$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: k3gHzf5mY8seQYt8oBqUp+p2DwcC4erri6tjW2PBvJc= Subject key identifier: 82:D6:99:7D:2F:30:31:22:CF:69:B1:F2:9B:0F:D7:75:39:C0:B8:89 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 3479 Signing time: Thu 24 Apr 2025 14:59:44 +0000 Manifest this update: Thu 24 Apr 2025 14:59:44 +0000 Manifest next update: Thu 01 May 2025 14:59:44 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: H//u5U1zOyN4WR0DG6upwEGl+XlAlxkqZ4RE46MW4Kk=) 2: 0B1273668FA411E78001F63DC4F9AE02.roa (hash: k3e6uk50CslChWb70mel5/uXC1n+xgHkfi8aZq+HzkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Apr 24 14:59:44 2025 GMT Not After : May 1 14:59:44 2025 GMT Subject: CN=680a51e0-dfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:8f:94:34:1d:ef:30:17:d9:3b:06:40:a0: d8:82:46:49:d6:38:62:31:1e:35:0c:46:e6:61:62: 27:58:5f:17:cc:8d:21:82:7c:79:62:9b:87:5b:2e: 2c:42:d5:bd:33:77:2b:39:74:28:9d:93:7d:1d:9b: 5b:af:83:a0:62:b0:21:3c:67:30:7a:80:c9:6b:6f: 7e:a7:a2:80:39:9e:99:1e:c6:05:85:11:53:31:f7: c6:e9:57:32:f5:ae:be:00:1f:89:ce:9f:46:c8:57: a6:d0:c1:55:71:7c:f3:b6:6c:4a:f1:f6:4c:12:76: 1f:f1:25:69:2e:9a:e6:e6:17:aa:b5:d2:15:45:78: c7:79:d8:96:d3:31:44:3c:f8:ec:82:a4:5f:aa:a4: 21:41:83:d5:bb:7c:b9:bc:26:9b:b4:ac:96:e0:15: 1b:89:35:4f:a1:23:76:70:bf:9b:20:d8:c5:d8:fc: 24:7f:cc:2d:6f:4e:b8:0c:9d:2a:f1:b0:38:9f:b9: 65:b2:2b:b3:cd:06:de:ce:46:be:b4:aa:b4:ff:4c: 20:07:10:7b:ec:3f:d0:4a:b4:f6:05:d5:53:47:76: 06:c7:03:3f:d1:8e:16:6e:76:58:7b:04:73:79:b7: 28:08:9a:b7:d1:d8:f9:54:13:07:f2:84:8b:fc:09: e1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D6:99:7D:2F:30:31:22:CF:69:B1:F2:9B:0F:D7:75:39:C0:B8:89 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:32:69:7a:18:1d:75:3b:e4:20:fc:2b:c4:ac:ed:e8:1d:61: a8:53:cd:d0:b2:e7:aa:bf:6e:8b:b3:ed:cc:03:bb:53:f2:28: a3:bd:90:a1:e5:e2:11:c8:ab:64:3b:5c:74:5b:08:ce:79:9b: b3:af:cc:ae:72:48:95:44:bf:d0:99:b0:76:8d:e5:15:a0:7e: 53:82:05:13:e6:d6:0e:e3:1e:d2:44:df:c7:b2:a6:6d:66:3d: ea:0b:90:28:3b:12:ff:91:be:de:61:fa:95:58:b0:f2:56:20: d2:17:71:a2:b1:ad:e2:76:0a:81:a9:7d:ca:6f:d7:d4:23:43: af:24:14:96:24:91:27:2c:3b:41:40:3b:e1:4b:38:b9:95:56: c5:d6:21:72:a1:98:59:c1:10:d7:47:78:4d:48:39:39:0d:17: 4c:a5:52:f0:e3:6b:0d:7e:20:3e:6d:2f:de:de:22:1c:a8:bf: c0:ab:27:9f:fd:55:e9:7b:2b:a2:ae:49:d5:72:52:81:eb:dd: ef:07:cb:c9:39:76:17:de:0e:1a:48:89:c4:f4:9e:1a:86:ca: dd:bf:74:0b:d3:c3:10:3e:06:7c:f5:df:6c:3d:2d:e5:65:3a: 12:62:d2:0d:3a:1a:6d:ac:00:20:b8:f4:89:dd:74:1e:12:aa: d4:f8:65:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjUwNDI0MTQ1OTQ0WhcNMjUwNTAxMTQ1OTQ0WjAYMRYwFAYD VQQDEw02ODBhNTFlMC1kZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6ePlDQd7zAX2TsGQKDYgkZJ1jhiMR41DEbmYWInWF8XzI0hgnx5YpuHWy4s QtW9M3crOXQonZN9HZtbr4OgYrAhPGcweoDJa29+p6KAOZ6ZHsYFhRFTMffG6Vcy 9a6+AB+Jzp9GyFem0MFVcXzztmxK8fZMEnYf8SVpLprm5heqtdIVRXjHediW0zFE PPjsgqRfqqQhQYPVu3y5vCabtKyW4BUbiTVPoSN2cL+bINjF2Pwkf8wtb064DJ0q 8bA4n7llsiuzzQbezka+tKq0/0wgBxB77D/QSrT2BdVTR3YGxwM/0Y4WbnZYewRz ebcoCJq30dj5VBMH8oSL/AnhbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILWmX0v MDEiz2mx8psP13U5wLiJMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbMml6GB11O+Qg/CvErO3oHWGoU83Qsueqv26Ls+3MA7tT8iijvZCh 5eIRyKtkO1x0WwjOeZuzr8yuckiVRL/QmbB2jeUVoH5TggUT5tYO4x7SRN/HsqZt Zj3qC5AoOxL/kb7eYfqVWLDyViDSF3Gisa3idgqBqX3Kb9fUI0OvJBSWJJEnLDtB QDvhSzi5lVbF1iFyoZhZwRDXR3hNSDk5DRdMpVLw42sNfiA+bS/e3iIcqL/Aqyef /VXpeyuirknVclKB693vB8vJOXYX3g4aSInE9J4ahsrdv3QL08MQPgZ89d9sPS3l ZToSYtINOhptrAAguPSJ3XQeEqrU+GWx -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:27 2025 by rpki-client