$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json) Hash identifier: HyzgwqKwLRp+L5VXLisPvEGASjkXy8NFG0OQsw0wSLk= Subject key identifier: 03:AD:BE:B6:62:93:FD:80:70:B4:5E:18:00:F5:37:4D:46:72:FA:83 Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft Manifest number: 28 Signing time: Fri 25 Apr 2025 06:44:11 +0000 Manifest this update: Fri 25 Apr 2025 06:44:10 +0000 Manifest next update: Fri 02 May 2025 06:44:10 +0000 Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: dm1sZs42KHU+WiJNKzza/E8A+MD5kVVz/mIihMZoeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Apr 25 06:44:10 2025 GMT Not After : May 2 06:44:10 2025 GMT Subject: CN=680b2f3a-5c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:0d:ee:85:69:37:69:44:7a:61:3b:b9:07: 13:04:fd:8c:c5:8d:70:0b:83:63:72:ab:bf:d5:21: 84:0c:a8:d0:22:65:d9:e7:8f:e9:ae:5e:ea:10:b4: 1e:cc:3a:e2:d9:e9:d3:70:73:b5:2c:55:c6:45:72: 28:3f:9a:3f:25:6f:43:2e:87:06:b1:a2:2a:eb:91: 8a:04:26:5f:d7:96:13:41:49:a9:9f:e5:4f:05:61: 54:00:e2:77:38:1e:7b:9e:38:ae:99:cb:3e:ae:cb: e6:2a:33:1f:41:a2:4c:80:f7:8e:bf:cd:5f:92:86: 23:87:5c:a1:38:d3:b5:f5:10:f4:6c:c0:78:03:4f: f7:4b:f5:8d:11:79:a1:32:29:e7:ff:7c:5d:80:ba: df:7d:ea:4c:de:fb:43:80:36:e0:79:e0:af:37:ff: e1:2a:0c:0d:f3:d7:9f:c4:0c:a1:e7:60:38:bd:c5: f0:59:ab:86:f7:78:a7:4b:47:36:91:8b:6e:62:56: df:d5:59:e4:a7:53:12:b5:55:76:92:33:a5:3d:3b: 3f:29:24:19:af:8d:44:c5:4f:08:5a:a9:78:db:dc: 56:33:07:3a:62:4f:8f:4d:8d:bc:63:d5:dd:08:40: 62:23:da:31:04:00:fa:37:f4:13:6c:b5:29:2c:fc: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AD:BE:B6:62:93:FD:80:70:B4:5E:18:00:F5:37:4D:46:72:FA:83 X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:1f:4b:23:f2:50:f5:47:03:e2:66:de:10:5b:88:28:4b:6b: 7b:bf:fc:4e:53:40:cd:9f:8f:d4:af:f2:e2:50:c2:6f:64:2c: fb:78:ba:e3:ef:19:8f:06:15:ef:74:b6:1c:31:fd:27:50:79: b3:e4:14:d7:15:54:f2:d5:c1:5d:4b:82:4e:b1:6a:35:2b:19: 37:9d:53:72:7c:1c:d6:16:c1:ae:7d:9a:6c:12:80:64:08:48: 93:d9:bc:27:93:8f:93:37:70:e3:a8:17:8a:48:37:95:01:43: 10:3e:79:8e:2a:5f:f8:74:0c:09:21:79:8a:30:2a:08:15:51: 2c:78:4f:06:0b:df:34:64:94:fe:8f:03:fa:19:9e:c9:40:ed: bb:97:fe:50:7b:11:bb:06:8e:51:e5:d6:58:4b:df:a2:69:5f: e2:5c:d1:45:7d:37:39:4e:e6:77:1e:92:bb:1a:ab:69:1f:fd: 7d:04:4a:0d:22:be:b8:12:7e:d8:f7:ab:3e:82:c4:6e:31:74: a1:10:07:dc:a2:74:15:3b:7f:d7:de:dd:d3:a5:b0:52:10:54: ad:c9:c3:d8:fc:86:72:7b:46:59:9a:2e:a0:bc:78:dd:89:88: 70:95:75:7d:7c:f3:7f:ce:90:41:1e:ce:5e:dc:cf:9c:7b:59: 56:94:3f:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzI3MzExMC8GA1UEBRMoRERBNDlGNDFGNjE4QTU1RjlDQTdDRkM1NUJBRUE3QjYx NkQ5NTc2MjAeFw0yNTA0MjUwNjQ0MTBaFw0yNTA1MDIwNjQ0MTBaMBgxFjAUBgNV BAMTDTY4MGIyZjNhLTVjN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzXw3uhWk3aUR6YTu5BxME/YzFjXALg2Nyq7/VIYQMqNAiZdnnj+muXuoQtB7M OuLZ6dNwc7UsVcZFcig/mj8lb0MuhwaxoirrkYoEJl/XlhNBSamf5U8FYVQA4nc4 HnueOK6Zyz6uy+YqMx9BokyA946/zV+ShiOHXKE407X1EPRswHgDT/dL9Y0ReaEy Kef/fF2Aut996kze+0OANuB54K83/+EqDA3z15/EDKHnYDi9xfBZq4b3eKdLRzaR i25iVt/VWeSnUxK1VXaSM6U9Oz8pJBmvjUTFTwhaqXjb3FYzBzpiT49Njbxj1d0I QGIj2jEEAPo39BNstSks/ONxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA62+tmKT /YBwtF4YAPU3TUZy+oMwHwYDVR0jBBgwFoAU3aSfQfYYpV+cp8/FW66nthbZV2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MjczL0ZDNTA1MDBFRTc3 MTExRUY5REZCREQ1MEM0RjlBRTAyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2FTZlFmWVlwVi1jcDhfRlc2Nm50aGJaVjJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MjczL0ZDNTA1MDBFRTc3MTExRUY5REZCREQ1MEM0RjlBRTAyLzNhU2ZRZllZcFYt Y3A4X0ZXNjZudGhiWlYySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQfSyPyUPVHA+Jm3hBbiChLa3u//E5TQM2fj9Sv8uJQwm9kLPt4uuPv GY8GFe90thwx/SdQebPkFNcVVPLVwV1Lgk6xajUrGTedU3J8HNYWwa59mmwSgGQI SJPZvCeTj5M3cOOoF4pIN5UBQxA+eY4qX/h0DAkheYowKggVUSx4TwYL3zRklP6P A/oZnslA7buX/lB7EbsGjlHl1lhL36JpX+Jc0UV9NzlO5ncekrsaq2kf/X0ESg0i vrgSftj3qz6CxG4xdKEQB9yidBU7f9fe3dOlsFIQVK3Jw9j8hnJ7RlmaLqC8eN2J iHCVdX1883/OkEEezl7cz5x7WVaUP28= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:32 2025 by rpki-client