$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json) Hash identifier: xxGdl9t8/qrdoqBRBGUXzUCmO066UvhRtMhSP0KpU0E= Subject key identifier: 4E:6F:AC:42:2C:4A:DA:05:63:47:6C:13:07:72:DE:BB:39:B2:70:AB Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Certificate serial: 1880 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft Manifest number: 187A Signing time: Thu 24 Apr 2025 15:50:24 +0000 Manifest this update: Thu 24 Apr 2025 15:50:23 +0000 Manifest next update: Thu 01 May 2025 15:50:23 +0000 Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: 7R0LkbS3+31jt7gtntgRCrbG3wBi0WUsP9jBeG5m9QE=) 2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: WuIJH5EmbtRmJmFCN//mGN8XhCDwfYBWN+2IltuHvZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6272 (0x1880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Validity Not Before: Apr 24 15:50:23 2025 GMT Not After : May 1 15:50:23 2025 GMT Subject: CN=680a5dbf-5ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:0c:7b:00:f3:28:b8:97:47:a5:9c:c5:79: 45:02:c4:ac:28:9a:4e:c4:da:3e:06:e1:13:8c:7f: 37:be:3a:9d:ef:cf:c7:e3:3e:8c:2f:e4:5f:1b:f0: e1:4f:5a:64:a2:b0:f3:ae:c5:55:57:b2:3f:e3:a9: 08:80:af:10:30:b9:57:84:ff:48:7c:c6:02:0e:cf: b7:cf:b5:31:61:65:10:08:f5:ed:dc:d0:80:96:ea: 7f:0c:69:1d:5d:67:84:6d:3e:81:c3:a7:90:fc:0f: 2a:00:4a:c6:c0:dc:8f:e3:b2:24:69:03:25:6c:16: 83:b7:34:72:24:06:e5:ea:d1:3a:7c:d1:08:25:d9: c5:4f:d5:1c:2d:d8:2a:12:65:0b:44:86:bc:13:53: 56:a9:83:3c:c4:f9:de:50:e6:4c:3b:78:0a:9d:48: c2:76:43:84:95:36:54:1e:49:c6:64:0b:aa:42:42: 48:2d:3a:e4:07:2b:43:a8:6a:7d:f1:ef:c1:3c:30: db:2f:60:01:cb:fc:e4:ce:fe:b3:8b:89:a1:60:8b: 90:66:ba:8c:32:ef:0a:84:b0:68:ed:0c:b1:42:76: 25:83:ed:9b:48:f3:a7:24:b6:e1:e3:c1:84:1b:41: 85:86:4d:3a:3a:d0:bd:a4:d5:bc:86:f5:57:79:83: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6F:AC:42:2C:4A:DA:05:63:47:6C:13:07:72:DE:BB:39:B2:70:AB X509v3 Authority Key Identifier: keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3c:3f:52:e0:15:20:4a:ae:81:75:3f:04:9a:9a:52:29:c5: d5:5b:65:85:d9:76:7e:90:63:9e:6c:2f:28:67:b9:f8:82:0e: ef:ff:82:79:e2:cf:50:ea:1d:47:a5:7b:8e:c7:9e:65:55:fb: b2:b7:3b:78:f4:fc:ae:6c:68:ff:34:59:e4:eb:51:3f:5e:a4: ed:d6:aa:cd:c4:23:56:5f:34:a2:2e:01:a3:74:5c:03:07:06: 35:83:a6:6a:00:05:7f:23:13:c5:f1:13:a7:21:26:28:d8:41: 73:83:4e:eb:af:11:61:d3:0a:21:d1:b8:36:38:10:74:b2:3f: af:d2:9b:03:5f:bc:22:53:67:6c:3a:84:ce:35:3a:1a:53:e9: f7:f3:12:4c:11:37:74:82:c8:95:1a:66:66:1b:bf:d8:1d:0e: b1:85:07:7b:91:92:f4:c3:74:d1:27:10:cd:04:53:be:fd:7e: ad:44:8a:12:d8:7a:dc:18:50:d5:da:ff:90:7c:8e:64:39:36: c5:1b:e1:65:52:75:f6:40:1d:05:5b:23:aa:52:00:1a:94:ea: bf:58:25:8d:f6:ca:a9:54:ea:6f:dc:5e:7d:e9:2d:7c:e5:50: cd:4d:88:ed:22:2f:c1:9c:9c:97:f9:86:15:32:08:0e:93:8a: 6e:54:66:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2 MTFDQURBNTEwHhcNMjUwNDI0MTU1MDIzWhcNMjUwNTAxMTU1MDIzWjAYMRYwFAYD VQQDEw02ODBhNWRiZi01ZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwAMewDzKLiXR6WcxXlFAsSsKJpOxNo+BuETjH83vjqd78/H4z6ML+RfG/Dh T1pkorDzrsVVV7I/46kIgK8QMLlXhP9IfMYCDs+3z7UxYWUQCPXt3NCAlup/DGkd XWeEbT6Bw6eQ/A8qAErGwNyP47IkaQMlbBaDtzRyJAbl6tE6fNEIJdnFT9UcLdgq EmULRIa8E1NWqYM8xPneUOZMO3gKnUjCdkOElTZUHknGZAuqQkJILTrkBytDqGp9 8e/BPDDbL2ABy/zkzv6zi4mhYIuQZrqMMu8KhLBo7QyxQnYlg+2bSPOnJLbh48GE G0GFhk06OtC9pNW8hvVXeYOMawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5vrEIs StoFY0dsEwdy3rs5snCrMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs Z3ZGYTNlN254b0poSEsybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClPD9S4BUgSq6BdT8EmppSKcXVW2WF2XZ+kGOebC8oZ7n4gg7v/4J5 4s9Q6h1HpXuOx55lVfuytzt49PyubGj/NFnk61E/XqTt1qrNxCNWXzSiLgGjdFwD BwY1g6ZqAAV/IxPF8ROnISYo2EFzg07rrxFh0woh0bg2OBB0sj+v0psDX7wiU2ds OoTONToaU+n38xJMETd0gsiVGmZmG7/YHQ6xhQd7kZL0w3TRJxDNBFO+/X6tRIoS 2HrcGFDV2v+QfI5kOTbFG+FlUnX2QB0FWyOqUgAalOq/WCWN9sqpVOpv3F596S18 5VDNTYjtIi/BnJyX+YYVMggOk4puVGYe -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:32 2025 by rpki-client