$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: q4wMeCjXA8fjkF0Om82I8TFqgrOrOR93lWJaNni4evM= Subject key identifier: 20:18:F6:25:1D:85:97:B7:00:2C:6A:2A:8D:11:92:8D:2B:46:6A:13 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3481 Signing time: Sat 26 Apr 2025 14:34:51 +0000 Manifest this update: Sat 26 Apr 2025 14:34:51 +0000 Manifest next update: Sat 03 May 2025 14:34:51 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: rsUZLhIkJZhxwJG7jLH2gQd6vX+coba1e1MWH4a0L/Q=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco=) 3: 673DC29606B011EFA665703AC4F9AE02.roa (hash: F5Zy7dXCYPL9clQFpPmuH37XP7Qhuqmf+NBAd1W/CM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Apr 26 14:34:51 2025 GMT Not After : May 3 14:34:51 2025 GMT Subject: CN=680cef0b-1cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:83:67:5e:43:1e:0d:d7:74:31:8e:b9:23: 99:32:f8:0b:32:04:bf:55:ea:08:7c:46:e2:5d:ac: 28:c5:03:33:97:87:e3:d6:93:a8:f3:4a:88:a7:0e: 92:65:49:49:2f:0a:f1:c8:9a:a9:ed:2a:9d:b1:ef: 49:0a:65:d1:ab:92:26:64:c4:21:91:51:8e:f1:9e: b0:29:3b:ec:96:a9:e4:7f:c5:33:cb:51:98:1f:28: 29:ea:97:c6:ee:14:16:7a:ff:f3:60:14:11:14:5b: 42:9f:7e:62:5f:28:d0:c9:61:7c:a6:c7:7c:35:ce: 21:55:ba:62:3f:8e:ab:05:4e:c4:aa:ba:2f:0b:3a: b6:50:70:32:31:0e:c6:2b:bf:f9:9b:f9:ec:ec:5a: cb:eb:e3:9b:db:f4:79:d9:ce:42:e2:ab:a4:7a:b5: b4:73:87:8c:c2:43:29:20:0d:b0:d5:69:28:56:88: fb:9a:01:b9:ad:03:c6:73:2b:ee:65:b7:0c:77:a7: ac:e6:97:44:be:43:70:e9:89:1d:48:4d:95:e3:d8: e1:01:8c:80:54:e3:92:8c:5c:15:3a:3f:aa:04:b4: 1b:5d:a6:7b:67:08:93:52:95:b4:b0:b6:84:4c:b3: be:dd:3e:d1:06:49:fd:43:b6:d9:ba:d2:a1:63:44: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:18:F6:25:1D:85:97:B7:00:2C:6A:2A:8D:11:92:8D:2B:46:6A:13 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:85:a1:cc:ae:03:61:09:18:ad:84:9e:e8:b6:72:d9:fa:73: cb:13:16:7e:72:51:da:5b:d5:23:47:bd:86:69:78:3f:e4:ac: 39:43:e7:49:2e:37:c1:04:b2:4a:fd:51:64:b8:e9:f6:cc:76: 01:27:77:4a:8b:e2:61:ac:f6:e8:1b:3d:14:1c:b7:70:1a:58: 65:50:93:ae:f5:4b:59:dd:09:83:75:c4:b8:10:62:6b:1d:c2: 81:cf:1d:6a:ca:de:e8:1c:88:31:33:af:fb:f6:39:66:a2:33: 58:d0:d2:3b:f2:d4:4e:b5:2d:36:8f:56:58:c4:14:bb:75:d2: 25:15:56:6e:d6:3c:15:a2:0a:26:54:62:bb:ef:a9:48:d6:c7: 5a:08:56:df:c4:13:cc:b4:2d:18:68:6c:96:ff:d3:70:5d:a9: 7f:ae:e0:6c:6a:db:74:a8:ca:7f:27:81:4a:cf:8d:86:6a:b6: 40:fe:5c:61:a7:e1:93:24:3a:e6:00:e6:8f:d2:e3:36:34:13: 8f:2d:4d:04:bf:2d:e5:3b:99:8e:44:f9:ee:bd:2b:50:70:d2: 18:7a:78:6e:06:0b:de:71:1b:52:3f:02:ef:7f:dc:21:ea:66: b9:04:f9:47:69:a6:0f:e5:04:c2:8b:0c:82:1a:54:25:ae:9f: 74:99:fc:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUwNDI2MTQzNDUxWhcNMjUwNTAzMTQzNDUxWjAYMRYwFAYD VQQDEw02ODBjZWYwYi0xY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwmDZ15DHg3XdDGOuSOZMvgLMgS/VeoIfEbiXawoxQMzl4fj1pOo80qIpw6S ZUlJLwrxyJqp7Sqdse9JCmXRq5ImZMQhkVGO8Z6wKTvslqnkf8Uzy1GYHygp6pfG 7hQWev/zYBQRFFtCn35iXyjQyWF8psd8Nc4hVbpiP46rBU7EqrovCzq2UHAyMQ7G K7/5m/ns7FrL6+Ob2/R52c5C4qukerW0c4eMwkMpIA2w1WkoVoj7mgG5rQPGcyvu ZbcMd6es5pdEvkNw6YkdSE2V49jhAYyAVOOSjFwVOj+qBLQbXaZ7ZwiTUpW0sLaE TLO+3T7RBkn9Q7bZutKhY0QdcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAY9iUd hZe3ACxqKo0Rko0rRmoTMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBphaHMrgNhCRithJ7otnLZ+nPLExZ+clHaW9UjR72GaXg/5Kw5Q+dJ LjfBBLJK/VFkuOn2zHYBJ3dKi+JhrPboGz0UHLdwGlhlUJOu9UtZ3QmDdcS4EGJr HcKBzx1qyt7oHIgxM6/79jlmojNY0NI78tROtS02j1ZYxBS7ddIlFVZu1jwVogom VGK776lI1sdaCFbfxBPMtC0YaGyW/9NwXal/ruBsatt0qMp/J4FKz42GarZA/lxh p+GTJDrmAOaP0uM2NBOPLU0Evy3lO5mORPnuvStQcNIYenhuBgvecRtSPwLvf9wh 6ma5BPlHaaYP5QTCiwyCGlQlrp90mfz4 -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:16 2025 by rpki-client