcKZ9JlNmXe3ADAttiRa eJoi/5nHvAWlCFiNpogR6SikQt3OtrWZrOfj/SBDcKdHxXSDUQDwhhT0pIwjd53f YVBzrlv8U7z6ObCE6rJI9w2FahKIaM5zVQTpXBavQYrO4VGTUVi2vupBe1cXiKGL x98/tGt/L5FDDjsDU4jS4kLvuRzFllw5zBu2/Zp2LpzfHIWhZnQ5lpqmowcuq3OY FiXOMJvJj3B4FPWW/qvKVpLbcJJmpMnBR34wMLV14xjD0qQnum5TQE+3ObeqnZHV 7fepKFjcgG6ykfrlXQuxCR8fLsEP1gwL -----END CERTIFICATE-----Generated at Sat Apr 26 03:48:30 2025 by rpki-client