$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: 3KXhvFZXTXUO9YDHGj4EXISDOuupPmDAlAB7p4b/j0o= Subject key identifier: 4D:88:24:35:D1:55:36:AC:8A:58:3F:70:EE:0A:36:08:62:EB:6E:4B Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0478 Signing time: Thu 24 Apr 2025 23:51:22 +0000 Manifest this update: Thu 24 Apr 2025 23:51:21 +0000 Manifest next update: Thu 01 May 2025 23:51:21 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: jVZt9+dcMwlSIiKLT4UwA94FOmIG9Ev9Y90VL7kfeew=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Apr 24 23:51:21 2025 GMT Not After : May 1 23:51:21 2025 GMT Subject: CN=680ace79-f954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:77:8c:76:1f:8a:5c:c2:87:06:9d:68:98:7d: 30:67:43:ed:6e:e7:00:d7:da:bd:45:38:7f:e4:4e: 08:a2:4a:1f:eb:5b:d0:ee:8d:8a:86:8f:c2:d8:80: 5c:04:6f:90:24:6e:66:c9:3d:82:8f:9d:d6:a6:b3: 19:8e:89:0a:e3:2b:01:a0:e8:1b:39:b8:20:c3:00: a0:f3:93:f4:91:16:bf:aa:ef:9f:11:83:9e:b6:8c: df:18:0a:dc:14:d5:b5:9e:6a:cd:79:4f:9e:8e:0f: d0:f1:34:ad:79:d0:4e:69:71:ff:5b:0e:79:1d:79: d9:33:ce:ce:6f:e4:08:b2:1b:50:81:62:39:4b:ce: f1:c5:37:11:f2:0a:b8:f0:b7:55:f7:da:b9:a4:69: 7e:7c:28:1a:b4:17:42:47:76:0a:47:87:ed:b3:51: 79:c6:ff:72:70:05:b7:d0:c9:76:33:1f:af:d4:ab: 5b:93:8c:05:10:2f:68:ed:61:96:a6:87:d2:ba:06: 7a:c4:69:fc:44:f7:8d:d6:a9:5b:e2:45:85:e9:e7: 22:f2:58:d5:ad:b7:e6:1f:59:ed:4a:e7:38:cb:c2: 86:2b:f6:3a:b2:42:2a:68:bb:a2:70:36:3d:d2:ce: ea:72:3e:72:53:32:e1:cf:2b:e3:d4:8e:26:38:bc: d6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:88:24:35:D1:55:36:AC:8A:58:3F:70:EE:0A:36:08:62:EB:6E:4B X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:9f:15:79:22:e8:78:d1:1d:0f:c1:27:e8:24:fe:05:af: 02:6a:4c:74:6c:c1:78:47:f9:7c:71:6e:7e:d5:85:c3:0f:33: 85:64:81:22:78:a3:a8:06:f5:d0:46:a8:4a:a6:cb:d5:41:92: 99:85:b1:f2:c7:5b:15:1e:51:46:0b:2d:02:44:24:18:cc:d7: d7:aa:c3:3f:53:35:2d:75:28:87:9d:d7:a2:e0:57:ca:39:64: 16:38:2e:d2:0e:68:bf:81:81:1d:7a:a9:f5:e0:2a:ee:b0:68: 47:7f:a4:1b:94:07:45:a0:b8:08:13:60:40:44:5c:46:f4:a3: 05:6f:77:d1:a7:3f:5d:d4:cb:23:75:d5:8a:6b:c1:6c:98:0b: ad:24:02:6d:f4:ec:26:c2:38:f1:79:59:4a:0c:a1:cb:27:58: b6:73:b0:39:13:bd:96:59:df:b4:6d:6e:d8:91:b4:ae:9a:d7: 08:70:33:ac:cc:41:bb:de:d9:dc:1c:c9:d8:bd:cf:f3:e5:09: 53:46:4a:6c:15:90:02:56:92:a2:ed:06:96:cd:19:59:e4:b7: 7b:bb:01:74:a4:c6:b6:a2:0e:42:d0:41:12:11:80:6d:ac:af: 13:dc:ad:9b:66:64:08:3c:8d:96:ff:d3:87:1a:4b:eb:0a:08: 21:2b:31:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUwNDI0MjM1MTIxWhcNMjUwNTAxMjM1MTIxWjAYMRYwFAYD VQQDEw02ODBhY2U3OS1mOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HeMdh+KXMKHBp1omH0wZ0PtbucA19q9RTh/5E4Iokof61vQ7o2Kho/C2IBc BG+QJG5myT2Cj53WprMZjokK4ysBoOgbObggwwCg85P0kRa/qu+fEYOetozfGArc FNW1nmrNeU+ejg/Q8TStedBOaXH/Ww55HXnZM87Ob+QIshtQgWI5S87xxTcR8gq4 8LdV99q5pGl+fCgatBdCR3YKR4fts1F5xv9ycAW30Ml2Mx+v1Ktbk4wFEC9o7WGW pofSugZ6xGn8RPeN1qlb4kWF6eci8ljVrbfmH1ntSuc4y8KGK/Y6skIqaLuicDY9 0s7qcj5yUzLhzyvj1I4mOLzWEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2IJDXR VTasilg/cO4KNghi625LMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCROJ8VeSLoeNEdD8En6CT+Ba8Cakx0bMF4R/l8cW5+1YXDDzOFZIEi eKOoBvXQRqhKpsvVQZKZhbHyx1sVHlFGCy0CRCQYzNfXqsM/UzUtdSiHndei4FfK OWQWOC7SDmi/gYEdeqn14CrusGhHf6QblAdFoLgIE2BARFxG9KMFb3fRpz9d1Msj ddWKa8FsmAutJAJt9OwmwjjxeVlKDKHLJ1i2c7A5E72WWd+0bW7YkbSumtcIcDOs zEG73tncHMnYvc/z5QlTRkpsFZACVpKi7QaWzRlZ5Ld7uwF0pMa2og5C0EESEYBt rK8T3K2bZmQIPI2W/9OHGkvrCgghKzG/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:17 2025 by rpki-client