$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: KPgLL/Xx/USX3C6acBk2RDy4RhQPyofXRYarimtCC5k= Subject key identifier: 9E:75:76:47:BA:4F:68:37:90:D6:0F:58:6A:20:7D:9D:7C:E4:85:7E Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 0320 Signing time: Sun 27 Apr 2025 00:48:26 +0000 Manifest this update: Sun 27 Apr 2025 00:48:25 +0000 Manifest next update: Sun 04 May 2025 00:48:25 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: wTG6EC6IrTHo0VGVhG0XF/dy2zlzN3pmNESrFESFwAI=) 2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6JpjDff62wDTfk1naPEndRnRsudFZskUVlbVd/hGOl8=) 3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: +vJahyBsj/iwD6Uf+V5LVvoqUetqk1SrdYTgQvG1J8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: Apr 27 00:48:25 2025 GMT Not After : May 4 00:48:25 2025 GMT Subject: CN=680d7ed9-373b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:a8:71:4a:6c:5d:c6:05:99:d3:5f:86:5d: 4a:3e:20:83:cd:b5:dd:da:9b:68:c1:fd:ee:2a:12: 3a:f3:a7:bf:5f:71:5c:8b:4c:14:32:72:b2:3a:b9: 16:50:2d:b0:6d:b6:9c:09:c2:1c:71:06:d8:14:42: 29:20:f4:60:c6:57:75:4a:2f:40:04:aa:8a:84:f3: 38:81:90:24:cd:6b:dd:f1:45:49:5b:4b:da:3d:79: 33:88:46:48:ab:3d:91:9f:80:ad:c9:91:33:14:ab: f2:4e:02:b8:b3:86:af:18:79:ef:c8:5f:36:66:a2: bb:01:c1:ba:1f:77:c1:4a:75:52:ef:f9:a7:c6:5c: b8:b1:a5:db:b5:dc:12:cf:29:91:92:11:ff:59:43: 77:b9:62:63:e4:3b:36:72:72:93:ca:bf:49:a2:23: 5e:a5:3b:65:60:ec:37:4a:5c:57:b2:c9:bf:20:f5: 47:63:82:51:72:6d:5e:a0:fb:45:58:e8:4b:58:00: 38:da:72:d1:bc:89:c7:9d:94:78:b8:9b:99:18:2d: 0b:48:65:14:47:04:01:e3:93:62:a0:80:f8:63:84: 30:93:08:6b:40:9f:7d:63:33:f0:98:ed:90:fa:9a: a8:47:0e:8b:0c:05:92:e8:c0:7c:cd:03:fb:b7:5f: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:75:76:47:BA:4F:68:37:90:D6:0F:58:6A:20:7D:9D:7C:E4:85:7E X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:51:17:9d:59:32:a8:f9:59:68:a3:74:d7:e3:1f:92:6d:39: fa:5a:ac:43:f7:dd:35:ee:2e:74:bc:3c:44:82:ee:98:11:39: a2:63:5f:e8:d6:d6:11:25:b8:20:2c:04:26:c9:66:a4:9e:a6: 03:56:d4:7e:af:75:0e:36:76:8a:ee:8a:d7:db:39:44:f3:09: 72:24:b8:02:42:60:a3:dd:2e:37:0d:1e:9c:cf:a3:c7:1b:a5: cf:63:81:cd:54:e9:fe:00:2e:c9:d3:d2:6b:eb:ca:e7:26:f1: c6:34:d0:06:cc:32:e3:86:15:90:68:c5:a3:b1:ba:c9:32:1c: ba:32:b3:0a:8b:77:bc:8c:38:40:90:84:88:c9:7f:62:60:19: ff:a0:8d:eb:5e:c9:5c:eb:6a:b7:02:34:39:ea:79:33:b6:bd: b5:a9:23:a4:c6:68:3e:f5:27:d8:ce:8c:f2:04:21:9b:a3:dc: 4a:a8:c3:ba:a0:0a:c7:23:b2:14:44:72:0d:42:5a:32:9a:d1: 12:da:73:51:a6:b5:65:74:5e:9b:7d:2a:95:48:43:3d:b2:4d: 8c:c1:82:05:f2:8a:e5:7f:01:38:c3:2c:1f:1e:ae:fd:ee:7d: 4b:89:50:5c:a4:b5:45:6b:4a:84:7b:a8:bf:e1:5a:da:ae:fa: f3:02:b4:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjUwNDI3MDA0ODI1WhcNMjUwNTA0MDA0ODI1WjAYMRYwFAYD VQQDEw02ODBkN2VkOS0zNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2WocUpsXcYFmdNfhl1KPiCDzbXd2ptowf3uKhI686e/X3Fci0wUMnKyOrkW UC2wbbacCcIccQbYFEIpIPRgxld1Si9ABKqKhPM4gZAkzWvd8UVJW0vaPXkziEZI qz2Rn4CtyZEzFKvyTgK4s4avGHnvyF82ZqK7AcG6H3fBSnVS7/mnxly4saXbtdwS zymRkhH/WUN3uWJj5Ds2cnKTyr9JoiNepTtlYOw3SlxXssm/IPVHY4JRcm1eoPtF WOhLWAA42nLRvInHnZR4uJuZGC0LSGUURwQB45NioID4Y4QwkwhrQJ99YzPwmO2Q +pqoRw6LDAWS6MB8zQP7t1+1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ51dke6 T2g3kNYPWGogfZ185IV+MB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYURedWTKo+Vloo3TX4x+SbTn6WqxD99017i50vDxEgu6YETmiY1/o 1tYRJbggLAQmyWaknqYDVtR+r3UONnaK7orX2zlE8wlyJLgCQmCj3S43DR6cz6PH G6XPY4HNVOn+AC7J09Jr68rnJvHGNNAGzDLjhhWQaMWjsbrJMhy6MrMKi3e8jDhA kISIyX9iYBn/oI3rXslc62q3AjQ56nkztr21qSOkxmg+9SfYzozyBCGbo9xKqMO6 oArHI7IURHINQloymtES2nNRprVldF6bfSqVSEM9sk2MwYIF8orlfwE4wywfHq79 7n1LiVBcpLVFa0qEe6i/4VrarvrzArQH -----END CERTIFICATE-----Generated at Mon Apr 28 05:26:21 2025 by rpki-client