$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: t4TJxED0ojP5rp+wOJO5Hc4OjKBACh7JPhQk7YcIbhA= Subject key identifier: 62:EA:5F:2F:1F:BB:AD:C1:8D:A5:B5:F5:EA:68:13:AC:AF:D5:0B:69 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0156 Signing time: Fri 25 Apr 2025 03:12:32 +0000 Manifest this update: Fri 25 Apr 2025 03:12:32 +0000 Manifest next update: Fri 02 May 2025 03:12:32 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: 3LQ6ibqpOT8P60lxhUABeqC9g5aUBwoKkgcxM3DYiUs=) 2: F287261014C311EE89C2C021C4F9AE02.roa (hash: h2JTkH5cDdzaWjiM7lCs6Ni3E0awofcV4Wu5xaJdDqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Apr 25 03:12:32 2025 GMT Not After : May 2 03:12:32 2025 GMT Subject: CN=680afda0-92ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:b4:c2:c7:75:4a:f2:cf:7b:89:ed:c8:29: d5:23:0b:b9:31:27:aa:1c:14:3f:0b:d8:3e:66:40: f5:02:04:5a:e4:d1:ef:69:13:39:c4:b5:ba:1e:ed: df:5a:4a:8a:40:ae:4b:e2:d2:d3:ec:3c:df:8f:51: 84:82:ce:20:95:07:a0:f6:47:23:ea:3a:6c:54:c1: 60:3d:e8:ae:11:8b:aa:92:b7:7c:47:75:aa:fe:0b: 93:b1:2e:04:fc:63:ac:61:6f:1e:4b:4b:b2:40:40: 21:e7:5c:d5:3c:4b:a1:7c:67:2d:03:a7:d2:cb:fc: b1:3e:90:97:8d:03:98:41:2d:82:72:ad:25:61:04: 2d:e8:07:41:1a:bc:40:7b:60:c4:49:34:49:15:6a: 7a:ae:c4:ce:42:a2:0c:a5:ba:19:a0:b6:a5:e3:47: be:d8:b0:4e:3b:3f:be:54:3f:fc:48:14:8e:c8:9f: ad:d3:54:a5:d7:67:e0:a9:b9:98:b5:39:ad:df:38: 5d:27:1e:88:6e:cc:29:54:39:5a:39:1d:a8:f5:52: aa:04:d7:37:a0:31:a3:5d:75:e1:2a:29:0b:9b:a6: aa:cd:a7:6c:c3:f9:c7:24:d1:f1:77:44:a4:4c:a2: 6e:96:cc:48:76:23:41:4a:3e:56:f7:55:8c:ab:fa: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EA:5F:2F:1F:BB:AD:C1:8D:A5:B5:F5:EA:68:13:AC:AF:D5:0B:69 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f6:b6:31:8b:5e:ce:ec:56:f3:c2:8a:dd:c9:ca:a0:b4:73: df:5f:8a:ef:01:a6:00:73:ba:6b:5a:ef:71:99:06:b4:fb:73: 37:29:56:d6:9a:ce:84:dd:ff:2b:61:8a:7e:9c:65:36:8f:e4: 27:ae:c3:f0:99:42:a4:a0:ec:7e:01:56:81:31:c9:0a:13:04: 7a:a3:69:b6:7b:c7:d2:22:8f:d0:bf:87:37:34:bc:e6:a9:3b: 60:c5:79:96:9d:fb:6b:c7:87:37:f9:7b:53:6f:72:1d:25:d2: d1:d0:fe:74:e8:e3:77:60:b0:b3:08:a7:ee:dc:3b:27:e7:0e: 80:96:cf:d8:55:82:50:d7:75:b6:f0:8a:0c:fc:16:fc:ed:1e: af:ce:54:5b:16:f9:21:b2:22:1c:70:e5:f7:33:fc:83:2a:2f: 71:92:3e:42:3a:36:ff:80:63:78:a1:79:bf:d5:5d:c0:d8:f3: a6:d7:cd:89:c3:ad:4d:21:b1:0d:a1:b4:69:0c:a2:67:65:81: fe:ca:fe:43:49:57:f9:16:87:d2:01:26:9b:fc:25:ed:47:dd: ee:c5:9e:18:cf:e0:d3:b7:9d:bf:21:7a:d1:88:f2:29:26:e2: 94:a2:eb:07:6d:8a:ff:77:49:99:78:09:f0:ef:50:c2:83:2b: 7b:0f:0e:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjUwNDI1MDMxMjMyWhcNMjUwNTAyMDMxMjMyWjAYMRYwFAYD VQQDEw02ODBhZmRhMC05MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLG0wsd1SvLPe4ntyCnVIwu5MSeqHBQ/C9g+ZkD1AgRa5NHvaRM5xLW6Hu3f WkqKQK5L4tLT7Dzfj1GEgs4glQeg9kcj6jpsVMFgPeiuEYuqkrd8R3Wq/guTsS4E /GOsYW8eS0uyQEAh51zVPEuhfGctA6fSy/yxPpCXjQOYQS2Ccq0lYQQt6AdBGrxA e2DESTRJFWp6rsTOQqIMpboZoLal40e+2LBOOz++VD/8SBSOyJ+t01Sl12fgqbmY tTmt3zhdJx6IbswpVDlaOR2o9VKqBNc3oDGjXXXhKikLm6aqzadsw/nHJNHxd0Sk TKJulsxIdiNBSj5W91WMq/pdowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLqXy8f u63BjaW19epoE6yv1QtpMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg9rYxi17O7FbzwordycqgtHPfX4rvAaYAc7prWu9xmQa0+3M3KVbW ms6E3f8rYYp+nGU2j+QnrsPwmUKkoOx+AVaBMckKEwR6o2m2e8fSIo/Qv4c3NLzm qTtgxXmWnftrx4c3+XtTb3IdJdLR0P506ON3YLCzCKfu3Dsn5w6Als/YVYJQ13W2 8IoM/Bb87R6vzlRbFvkhsiIccOX3M/yDKi9xkj5COjb/gGN4oXm/1V3A2POm182J w61NIbENobRpDKJnZYH+yv5DSVf5FofSASab/CXtR93uxZ4Yz+DTt52/IXrRiPIp JuKUousHbYr/d0mZeAnw71DCgyt7Dw7s -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:47 2025 by rpki-client