$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: TjRLMEHWn69UJKHN5jFIJNfgEgGcTB7iAszyPcbbb9Y= Subject key identifier: 15:28:5F:01:BF:A6:8F:93:F1:F9:BF:23:57:B8:22:56:2E:F8:51:34 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 347C Signing time: Thu 24 Apr 2025 14:27:48 +0000 Manifest this update: Thu 24 Apr 2025 14:27:48 +0000 Manifest next update: Thu 01 May 2025 14:27:48 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: CFLe369+74ELeohTbkS0dkMSlHvc/BXZkDoYdFV7Zh0=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: t/ROOpg/IwC6W3DYUfJyZ4y/FXhn7ZuftkL+LfoKWRk=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: ea8eMteisHvIepMEhAjTnxYwI9xVzRVN61pc6MiuWHw=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: kZY0gEYojacBpy6Flxbc6cWYiWfgAwQSMnYX8MagWhA=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: wkkagOsbEtkABMZzn1UGFfhIBhIKqyHgBeARkv/JwZI=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: L8G18w6rwaHmMSrJokPAC0OZq/Tml3UVjCIQ2Q/Hgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13457 (0x3491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Apr 24 14:27:48 2025 GMT Not After : May 1 14:27:48 2025 GMT Subject: CN=680a4a64-c32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:21:8d:8b:21:9f:26:25:75:a9:33:f2:16: 11:94:79:80:32:00:0f:bd:5e:ab:be:9f:85:27:89: 70:1a:fc:df:a7:85:35:b7:9f:12:42:c9:fe:ea:8b: d8:c0:6a:2e:68:6e:c7:45:2b:f3:84:8f:5a:9c:89: f6:d7:29:9a:50:3e:17:87:fc:1d:d6:e6:32:1a:70: f4:83:43:a7:44:63:6c:99:d6:71:fb:b9:36:b3:f4: 87:a8:98:ec:31:c2:d4:53:b1:4f:d1:4e:47:b7:0d: b1:4c:d2:b6:4c:85:5f:66:2c:3c:cb:7e:c0:ed:60: a1:5f:eb:2f:2e:8a:f7:ac:d2:c0:3c:d1:21:cb:b2: 3c:97:90:fa:4d:f9:14:39:f7:5c:b9:53:13:76:c3: 7a:6f:20:4c:c1:bd:65:b0:18:41:3d:8c:50:30:56: e3:4b:eb:26:85:90:29:0c:ea:5a:80:de:dc:5a:c3: 1a:ed:92:5d:86:b7:7e:f1:71:f0:fe:0f:7c:31:cf: a8:ff:a3:ec:18:ad:ec:52:e8:ea:df:4d:5a:0b:b2: 4e:95:9e:cd:eb:25:56:04:ab:cb:b3:86:ff:6b:84: 41:a3:4d:fc:27:ad:70:3a:a5:6b:e7:3e:a6:2f:83: e9:8b:e3:21:67:e0:a8:9b:47:7d:7a:31:40:3f:41: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:28:5F:01:BF:A6:8F:93:F1:F9:BF:23:57:B8:22:56:2E:F8:51:34 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bf:2d:cc:18:bf:e2:f2:f1:2e:7b:31:a5:ae:3c:8c:a1:9d: a4:a3:16:21:32:56:03:ef:6e:ef:c7:8c:7d:93:2e:3a:34:75: 78:8d:6c:3f:37:cd:c2:94:74:7e:8f:75:59:5d:f8:87:ab:89: 48:9c:16:2f:89:32:5d:df:c3:ab:ac:10:b7:b8:cc:aa:7d:9c: 58:35:71:d1:a0:d8:ff:7d:c0:be:24:59:38:91:d5:d7:0a:df: 00:a8:d6:69:51:8d:77:ca:9b:7f:eb:f1:fd:92:10:d2:7c:47: 84:6f:88:35:aa:54:9c:b0:e9:23:85:4b:4a:56:95:a0:09:73: b5:ee:1c:7c:54:ee:76:23:28:4b:39:9b:d6:01:03:1f:85:bc: 60:c5:bd:12:2f:da:e8:78:2e:7c:d6:a6:9b:71:dc:55:77:54: f4:11:b7:12:7f:37:64:ac:58:0b:ba:da:ee:9c:5c:3c:3c:ee: d7:68:76:e3:84:62:7a:0b:24:49:a3:00:b3:da:e5:03:26:2b: 9f:49:a8:84:e0:4e:ef:b6:bc:76:72:4b:ec:73:35:fa:cc:95: 2a:a4:5b:14:0f:3c:24:9a:93:03:17:4a:c7:92:13:4e:1f:5c: 2f:35:c3:ba:a1:63:bf:b6:13:d0:bc:79:cc:4d:d3:64:da:65: f9:5a:7e:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwNDI0MTQyNzQ4WhcNMjUwNTAxMTQyNzQ4WjAYMRYwFAYD VQQDEw02ODBhNGE2NC1jMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZohjYshnyYldakz8hYRlHmAMgAPvV6rvp+FJ4lwGvzfp4U1t58SQsn+6ovY wGouaG7HRSvzhI9anIn21ymaUD4Xh/wd1uYyGnD0g0OnRGNsmdZx+7k2s/SHqJjs McLUU7FP0U5Htw2xTNK2TIVfZiw8y37A7WChX+svLor3rNLAPNEhy7I8l5D6TfkU OfdcuVMTdsN6byBMwb1lsBhBPYxQMFbjS+smhZApDOpagN7cWsMa7ZJdhrd+8XHw /g98Mc+o/6PsGK3sUujq301aC7JOlZ7N6yVWBKvLs4b/a4RBo038J61wOqVr5z6m L4Ppi+MhZ+Com0d9ejFAP0H93wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUoXwG/ po+T8fm/I1e4IlYu+FE0MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPvy3MGL/i8vEuezGlrjyMoZ2koxYhMlYD727vx4x9ky46NHV4jWw/ N83ClHR+j3VZXfiHq4lInBYviTJd38OrrBC3uMyqfZxYNXHRoNj/fcC+JFk4kdXX Ct8AqNZpUY13ypt/6/H9khDSfEeEb4g1qlScsOkjhUtKVpWgCXO17hx8VO52IyhL OZvWAQMfhbxgxb0SL9roeC581qabcdxVd1T0EbcSfzdkrFgLutrunFw8PO7XaHbj hGJ6CyRJowCz2uUDJiufSaiE4E7vtrx2ckvsczX6zJUqpFsUDzwkmpMDF0rHkhNO H1wvNcO6oWO/thPQvHnMTdNk2mX5Wn53 -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:56 2025 by rpki-client