$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json) Hash identifier: rpHiPHfuWYtoD8vI87YEt3S7Q2J6dtfIFwfJWUzey84= Subject key identifier: AD:E6:AE:70:EA:DC:80:6A:45:38:3A:0C:D4:14:6D:76:C2:8F:60:59 Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4 Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4 Certificate serial: 0B00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft Manifest number: 0AF9 Signing time: Thu 24 Apr 2025 19:13:54 +0000 Manifest this update: Thu 24 Apr 2025 19:13:54 +0000 Manifest next update: Thu 01 May 2025 19:13:54 +0000 Files and hashes: 1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: Ef1t6pcSAz+L90os+BmybYeWpdJQ+3GfmhM1WFZlctc=) 2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: F4BgB3+37H1vj4fhyDwAENhQ6lWTOrd3il938AR6caY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2816 (0xb00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4 Validity Not Before: Apr 24 19:13:54 2025 GMT Not After : May 1 19:13:54 2025 GMT Subject: CN=680a8d72-00f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:04:d7:aa:8c:3e:fd:08:92:53:5c:f2:24: 35:19:30:2b:f0:ff:8b:9e:15:3b:e8:1c:83:18:b2: 13:51:99:30:96:f4:4c:cc:33:ec:34:02:9d:bb:3d: 72:a5:9c:93:b9:5d:00:1a:af:40:33:51:bd:ad:db: c2:1e:d6:c6:db:35:20:ba:3d:e6:40:ae:3e:cd:20: 51:46:33:df:15:07:af:81:29:72:35:7b:83:2d:af: 05:58:2c:fe:04:19:73:4e:45:53:b4:da:48:0b:97: af:9a:14:00:79:2f:bc:5b:53:02:f2:d3:5b:34:39: cd:2a:f1:30:78:b0:9b:93:2c:20:89:96:69:c5:5b: 85:95:8f:08:c0:0f:da:08:89:84:83:d4:11:ce:2e: 71:3d:ad:d2:08:4d:65:5e:99:47:96:72:c2:b6:c0: 30:35:b1:34:2c:9f:20:a2:f6:f2:14:8e:c9:29:d7: fd:e3:99:0f:3c:2d:2e:a2:8f:10:2b:b9:bc:d6:8a: 0c:c8:00:ec:4e:75:bf:53:22:17:50:b2:8c:3a:9a: 7d:80:21:49:a4:89:91:ed:69:a3:5d:37:87:76:b9: ff:c2:e5:24:4a:37:e2:c4:00:c5:3e:bf:d5:d4:bf: 07:8a:3e:0b:56:8c:2e:f3:ad:db:a1:b8:17:ed:43: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E6:AE:70:EA:DC:80:6A:45:38:3A:0C:D4:14:6D:76:C2:8F:60:59 X509v3 Authority Key Identifier: keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:0f:2c:40:4a:f1:ea:7a:cc:6e:a5:27:0e:fd:c3:6e:b0:92: b9:62:15:e7:6b:3e:72:7a:f3:33:42:f4:bf:9f:7b:aa:e7:be: 52:38:39:39:76:d9:73:cb:ff:e2:9b:e8:5a:5c:fd:9e:54:d8: 28:94:6c:b1:8f:cd:92:17:03:52:46:a6:6a:65:c3:f8:b3:75: 01:3f:80:77:dd:be:4d:e5:4a:f3:91:ca:ae:7c:14:7b:6d:16: 76:1e:dc:89:09:58:f2:54:a9:e8:bf:f8:83:50:a2:05:e2:bd: e6:6f:cf:75:f4:4c:9a:02:0a:1e:10:20:6e:89:ef:07:79:44: 62:e4:a6:b2:71:1c:12:9b:6e:bb:0d:84:77:85:e5:08:ec:37: 84:3d:fa:95:67:7a:7e:6f:78:34:b7:22:5e:34:25:42:ab:50: 99:86:f0:af:74:92:3b:9e:36:e7:0a:ff:e0:62:46:8a:6f:ee: 4b:e4:6f:d2:1e:6f:64:5f:96:73:19:b2:41:44:95:8f:cb:89: 73:b1:7d:92:04:a8:63:09:08:47:d0:48:b2:5a:89:8d:82:78: ba:3a:66:a4:f4:aa:b0:37:c4:15:cc:34:85:5c:85:af:b6:2e: 54:1f:b0:8d:ee:54:b0:01:bd:d3:7b:58:9f:ba:ff:4a:92:d5: d9:09:0c:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0NDcxMTAvBgNVBAUTKERDOThCNTQ0QjE2QzQ5QTk4REQwNTg1Q0Y5NjcyNDI2 NDE1NTJFQTQwHhcNMjUwNDI0MTkxMzU0WhcNMjUwNTAxMTkxMzU0WjAYMRYwFAYD VQQDEw02ODBhOGQ3Mi0wMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQYE16qMPv0IklNc8iQ1GTAr8P+LnhU76ByDGLITUZkwlvRMzDPsNAKduz1y pZyTuV0AGq9AM1G9rdvCHtbG2zUguj3mQK4+zSBRRjPfFQevgSlyNXuDLa8FWCz+ BBlzTkVTtNpIC5evmhQAeS+8W1MC8tNbNDnNKvEweLCbkywgiZZpxVuFlY8IwA/a CImEg9QRzi5xPa3SCE1lXplHlnLCtsAwNbE0LJ8govbyFI7JKdf945kPPC0uoo8Q K7m81ooMyADsTnW/UyIXULKMOpp9gCFJpImR7WmjXTeHdrn/wuUkSjfixADFPr/V 1L8Hij4LVowu863bobgX7UPotQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3mrnDq 3IBqRTg6DNQUbXbCj2BZMB8GA1UdIwQYMBaAFNyYtUSxbEmpjdBYXPlnJCZBVS6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTQ0Ny81RjRDNkNGMjQy NjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1NhbU4wRmhjLVdja0prRlZM cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKaTFSTEZzU2FtTjBGaGMtV2NrSmtGVkxxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTQ0Ny81RjRDNkNGMjQyNjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1Nh bU4wRmhjLVdja0prRlZMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApDyxASvHqesxupScO/cNusJK5YhXnaz5yevMzQvS/n3uq575SODk5 dtlzy//im+haXP2eVNgolGyxj82SFwNSRqZqZcP4s3UBP4B33b5N5UrzkcqufBR7 bRZ2HtyJCVjyVKnov/iDUKIF4r3mb8919EyaAgoeECBuie8HeURi5KaycRwSm267 DYR3heUI7DeEPfqVZ3p+b3g0tyJeNCVCq1CZhvCvdJI7njbnCv/gYkaKb+5L5G/S Hm9kX5ZzGbJBRJWPy4lzsX2SBKhjCQhH0EiyWomNgni6Omak9KqwN8QVzDSFXIWv ti5UH7CN7lSwAb3Te1ifuv9KktXZCQyJ -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:33 2025 by rpki-client