$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: KgommenOumuPPjghoktGj9+euzYYgseFjz0VqR5KaWs= Subject key identifier: 01:E7:17:3A:2A:04:EC:21:7C:B0:44:54:C5:E8:ED:CF:49:D6:BA:83 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: C7 Signing time: Fri 25 Apr 2025 04:49:09 +0000 Manifest this update: Fri 25 Apr 2025 04:49:09 +0000 Manifest next update: Fri 02 May 2025 04:49:09 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: kScWs2XthVzRJi1GSGEeY56D4ygmypwOWEK9vNGH72k=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: oRCouiUpGQ/m6gpchET77aGzx6bi1ujY4xCm3A9vvYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Apr 25 04:49:09 2025 GMT Not After : May 2 04:49:09 2025 GMT Subject: CN=680b1445-ee7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:5a:48:6f:73:af:0c:c1:a1:4e:6f:50:92: 09:57:c6:a0:96:6c:b0:ee:14:c6:2a:ed:41:98:7f: 88:93:b9:7a:61:5e:33:46:f1:46:85:d0:1f:78:3d: 66:37:d3:fc:53:1d:2d:02:b8:96:ad:ca:96:6e:8a: f1:e9:02:af:e1:d6:5d:68:e8:3d:97:71:f5:cb:83: 54:a3:51:5f:e8:92:22:b0:bf:89:44:7b:c5:3d:eb: 92:6a:7b:17:0e:5d:66:50:c8:bc:48:f1:54:a8:0a: 93:ea:21:24:77:f1:84:57:61:8e:15:4f:18:b5:14: 2b:0b:c4:2d:b5:8a:06:89:09:50:13:dd:0d:6a:c1: 24:09:b9:15:c7:84:71:ba:8c:34:63:f7:88:41:61: 4c:8a:f2:05:ec:e4:e2:92:85:8e:e3:c4:42:9f:3f: 92:66:c6:5c:52:82:14:1e:db:c5:77:1f:d1:a1:a5: 82:41:28:b5:a1:7f:7f:bf:0a:70:f2:5c:ab:9c:fd: ef:63:28:de:df:88:81:5f:72:ba:94:af:34:2d:46: a6:ac:ba:6a:9f:dc:5a:d9:b6:f0:53:82:7c:eb:05: 31:f8:8b:83:fa:73:b1:40:7a:f5:a3:c2:bf:38:ef: 5e:c6:31:09:89:6d:6a:5a:b0:26:6c:c6:f6:eb:74: 18:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E7:17:3A:2A:04:EC:21:7C:B0:44:54:C5:E8:ED:CF:49:D6:BA:83 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0c:bc:b9:31:56:ee:c9:9e:90:66:f6:46:ed:94:35:15:32: 80:2f:9c:21:b8:ec:b7:46:71:2c:3f:15:30:92:9f:cc:01:02: 1b:52:b2:bd:15:73:2b:83:ec:8d:32:c3:47:a4:2b:a1:0b:4d: a6:ae:e1:f4:15:96:77:dd:2e:4b:93:80:42:43:5c:d7:f4:58: f7:93:54:97:1d:c9:6b:30:3b:4c:fe:f1:a1:d3:16:e3:4d:00: 65:95:44:57:fe:74:9a:0d:42:f4:f2:3a:9b:b5:bd:10:8e:1d: e1:8e:47:ef:13:fd:5b:49:d8:52:dd:18:02:ef:24:ea:6b:78: 1e:6d:a9:30:f9:7f:e0:fa:36:2b:ac:0c:5c:bc:4d:40:c6:7d: 60:8c:72:df:ab:33:b0:35:a5:1b:b1:6f:ac:77:fc:21:17:2d: 9f:71:54:ce:98:8a:5f:4a:44:2c:db:2d:67:1c:1d:0d:5a:36: 7e:b8:8c:9c:8c:9a:76:aa:65:65:e6:71:3e:04:77:ae:3e:6d: 6b:8a:b9:c0:00:7f:90:19:95:6e:31:61:d5:87:9b:24:e4:b3: 92:5d:8b:3c:d7:55:4f:e6:cd:ae:38:72:80:41:03:6a:62:d3: bc:09:a1:55:db:34:5e:6c:de:41:4c:53:de:a1:3c:5a:9f:4f: d8:30:60:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjUwNDI1MDQ0OTA5WhcNMjUwNTAyMDQ0OTA5WjAYMRYwFAYD VQQDEw02ODBiMTQ0NS1lZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoRaSG9zrwzBoU5vUJIJV8aglmyw7hTGKu1BmH+Ik7l6YV4zRvFGhdAfeD1m N9P8Ux0tAriWrcqWborx6QKv4dZdaOg9l3H1y4NUo1Ff6JIisL+JRHvFPeuSansX Dl1mUMi8SPFUqAqT6iEkd/GEV2GOFU8YtRQrC8QttYoGiQlQE90NasEkCbkVx4Rx uow0Y/eIQWFMivIF7OTikoWO48RCnz+SZsZcUoIUHtvFdx/RoaWCQSi1oX9/vwpw 8lyrnP3vYyje34iBX3K6lK80LUamrLpqn9xa2bbwU4J86wUx+IuD+nOxQHr1o8K/ OO9exjEJiW1qWrAmbMb263QYNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHnFzoq BOwhfLBEVMXo7c9J1rqDMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8DLy5MVbuyZ6QZvZG7ZQ1FTKAL5whuOy3RnEsPxUwkp/MAQIbUrK9 FXMrg+yNMsNHpCuhC02mruH0FZZ33S5Lk4BCQ1zX9Fj3k1SXHclrMDtM/vGh0xbj TQBllURX/nSaDUL08jqbtb0Qjh3hjkfvE/1bSdhS3RgC7yTqa3gebakw+X/g+jYr rAxcvE1Axn1gjHLfqzOwNaUbsW+sd/whFy2fcVTOmIpfSkQs2y1nHB0NWjZ+uIyc jJp2qmVl5nE+BHeuPm1rirnAAH+QGZVuMWHVh5sk5LOSXYs811VP5s2uOHKAQQNq YtO8CaFV2zRebN5BTFPeoTxan0/YMGAj -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:15 2025 by rpki-client