$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: W3A3umXKKU+HGAePrspf3biJWH4mgbR7WQzpwAq4/Uc= Subject key identifier: 04:42:19:93:FE:59:82:88:9A:FF:47:7E:E8:EA:CE:53:42:28:54:4E Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 0196 Signing time: Fri 25 Apr 2025 03:05:19 +0000 Manifest this update: Fri 25 Apr 2025 03:05:19 +0000 Manifest next update: Fri 02 May 2025 03:05:19 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: aJIOPObKV7Mz3ojjXZRiAbeNY5OauoOJkNI2VSWMZDs=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: q2jyIpsgOSZMDylILKfsOrMIus5pnrAFZdrI/kJzgvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Apr 25 03:05:19 2025 GMT Not After : May 2 03:05:19 2025 GMT Subject: CN=680afbef-88a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:58:b4:cd:a5:fa:c9:8d:73:28:f6:df:9e: 8a:c3:4b:da:82:ee:e1:e8:0a:80:2b:89:e5:9b:5f: 09:46:b9:9a:da:d4:8b:36:c8:fc:df:1e:34:e7:84: bf:32:8f:16:71:e7:48:97:f4:37:9a:41:c6:3f:28: c3:0a:52:ca:1c:60:d1:04:9e:1e:b7:02:bb:ef:fa: 8b:19:80:5e:09:e5:50:3c:51:f1:86:ae:44:44:48: 69:f8:28:1a:15:a1:c2:35:a1:af:f1:4b:df:51:fb: f1:27:80:18:8e:e4:40:a1:9c:84:07:cb:bd:96:e1: 7e:a7:0e:b9:82:a0:f6:4b:f6:11:e4:9f:86:56:9c: 94:b2:75:61:e7:b3:36:5d:49:a5:b8:54:25:9b:bb: f0:aa:cd:b4:de:93:38:69:49:9f:d3:01:e6:fd:c7: bd:1c:bf:88:b4:c8:28:e5:69:dc:5a:17:a1:62:67: 07:c9:3c:83:61:f3:01:1b:41:53:da:99:ba:a7:1c: 7d:0d:dd:cc:02:b7:46:0e:9b:e9:03:ac:a0:d9:70: 42:68:e0:c9:a4:64:d0:78:f7:e2:22:b4:f5:83:fa: e6:49:f4:2d:07:a6:8a:2f:22:50:e6:ed:07:97:9c: c6:f2:84:df:85:f9:04:ee:03:94:3b:e9:c0:8d:c2: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:19:93:FE:59:82:88:9A:FF:47:7E:E8:EA:CE:53:42:28:54:4E X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:92:c1:14:19:8d:87:ef:a1:94:6c:71:5c:64:bf:42:9a:2a: 3c:f6:f3:af:a7:8c:31:cf:d4:e6:a4:21:20:30:14:ca:5c:58: e2:43:05:93:34:3d:eb:d2:a5:f9:7a:eb:7b:bb:49:d5:46:43: 2b:90:43:f9:20:7c:ac:cc:e7:b0:ba:52:62:c6:3c:df:76:eb: d0:bf:26:f4:ea:e8:50:a4:d2:6d:f5:18:36:f6:d4:a1:84:a7: 08:b2:ee:84:98:b4:1a:48:f7:df:34:cd:54:a3:17:92:16:a0: fb:20:59:bc:32:ec:f4:a1:c0:8a:f4:31:94:fb:84:a5:7e:19: a1:02:d7:7d:ac:a5:91:f6:df:54:23:1f:bd:46:fa:5b:da:57: 31:da:2b:ea:7f:16:85:34:54:29:34:d1:d4:75:cc:9c:85:8c: ff:6d:e2:6d:3a:4f:83:a3:f5:bd:27:f0:fb:5c:e1:14:52:2e: 52:14:45:8e:5b:b3:19:7f:d9:de:bc:24:4b:eb:f3:9b:73:d4: e0:49:da:ac:2c:e6:7d:24:77:77:b0:1f:d3:7b:d7:39:94:29: 8d:23:c4:2d:23:6e:e5:4e:bb:63:31:bf:41:81:17:15:9c:89: 75:2d:23:0f:ac:ba:c5:85:18:59:af:d2:c3:c3:ee:f0:38:5c: 9f:e8:51:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjUwNDI1MDMwNTE5WhcNMjUwNTAyMDMwNTE5WjAYMRYwFAYD VQQDEw02ODBhZmJlZi04OGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBdYtM2l+smNcyj2356Kw0vagu7h6AqAK4nlm18JRrma2tSLNsj83x4054S/ Mo8WcedIl/Q3mkHGPyjDClLKHGDRBJ4etwK77/qLGYBeCeVQPFHxhq5EREhp+Cga FaHCNaGv8UvfUfvxJ4AYjuRAoZyEB8u9luF+pw65gqD2S/YR5J+GVpyUsnVh57M2 XUmluFQlm7vwqs203pM4aUmf0wHm/ce9HL+ItMgo5WncWhehYmcHyTyDYfMBG0FT 2pm6pxx9Dd3MArdGDpvpA6yg2XBCaODJpGTQePfiIrT1g/rmSfQtB6aKLyJQ5u0H l5zG8oTfhfkE7gOUO+nAjcJxdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARCGZP+ WYKImv9HfujqzlNCKFROMB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIksEUGY2H76GUbHFcZL9Cmio89vOvp4wxz9TmpCEgMBTKXFjiQwWT ND3r0qX5eut7u0nVRkMrkEP5IHyszOewulJixjzfduvQvyb06uhQpNJt9Rg29tSh hKcIsu6EmLQaSPffNM1UoxeSFqD7IFm8Muz0ocCK9DGU+4SlfhmhAtd9rKWR9t9U Ix+9Rvpb2lcx2ivqfxaFNFQpNNHUdcychYz/beJtOk+Do/W9J/D7XOEUUi5SFEWO W7MZf9nevCRL6/Obc9TgSdqsLOZ9JHd3sB/Te9c5lCmNI8QtI27lTrtjMb9BgRcV nIl1LSMPrLrFhRhZr9LDw+7wOFyf6FGV -----END CERTIFICATE-----Generated at Sat Apr 26 05:25:36 2025 by rpki-client