$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: bHTj9fAZu2kdfAQ0n+vIltkuASXx9+J3B44in6liG9s= Subject key identifier: F3:A3:37:BE:1E:AD:AC:C8:B8:A7:BE:E9:3F:22:58:04:D9:69:B9:FD Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 0152 Signing time: Fri 25 Apr 2025 03:17:21 +0000 Manifest this update: Fri 25 Apr 2025 03:17:21 +0000 Manifest next update: Fri 02 May 2025 03:17:21 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: VyssAm3hSPaC711wQUtGs9PS2q83LxC2VcTjDorX3w4=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: PSPyDidUc2Ysk1Zzt/hq/yHS8xGylcttSXcqtY7zcuE=) 3: D7FC7B4C217A11EE8C2D2243C4F9AE02.roa (hash: Bz/Ejq1tEuz4EVJF91Xaku+18lMYhCoYHiQXonf6xO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Apr 25 03:17:21 2025 GMT Not After : May 2 03:17:21 2025 GMT Subject: CN=680afec1-448e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:cc:7e:7e:38:c2:59:b3:fd:2c:b4:22:ee: 1c:cd:de:fb:e1:82:bb:28:69:ae:72:3c:49:65:44: e1:6e:dc:75:bb:9a:f8:c1:73:01:90:65:79:70:4d: da:82:e4:c4:77:e6:bf:af:0c:2d:9d:12:ad:ba:a8: 33:c1:90:64:82:e3:4e:79:7e:de:1b:f4:5f:67:35: 9d:6b:88:34:21:d2:da:21:0a:e0:67:c3:69:19:30: a8:f0:4b:56:96:6b:93:14:09:be:93:2f:c0:69:78: c3:3b:3d:d0:92:e1:64:98:08:b5:32:aa:ad:dd:b2: f2:a0:83:43:2a:03:af:c6:58:1e:a8:56:c9:15:69: bb:91:7e:6f:d1:8b:6b:31:ae:c2:24:d5:af:1a:22: d4:e5:c9:e7:91:a4:00:e5:35:5b:33:a0:23:c4:d0: 1c:8a:7a:89:9b:b3:7d:53:2c:42:af:d8:f9:d3:c9: 7d:26:f1:4c:da:57:14:57:56:45:d4:52:27:8d:78: c6:d3:81:c7:c9:b0:e7:c8:31:fd:86:41:8b:5f:8a: 4b:b7:fd:e9:46:96:ff:a9:a2:79:65:db:a6:43:29: f5:39:eb:22:56:92:e3:e5:ea:62:d7:73:c4:19:4b: 09:27:7f:b1:e6:cf:e5:44:eb:78:ba:d6:dc:32:f8: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A3:37:BE:1E:AD:AC:C8:B8:A7:BE:E9:3F:22:58:04:D9:69:B9:FD X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2d:3f:f9:39:83:d9:92:e3:a7:d7:02:8d:eb:99:ae:45:c1: bb:8c:5e:28:e5:66:d0:33:f8:f2:66:08:7e:a0:03:10:a6:d8: 79:8c:08:a6:bf:a6:4b:e5:81:61:63:61:99:5c:ec:e8:c1:08: 12:90:5b:db:5a:11:42:2c:cf:17:e6:46:8c:81:5e:4e:20:e4: 66:25:c0:df:1c:d6:38:ff:54:c4:43:60:07:75:35:29:cd:32: c1:3c:a8:1c:9f:5e:1f:a3:85:b2:0e:04:86:0c:5f:6d:4c:69: a6:d1:6e:cd:13:56:73:73:0a:4e:07:e8:a8:22:74:3c:01:85: d0:9d:2f:e7:9e:4f:26:55:6c:db:69:0f:36:2e:20:9a:fe:22: 93:24:63:ff:ce:26:29:a0:5b:56:1d:14:7e:d1:18:d0:76:97: 1e:33:4a:df:1d:6c:94:36:4f:7c:81:1a:3a:ad:70:d6:c9:6c: 8f:e3:4d:38:8c:a5:72:7c:a1:a8:7c:e5:86:4d:31:e1:40:de: 1b:68:4b:0c:01:c9:e8:63:4d:48:c0:74:b2:de:bc:8d:a8:92: 5d:a9:03:02:66:f5:af:f8:ef:5c:e2:9b:cb:1a:aa:aa:64:24: 69:b3:ff:d2:40:0d:a2:ee:be:50:7b:0d:3d:5a:18:be:7c:1f: 9e:db:19:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjUwNDI1MDMxNzIxWhcNMjUwNTAyMDMxNzIxWjAYMRYwFAYD VQQDEw02ODBhZmVjMS00NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/7Mfn44wlmz/Sy0Iu4czd774YK7KGmucjxJZUThbtx1u5r4wXMBkGV5cE3a guTEd+a/rwwtnRKtuqgzwZBkguNOeX7eG/RfZzWda4g0IdLaIQrgZ8NpGTCo8EtW lmuTFAm+ky/AaXjDOz3QkuFkmAi1Mqqt3bLyoINDKgOvxlgeqFbJFWm7kX5v0Ytr Ma7CJNWvGiLU5cnnkaQA5TVbM6AjxNAcinqJm7N9UyxCr9j508l9JvFM2lcUV1ZF 1FInjXjG04HHybDnyDH9hkGLX4pLt/3pRpb/qaJ5ZdumQyn1OesiVpLj5epi13PE GUsJJ3+x5s/lROt4utbcMvj/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOjN74e razIuKe+6T8iWATZabn9MB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlLT/5OYPZkuOn1wKN65muRcG7jF4o5WbQM/jyZgh+oAMQpth5jAim v6ZL5YFhY2GZXOzowQgSkFvbWhFCLM8X5kaMgV5OIORmJcDfHNY4/1TEQ2AHdTUp zTLBPKgcn14fo4WyDgSGDF9tTGmm0W7NE1ZzcwpOB+ioInQ8AYXQnS/nnk8mVWzb aQ82LiCa/iKTJGP/ziYpoFtWHRR+0RjQdpceM0rfHWyUNk98gRo6rXDWyWyP4004 jKVyfKGofOWGTTHhQN4baEsMAcnoY01IwHSy3ryNqJJdqQMCZvWv+O9c4pvLGqqq ZCRps//SQA2i7r5Qew09Whi+fB+e2xmL -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:42 2025 by rpki-client