$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: jtcdpsMLaKi8/poalB6aQjbqvcNPLjwVC+2rYDh/6SA= Subject key identifier: D9:8B:89:B6:3B:E1:19:4F:E3:1D:FF:58:3A:CF:CB:A4:3A:EA:FE:6C Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: EE Signing time: Fri 25 Apr 2025 04:26:27 +0000 Manifest this update: Fri 25 Apr 2025 04:26:26 +0000 Manifest next update: Fri 02 May 2025 04:26:26 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: ojk+IKx+HOeZzMiVIa1ldsFVwQx/RG7VOE5BFQX7fsQ=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Apr 25 04:26:26 2025 GMT Not After : May 2 04:26:26 2025 GMT Subject: CN=680b0ef3-3635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:02:99:e4:c6:d6:9a:db:70:75:99:ab:96: cc:e3:78:b7:7c:7c:b5:6d:4e:75:5a:aa:39:1e:2a: 7d:ab:22:35:b1:92:b5:42:93:87:08:90:23:bc:cd: c9:e6:8f:94:df:c1:02:a7:14:81:e0:ae:05:75:06: 77:78:7f:5c:f2:fc:0a:a0:c7:0c:a7:35:b0:fb:25: 2b:dd:c1:c7:a5:61:b3:49:1b:3c:62:5a:dd:90:6d: 49:43:2d:d6:16:f7:28:b0:a8:13:32:40:d1:8b:78: 55:4e:19:c2:f7:c0:64:42:14:64:bc:d0:cd:8e:36: a0:52:80:fc:b8:30:b7:f1:0f:a7:24:94:ba:94:c1: 36:02:a4:8f:fe:24:59:26:80:81:9a:24:bc:55:0e: f3:0e:0d:14:24:7a:34:07:98:4c:63:62:e3:35:15: dc:f5:fd:e2:8e:ee:ae:55:ad:f6:d6:56:31:72:0c: cb:96:50:06:46:9c:0a:03:b7:6c:0f:d6:70:11:05: 61:0a:47:88:7a:42:b5:39:32:2f:f7:24:47:c1:04: 93:e3:38:07:15:e7:53:24:18:d5:d4:3c:39:34:40: 59:a7:13:2b:18:ff:b3:74:80:b0:a7:e6:e7:5f:20: cf:6c:37:d4:ef:06:88:c4:d6:22:a4:f5:1e:08:28: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8B:89:B6:3B:E1:19:4F:E3:1D:FF:58:3A:CF:CB:A4:3A:EA:FE:6C X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:72:97:36:02:78:d8:a4:db:a7:6c:c8:38:50:84:d6:23:9e: 0b:56:f8:84:95:fc:84:09:fc:b9:c9:78:22:0f:fe:51:0b:f1: d4:36:74:a2:de:a7:bc:8c:43:23:49:7a:51:09:87:6c:62:5a: 04:36:f3:b7:6f:a9:fa:79:42:4a:14:dd:35:bc:1f:8b:81:ee: e3:a6:1e:0f:59:69:ac:4d:7f:f2:7d:30:13:93:58:72:3d:83: 91:0f:64:1e:60:c9:93:82:26:be:1f:8e:11:b4:e8:b9:9d:dc: d0:b0:b5:d1:8b:e6:53:16:d2:f3:77:1c:6a:4f:a1:cd:19:ce: e6:ed:36:ea:3b:be:8c:dd:99:d9:c5:08:76:af:f7:98:1f:c0: d3:80:7d:54:9c:0a:3a:c5:e5:f3:87:d2:af:75:4b:e8:f5:fc: 51:cf:d1:a5:79:cd:36:34:14:c6:51:95:4d:c4:02:56:aa:9f: 0d:8c:94:f5:72:04:48:37:43:e8:db:4a:a4:c6:3b:48:cc:d8: 99:f2:17:f0:e8:f8:c5:40:3a:29:bc:21:88:9e:79:4c:8d:af: 15:64:a8:48:46:68:f2:5f:33:1a:a5:94:32:4c:20:c2:c0:4f: 45:48:e7:11:9b:51:3c:f4:88:67:ea:e0:00:fa:15:ae:f7:f2: 31:89:7d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUwNDI1MDQyNjI2WhcNMjUwNTAyMDQyNjI2WjAYMRYwFAYD VQQDEw02ODBiMGVmMy0zNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI0CmeTG1prbcHWZq5bM43i3fHy1bU51Wqo5Hip9qyI1sZK1QpOHCJAjvM3J 5o+U38ECpxSB4K4FdQZ3eH9c8vwKoMcMpzWw+yUr3cHHpWGzSRs8YlrdkG1JQy3W FvcosKgTMkDRi3hVThnC98BkQhRkvNDNjjagUoD8uDC38Q+nJJS6lME2AqSP/iRZ JoCBmiS8VQ7zDg0UJHo0B5hMY2LjNRXc9f3iju6uVa321lYxcgzLllAGRpwKA7ds D9ZwEQVhCkeIekK1OTIv9yRHwQST4zgHFedTJBjV1Dw5NEBZpxMrGP+zdICwp+bn XyDPbDfU7waIxNYipPUeCChOtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmLibY7 4RlP4x3/WDrPy6Q66v5sMB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGcpc2AnjYpNunbMg4UITWI54LVviElfyECfy5yXgiD/5RC/HUNnSi 3qe8jEMjSXpRCYdsYloENvO3b6n6eUJKFN01vB+Lge7jph4PWWmsTX/yfTATk1hy PYORD2QeYMmTgia+H44RtOi5ndzQsLXRi+ZTFtLzdxxqT6HNGc7m7TbqO76M3ZnZ xQh2r/eYH8DTgH1UnAo6xeXzh9KvdUvo9fxRz9Glec02NBTGUZVNxAJWqp8NjJT1 cgRIN0Po20qkxjtIzNiZ8hfw6PjFQDopvCGInnlMja8VZKhIRmjyXzMapZQyTCDC wE9FSOcRm1E89Ihn6uAA+hWu9/IxiX1E -----END CERTIFICATE-----Generated at Sat Apr 26 05:10:10 2025 by rpki-client