$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: Nwwh8DICQgEfl4l33nyeS37Bg5cswpWk85cfeLnFQ4o= Subject key identifier: 02:BF:EE:3A:50:1A:B6:99:30:76:63:1D:CC:24:76:EF:FF:FE:65:AD Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 014B Signing time: Sat 19 Apr 2025 03:26:30 +0000 Manifest this update: Sat 19 Apr 2025 03:26:30 +0000 Manifest next update: Sat 26 Apr 2025 03:26:30 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: 3Kv14aQivV/xpi/+uaNwWod3ZAdNWTKU8Pxrn9fHXhU=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: tEbg35ruInXFvBobh8FVluJNLAlP7tv3JLnCppA5H5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 03:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Apr 19 03:26:30 2025 GMT Not After : Apr 26 03:26:30 2025 GMT Subject: CN=680317e6-c396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:9f:3c:f7:dd:5b:cb:5e:1a:55:05:c6:4e: b3:ad:bb:1d:7e:3b:a2:ff:49:1b:18:44:aa:39:65: d1:dd:e1:8a:e4:ac:c7:b6:7a:ca:a7:da:61:45:b7: 73:c0:31:c8:68:e3:b5:70:ee:09:71:ac:4f:a8:36: 31:48:70:f3:bd:71:82:7b:6a:6a:e0:3c:00:6f:6a: 72:6c:18:55:73:6a:cc:75:d8:c1:1e:a8:55:86:32: 27:fa:0e:21:1b:2d:56:a1:a1:b5:cd:29:05:3a:a4: 6a:3a:36:64:a3:f8:e4:54:a2:89:14:21:28:43:e5: 61:7f:30:7c:ec:ea:d0:44:72:a6:c4:b0:67:9f:b7: d2:38:25:d5:6e:b8:f6:b9:98:07:86:96:0e:8a:52: d7:d5:56:dc:17:cd:17:f8:2f:80:52:a4:4b:d0:7b: 04:bb:eb:0a:25:a3:18:ce:19:f2:ee:bf:25:d0:c9: 93:2c:13:ba:be:9f:1f:d8:4e:a4:f5:f6:60:38:5f: b7:dd:bc:17:ce:1d:18:45:0d:e7:8d:e9:bd:0c:ed: 07:46:f5:84:24:1d:be:23:35:05:a7:da:68:cb:f9: 3d:36:ab:09:a6:f4:f2:59:06:f8:91:ad:13:7b:48: 9f:09:0b:03:7e:73:04:ef:50:eb:27:61:74:99:fa: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BF:EE:3A:50:1A:B6:99:30:76:63:1D:CC:24:76:EF:FF:FE:65:AD X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6c:23:0c:be:40:4b:0d:ed:aa:98:de:98:91:26:f7:ce:e1: 6e:5e:e6:f1:fd:ae:2c:76:dc:48:4b:88:35:4f:af:0f:dd:1a: 87:da:da:03:96:bb:39:ab:eb:5f:40:d4:86:26:6e:bb:9a:65: f6:de:dc:2a:cc:74:ac:7f:1c:3c:06:7d:fc:3e:25:ca:a4:3f: aa:a3:d9:0e:b0:5e:4c:28:36:aa:c7:60:0d:ed:b3:d4:81:a0: 4b:fb:f3:01:72:20:74:0a:ff:29:2f:18:4c:85:30:37:95:e4: b5:6a:cb:e2:f5:05:1e:71:6d:cf:91:01:dd:5c:a6:81:1f:ea: 0a:3a:b3:31:05:1f:c7:2f:85:58:5d:db:19:bb:49:9e:6c:74: 51:f8:0b:1d:c8:6b:74:f7:5a:4a:4a:8e:0c:c7:5d:a7:47:ab: 44:8e:eb:bb:43:37:21:ae:17:ab:9a:dd:7e:dd:58:e3:4b:b7: e0:b0:7e:fa:32:86:e1:a6:0b:2d:f8:c8:0f:c3:f3:41:7f:5a: 57:9c:a1:d4:fa:b9:dc:3b:3d:c6:27:95:39:51:e3:3b:80:75: d6:80:6a:65:e0:f4:75:22:a1:62:cd:c4:8c:14:f0:37:2d:24: 69:e7:ad:e3:94:f1:25:72:60:2a:be:b2:12:57:ff:03:64:65: 3c:36:d3:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUwNDE5MDMyNjMwWhcNMjUwNDI2MDMyNjMwWjAYMRYwFAYD VQQDEw02ODAzMTdlNi1jMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomafPPfdW8teGlUFxk6zrbsdfjui/0kbGESqOWXR3eGK5KzHtnrKp9phRbdz wDHIaOO1cO4JcaxPqDYxSHDzvXGCe2pq4DwAb2pybBhVc2rMddjBHqhVhjIn+g4h Gy1WoaG1zSkFOqRqOjZko/jkVKKJFCEoQ+VhfzB87OrQRHKmxLBnn7fSOCXVbrj2 uZgHhpYOilLX1VbcF80X+C+AUqRL0HsEu+sKJaMYzhny7r8l0MmTLBO6vp8f2E6k 9fZgOF+33bwXzh0YRQ3njem9DO0HRvWEJB2+IzUFp9poy/k9NqsJpvTyWQb4ka0T e0ifCQsDfnME71DrJ2F0mfoePwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAK/7jpQ GraZMHZjHcwkdu///mWtMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLbCMMvkBLDe2qmN6YkSb3zuFuXubx/a4sdtxIS4g1T68P3RqH2toD lrs5q+tfQNSGJm67mmX23twqzHSsfxw8Bn38PiXKpD+qo9kOsF5MKDaqx2AN7bPU gaBL+/MBciB0Cv8pLxhMhTA3leS1asvi9QUecW3PkQHdXKaBH+oKOrMxBR/HL4VY XdsZu0mebHRR+AsdyGt091pKSo4Mx12nR6tEjuu7Qzchrhermt1+3VjjS7fgsH76 Mobhpgst+MgPw/NBf1pXnKHU+rncOz3GJ5U5UeM7gHXWgGpl4PR1IqFizcSMFPA3 LSRp563jlPElcmAqvrISV/8DZGU8NtMS -----END CERTIFICATE-----Generated at Sat Apr 19 11:31:52 2025 by rpki-client