$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft File: 3SNdNwiQmzPViUtMzckQXGH9Fq4.mft (raw, json) Hash identifier: JCPONCy9F60cNYuOFKJiiXugsaFwFCsN8IsNB1bofiM= Subject key identifier: CC:0B:55:CE:7B:05:14:55:5E:12:39:D8:F3:DD:5D:F1:DE:E9:6B:65 Authority key identifier: DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE Certificate issuer: /CN=A91B8C13/serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft Manifest number: 0162 Signing time: Thu 24 Apr 2025 15:17:52 +0000 Manifest this update: Thu 24 Apr 2025 15:17:51 +0000 Manifest next update: Thu 01 May 2025 15:17:51 +0000 Files and hashes: 1: 3SNdNwiQmzPViUtMzckQXGH9Fq4.crl (hash: 7/ZIeUa+gapLtKi3UF009hXVRzpS195BIHoJ0Dg1KGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Validity Not Before: Apr 24 15:17:51 2025 GMT Not After : May 1 15:17:51 2025 GMT Subject: CN=680a5620-e9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:d0:26:4e:43:e0:b3:a1:ac:fb:97:16:16: 42:f5:5f:22:77:fb:1e:ad:83:6d:78:43:d3:a1:ce: 60:ed:59:c5:5c:c3:d2:7d:03:35:c3:96:1b:7b:48: 6c:06:b7:a6:6e:43:43:98:77:0d:20:09:2a:37:bc: 32:c1:70:7c:d2:ce:d0:2b:82:4c:75:c3:e8:c7:49: 8a:a5:9f:21:8c:e2:ad:5e:bd:9d:1e:0b:1e:fc:60: 08:9e:03:0c:0f:1f:0e:36:df:15:e7:69:4d:05:6d: 2c:99:f5:79:ac:32:3b:c7:7b:ee:d0:4a:bb:c4:5b: ee:ab:c0:a0:70:9d:96:d1:f6:f7:c0:9c:5d:a0:c3: 67:65:37:17:fd:85:c1:df:11:70:f2:68:fa:44:de: 58:0e:fd:ef:9e:df:82:cb:da:5f:f6:5a:4d:46:c9: 34:c2:08:05:8e:b4:0b:ed:bd:57:25:35:83:4c:11: 9d:2d:58:8b:0a:6b:07:64:f8:6e:51:1b:81:51:05: c4:2e:a7:47:b9:8a:20:03:f1:9d:11:6e:6d:97:6e: d3:4b:a8:b6:04:24:ad:bd:01:2f:ce:c4:a2:17:9b: da:57:35:1d:86:df:2a:6f:bc:27:f8:92:40:8a:dc: 5b:04:ef:59:c7:d4:c7:95:0e:d8:22:3d:9c:0a:8b: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:55:CE:7B:05:14:55:5E:12:39:D8:F3:DD:5D:F1:DE:E9:6B:65 X509v3 Authority Key Identifier: keyid:DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:8b:db:7a:f0:91:f7:aa:01:d2:89:10:64:8f:f8:15:7e:71: 9f:03:19:93:07:e6:48:37:32:7c:44:29:bb:aa:85:f5:d8:52: 1d:00:9c:67:09:a8:00:df:9b:b5:8b:d2:ca:6a:c9:3a:d0:c6: 52:2c:46:71:11:03:b6:cb:c6:f9:21:fe:53:7e:21:d7:60:2b: 30:9b:0a:b5:66:0c:7e:ae:6b:d5:64:7e:c9:75:7b:08:4d:da: 0d:6c:0e:47:1b:73:7d:a3:78:21:72:ee:06:85:37:0a:db:f3: 7b:a5:43:c8:ac:8c:66:5b:58:f0:6d:38:23:ef:9b:7b:3d:e3: 60:d4:f6:59:87:b5:f2:ae:fa:72:71:7f:2f:81:22:05:98:c0: 60:72:77:ab:7e:d6:3a:c1:e4:ac:6c:bd:32:ac:c8:9f:ef:f6: 82:f4:d6:0c:07:14:c1:df:ec:3d:d9:5f:3e:e9:ce:cc:40:51: 8e:54:80:86:8f:91:13:d9:df:2a:c8:7b:c7:b4:c6:58:3d:97: 34:69:45:bd:c2:72:72:d0:ae:86:48:a8:aa:58:8c:1c:3f:8d: b4:20:bd:2f:50:69:a4:34:dd:a2:9d:c9:f3:85:ca:a5:a2:4b: 12:15:0e:34:4c:85:45:68:8d:80:3f:b3:76:0a:6d:93:bd:16: 6a:53:b6:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEREMjM1RDM3MDg5MDlCMzNENTg5NEI0Q0NEQzkxMDVD NjFGRDE2QUUwHhcNMjUwNDI0MTUxNzUxWhcNMjUwNTAxMTUxNzUxWjAYMRYwFAYD VQQDEw02ODBhNTYyMC1lOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2TQJk5D4LOhrPuXFhZC9V8id/serYNteEPToc5g7VnFXMPSfQM1w5Ybe0hs BrembkNDmHcNIAkqN7wywXB80s7QK4JMdcPox0mKpZ8hjOKtXr2dHgse/GAIngMM Dx8ONt8V52lNBW0smfV5rDI7x3vu0Eq7xFvuq8CgcJ2W0fb3wJxdoMNnZTcX/YXB 3xFw8mj6RN5YDv3vnt+Cy9pf9lpNRsk0wggFjrQL7b1XJTWDTBGdLViLCmsHZPhu URuBUQXELqdHuYogA/GdEW5tl27TS6i2BCStvQEvzsSiF5vaVzUdht8qb7wn+JJA itxbBO9Zx9THlQ7YIj2cCotx6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwLVc57 BRRVXhI52PPdXfHe6WtlMB8GA1UdIwQYMBaAFN0jXTcIkJsz1YlLTM3JEFxh/Rau MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9EMDYxMTcxNjBC MkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16UFZpVXRNemNrUVhHSDlG cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNTTmROd2lRbXpQVmlVdE16Y2tRWEdIOUZxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9EMDYxMTcxNjBCMkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16 UFZpVXRNemNrUVhHSDlGcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFi9t68JH3qgHSiRBkj/gVfnGfAxmTB+ZINzJ8RCm7qoX12FIdAJxn CagA35u1i9LKask60MZSLEZxEQO2y8b5If5TfiHXYCswmwq1Zgx+rmvVZH7JdXsI TdoNbA5HG3N9o3ghcu4GhTcK2/N7pUPIrIxmW1jwbTgj75t7PeNg1PZZh7Xyrvpy cX8vgSIFmMBgcnerftY6weSsbL0yrMif7/aC9NYMBxTB3+w92V8+6c7MQFGOVICG j5ET2d8qyHvHtMZYPZc0aUW9wnJy0K6GSKiqWIwcP420IL0vUGmkNN2incnzhcql oksSFQ40TIVFaI2AP7N2Cm2TvRZqU7bb -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:35 2025 by rpki-client