$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json) Hash identifier: jsh0xsuC0S3n1NA7b4cq405iACN0ct4qvaRswJayAu0= Subject key identifier: BE:B4:9F:CF:21:E0:25:8D:6B:9D:22:84:BB:B8:45:7D:0E:19:56:8B Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft Manifest number: 07B6 Signing time: Thu 24 Apr 2025 20:59:00 +0000 Manifest this update: Thu 24 Apr 2025 20:58:59 +0000 Manifest next update: Thu 01 May 2025 20:58:59 +0000 Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: ZF4tY7Q6uFAObwXSyVq4RUC1qlyY2OjQgq4zLZwoFV0=) 2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: AWPlkT/VPOlTrND3SaqX87pYECk2GQcIiP0u70mzoFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Validity Not Before: Apr 24 20:58:59 2025 GMT Not After : May 1 20:58:59 2025 GMT Subject: CN=680aa614-7e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:22:f8:00:d1:ca:12:21:10:9e:bf:84:7b: 7d:ca:9d:ac:00:f5:c1:83:08:0e:70:16:cb:e9:8b: 90:7b:53:b9:2f:41:07:67:90:b8:18:77:d1:ea:ac: 67:00:c6:f9:9c:19:c8:21:c4:3a:62:bd:34:39:49: b6:71:7e:31:0c:7f:00:7b:04:8f:72:50:07:7c:0d: f3:e0:d9:7d:c5:15:89:e4:ff:b5:e8:3c:78:da:3b: 5a:d8:e1:10:27:57:f1:b2:0a:44:d3:e2:d0:d1:da: 53:ce:7a:b9:05:84:09:9b:a5:51:f1:ca:b6:4f:de: 1d:52:d8:2b:2d:78:08:bf:7a:3c:7e:c6:7e:a1:28: 20:ee:1e:67:f9:3f:b0:01:d2:5d:bd:73:eb:f8:24: 48:e9:8a:c8:c3:66:c6:31:de:08:28:a3:50:6b:06: 7f:ac:d0:06:b0:77:eb:8d:a1:c5:c5:91:4d:27:e0: 44:0d:7f:45:13:65:69:48:58:f9:e3:d2:2f:f0:5d: f4:b4:73:f3:6b:3f:95:54:55:1b:71:62:91:c6:6d: 62:1e:43:e7:fc:f5:d5:90:87:0b:62:43:41:35:ec: 1a:b7:cd:bc:99:a8:ec:02:6f:23:b0:42:f1:51:94: 5f:f8:66:cc:d9:b2:d1:08:71:20:aa:ec:01:a3:bf: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:9F:CF:21:E0:25:8D:6B:9D:22:84:BB:B8:45:7D:0E:19:56:8B X509v3 Authority Key Identifier: keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:39:83:c0:b6:f0:96:79:6c:4c:e6:35:da:0a:6a:50:9c: 03:de:55:7f:4d:23:c0:4e:aa:b0:4e:c3:f1:3e:5f:8d:a6:b1: b6:91:d0:f0:bb:a9:b4:b8:3b:82:58:56:bf:05:8f:72:fb:3d: 85:19:c7:06:1b:66:df:34:7b:54:ad:38:7b:42:a4:77:49:4e: 70:30:b8:c3:0a:0e:f3:1f:18:fb:2f:da:a6:6c:6e:b8:54:36: b4:c6:63:9f:8c:01:74:a4:73:17:c3:e3:5e:cb:2d:ff:23:db: ae:82:c1:d4:b5:7a:c6:ec:5b:91:82:c5:d6:61:36:8b:1d:c5: 52:18:f8:01:99:a7:9b:9c:c1:43:d0:03:60:c4:ea:9b:b3:a3: df:cf:3c:2e:1d:37:ca:af:63:93:3e:b4:01:24:20:ca:d9:b5: 7e:ac:06:c5:da:7a:c8:04:d7:3e:89:d7:cd:39:f8:71:fa:df: de:23:d4:96:43:da:5d:89:08:e1:e0:e3:bc:86:5d:20:b4:b5: ec:1e:bc:bb:2c:88:8e:95:ad:1d:d0:27:d0:95:bf:27:85:59: 1b:33:de:24:d9:81:18:1f:82:d4:54:0a:57:a0:ad:bf:f9:3d: bc:0f:5f:0e:63:79:e7:8d:e0:43:8f:c0:45:d9:34:21:43:7a: 1f:e8:a6:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0NTgxMTAvBgNVBAUTKERENkYwMTRGOEFENDVEQTg1RDBFMTZGMkIzNzY4NzY3 OTQ0NDg1QjMwHhcNMjUwNDI0MjA1ODU5WhcNMjUwNTAxMjA1ODU5WjAYMRYwFAYD VQQDEw02ODBhYTYxNC03ZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn8i+ADRyhIhEJ6/hHt9yp2sAPXBgwgOcBbL6YuQe1O5L0EHZ5C4GHfR6qxn AMb5nBnIIcQ6Yr00OUm2cX4xDH8AewSPclAHfA3z4Nl9xRWJ5P+16Dx42jta2OEQ J1fxsgpE0+LQ0dpTznq5BYQJm6VR8cq2T94dUtgrLXgIv3o8fsZ+oSgg7h5n+T+w AdJdvXPr+CRI6YrIw2bGMd4IKKNQawZ/rNAGsHfrjaHFxZFNJ+BEDX9FE2VpSFj5 49Iv8F30tHPzaz+VVFUbcWKRxm1iHkPn/PXVkIcLYkNBNewat828majsAm8jsELx UZRf+GbM2bLRCHEgquwBo79FhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL60n88h 4CWNa50ihLu4RX0OGVaLMB8GA1UdIwQYMBaAFN1vAU+K1F2oXQ4W8rN2h2eURIWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQ1OC9GOEFGMTIwMkY2 MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhhaGREaGJ5czNhSFo1UkVo Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXOEJUNHJVWGFoZERoYnlzM2FIWjVSRWhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQ1OC9GOEFGMTIwMkY2MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhh aGREaGJ5czNhSFo1UkVoYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZcTmDwLbwlnlsTOY12gpqUJwD3lV/TSPATqqwTsPxPl+NprG2kdDw u6m0uDuCWFa/BY9y+z2FGccGG2bfNHtUrTh7QqR3SU5wMLjDCg7zHxj7L9qmbG64 VDa0xmOfjAF0pHMXw+Neyy3/I9uugsHUtXrG7FuRgsXWYTaLHcVSGPgBmaebnMFD 0ANgxOqbs6PfzzwuHTfKr2OTPrQBJCDK2bV+rAbF2nrIBNc+idfNOfhx+t/eI9SW Q9pdiQjh4OO8hl0gtLXsHry7LIiOla0d0CfQlb8nhVkbM94k2YEYH4LUVApXoK2/ +T28D18OY3nnjeBDj8BF2TQhQ3of6Ka+ -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:57 2025 by rpki-client