$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: /BoTV4fJjcWhwjXsj1QuW1O3G3EV/sD8egX7+InUA80= Subject key identifier: 94:2C:BE:B4:7B:88:98:20:0C:9B:92:E4:83:00:77:C3:B3:11:C1:16 Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 012E Signing time: Fri 25 Apr 2025 03:37:28 +0000 Manifest this update: Fri 25 Apr 2025 03:37:28 +0000 Manifest next update: Fri 02 May 2025 03:37:27 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: zAph4DqMGfA+wtCy/to1URrHeGX6q/1RlCH+AH2oiTk=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: Apr 25 03:37:28 2025 GMT Not After : May 2 03:37:27 2025 GMT Subject: CN=680b0378-7000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:d0:e8:c3:0d:67:30:93:5f:64:f3:51:23: 8f:61:38:3e:fa:42:5b:94:1a:4e:30:1e:41:5e:97: c9:ea:70:03:0e:e6:b9:5e:db:85:e5:38:8c:23:e2: 86:97:b0:bf:b1:e3:17:e0:61:e6:72:90:7f:22:b1: b3:ef:29:f9:cf:d5:50:f9:36:e6:f7:d8:74:f9:0c: 0d:4e:4a:18:0f:63:19:ae:9c:9a:8a:50:68:d6:db: 92:09:8d:f0:51:69:69:03:d2:b0:83:2a:05:38:1f: 1c:c1:f3:8c:17:cd:ec:84:79:01:78:1b:3a:72:80: 15:96:21:32:33:7c:ba:4b:14:37:d1:83:d9:d0:cb: 30:be:76:70:d5:0b:3a:d4:0f:9f:6a:39:7f:db:c9: 7d:76:b6:5c:e0:47:66:65:43:fc:35:b1:d7:7c:25: 96:cd:b6:85:b6:c3:49:32:10:df:93:b7:1c:8c:ac: 18:24:83:7e:6e:ab:36:47:d1:4e:8a:ed:fe:b3:56: 74:64:2e:22:dc:71:d1:b2:02:cb:bd:7a:9c:43:56: 3b:a7:b6:c3:73:98:db:74:6d:03:8c:b6:d0:dc:b5: 0f:5e:64:38:37:1f:c6:f2:32:e2:2c:58:52:af:ef: be:45:ec:43:72:8d:94:81:9e:0e:c5:c3:18:72:53: 4f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2C:BE:B4:7B:88:98:20:0C:9B:92:E4:83:00:77:C3:B3:11:C1:16 X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:43:47:3e:f8:a0:8c:27:48:d8:87:9f:1d:18:9e:bc:f4:4f: a7:ee:99:fb:2f:dd:16:7f:09:ff:82:41:9c:1d:53:67:27:13: 0d:c9:d3:61:ea:a4:61:ae:df:2a:d2:87:8f:aa:92:2c:75:47: c1:90:bc:1f:31:7e:b4:e4:e0:7f:c5:5d:b5:92:be:9e:c5:fa: 45:3c:12:4c:c5:5f:27:c1:a5:d1:61:9a:77:9a:e7:6b:81:1a: 14:47:f7:83:3f:55:1f:67:5f:a1:16:4a:22:0a:41:23:0b:e0: 42:b0:a9:37:69:8a:ca:25:e2:78:d6:ff:1c:5b:5b:54:cf:c2: bd:5c:17:91:bb:82:10:c6:4b:de:e7:8f:e0:3a:2e:96:a9:9f: 9d:ef:2d:15:f1:c3:d1:bf:7e:ab:10:ee:8b:8a:e4:ca:07:d1: 8f:27:b5:68:5d:1e:a7:e2:c2:3d:71:61:ca:ec:83:68:df:09: 13:76:d3:c8:b3:e5:64:a6:12:26:ce:04:91:58:e4:c1:d2:ec: 6d:af:11:99:24:a6:b7:01:b7:79:2c:c4:a6:70:ab:f8:fc:b2: db:98:56:4d:43:04:7f:9b:99:a5:56:6c:1f:a8:cc:f5:15:32: 96:25:6d:bb:5e:16:63:cc:da:7d:a7:86:92:07:9f:2f:99:c9: 57:c3:a2:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUwNDI1MDMzNzI4WhcNMjUwNTAyMDMzNzI3WjAYMRYwFAYD VQQDEw02ODBiMDM3OC03MDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG3Q6MMNZzCTX2TzUSOPYTg++kJblBpOMB5BXpfJ6nADDua5XtuF5TiMI+KG l7C/seMX4GHmcpB/IrGz7yn5z9VQ+Tbm99h0+QwNTkoYD2MZrpyailBo1tuSCY3w UWlpA9KwgyoFOB8cwfOMF83shHkBeBs6coAVliEyM3y6SxQ30YPZ0MswvnZw1Qs6 1A+fajl/28l9drZc4EdmZUP8NbHXfCWWzbaFtsNJMhDfk7ccjKwYJIN+bqs2R9FO iu3+s1Z0ZC4i3HHRsgLLvXqcQ1Y7p7bDc5jbdG0DjLbQ3LUPXmQ4Nx/G8jLiLFhS r+++RexDco2UgZ4OxcMYclNP6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQsvrR7 iJggDJuS5IMAd8OzEcEWMB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxQ0c++KCMJ0jYh58dGJ689E+n7pn7L90Wfwn/gkGcHVNnJxMNydNh 6qRhrt8q0oePqpIsdUfBkLwfMX605OB/xV21kr6exfpFPBJMxV8nwaXRYZp3mudr gRoUR/eDP1UfZ1+hFkoiCkEjC+BCsKk3aYrKJeJ41v8cW1tUz8K9XBeRu4IQxkve 54/gOi6WqZ+d7y0V8cPRv36rEO6LiuTKB9GPJ7VoXR6n4sI9cWHK7INo3wkTdtPI s+VkphImzgSRWOTB0uxtrxGZJKa3Abd5LMSmcKv4/LLbmFZNQwR/m5mlVmwfqMz1 FTKWJW27XhZjzNp9p4aSB58vmclXw6Ly -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:07 2025 by rpki-client