$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: RMQvoycsa5c08XqiaLov7U0BmAPDtGMPQP0Hu/JEAks= Subject key identifier: 16:50:AD:50:3E:03:6F:D9:D9:C8:8F:E6:98:70:3B:D1:38:47:CB:37 Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0BCB Signing time: Fri 28 Mar 2025 19:01:23 +0000 Manifest this update: Fri 28 Mar 2025 19:01:23 +0000 Manifest next update: Fri 04 Apr 2025 19:01:23 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: 5SaM15IHqPfQS/A97CDHqCSiubg8qczLYBAiV++zlBM=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: QTmQ+b0TWigH3ktAvPS5L4JGC6TmpCstJJc/am/VnB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7 Validity Not Before: Mar 28 19:01:23 2025 GMT Not After : Apr 4 19:01:23 2025 GMT Subject: CN=67e6f203-d71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:dd:e6:b1:56:d3:f5:61:b5:08:df:b9:9e: f4:4b:1b:c4:7a:9b:be:ef:3d:dc:4a:dc:de:41:fd: f1:82:a1:4f:93:0e:95:60:02:94:94:14:38:d4:a4: 18:cb:b4:0e:02:26:46:1e:d9:11:bf:09:84:01:a0: 7e:5c:ad:8a:16:aa:17:cc:d8:3d:fb:8e:ec:67:d5: 38:74:1f:da:6d:10:b8:c7:ed:0b:20:35:74:35:bc: 4c:1c:a6:6e:15:ef:31:71:6a:fd:26:3d:74:ed:5d: 29:0d:1a:c1:88:1f:9d:6c:0f:48:ac:a4:25:36:02: 4b:98:e7:08:42:db:06:f8:74:a8:3d:b1:9e:01:1c: de:bd:06:d8:ab:f5:43:77:de:81:ab:67:b8:5f:d7: c2:ad:47:c7:b5:e5:29:6f:4e:80:23:6b:b8:13:bf: bc:2e:44:ef:52:58:5e:4d:04:89:21:f2:8f:95:8c: 65:41:a2:3c:b1:2c:6c:fb:0d:b0:a5:7c:aa:01:0b: a0:66:e1:98:13:b9:78:0c:04:ff:b0:cc:1e:fd:36: ad:af:4e:76:01:3f:c4:83:94:89:29:a8:ea:ed:71: 44:39:8f:ca:b9:50:61:63:1e:26:19:da:61:c5:4b: b6:b8:fd:da:f9:3a:96:bf:85:2a:19:eb:eb:88:e2: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:50:AD:50:3E:03:6F:D9:D9:C8:8F:E6:98:70:3B:D1:38:47:CB:37 X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:57:36:e9:0f:86:ba:25:8b:7e:8a:f8:b4:5c:35:5e:b1:30: 96:ea:fe:18:10:df:00:84:97:03:49:55:f4:95:59:a9:c4:d4: 5a:e5:dd:3d:cd:b4:fe:e7:4f:20:9c:2a:1e:2d:ec:bd:92:dc: 7c:70:56:97:1a:2c:9b:a9:64:c8:3a:b5:67:f4:32:0c:74:4a: 2e:ce:e9:29:97:ca:af:cd:58:da:a3:be:7a:c5:e3:86:89:60: f7:f4:3a:84:30:3f:0e:45:dc:44:d8:3e:7d:5d:48:6b:c1:fc: 6e:90:96:b3:0f:8c:69:1b:90:49:4c:06:b1:23:0f:c9:61:9e: 09:e0:02:5e:f1:53:5e:c2:e4:9e:34:f6:dc:d2:21:ee:45:5d: 9f:1c:c3:41:88:39:bd:99:00:c5:1e:39:24:c8:1e:13:5b:3d: 07:94:87:34:f7:eb:a6:d5:8b:89:d8:2b:59:a5:7a:85:71:4e: b0:5b:6f:e7:6d:b5:e5:4c:1e:f7:be:cc:d0:9d:24:05:fa:c7: 3e:a5:50:eb:7f:6b:85:e6:18:cb:e6:af:5d:f6:0c:95:d0:67: e7:0c:3e:ac:7f:18:9a:57:cf:39:43:03:f5:3b:92:7f:13:fe: 04:50:f9:9b:5b:f0:a2:48:a2:38:ed:3b:f3:1d:45:66:57:f7: 50:6a:83:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjUwMzI4MTkwMTIzWhcNMjUwNDA0MTkwMTIzWjAYMRYwFAYD VQQDEw02N2U2ZjIwMy1kNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbPd5rFW0/VhtQjfuZ70SxvEepu+7z3cStzeQf3xgqFPkw6VYAKUlBQ41KQY y7QOAiZGHtkRvwmEAaB+XK2KFqoXzNg9+47sZ9U4dB/abRC4x+0LIDV0NbxMHKZu Fe8xcWr9Jj107V0pDRrBiB+dbA9IrKQlNgJLmOcIQtsG+HSoPbGeARzevQbYq/VD d96Bq2e4X9fCrUfHteUpb06AI2u4E7+8LkTvUlheTQSJIfKPlYxlQaI8sSxs+w2w pXyqAQugZuGYE7l4DAT/sMwe/Tatr052AT/Eg5SJKajq7XFEOY/KuVBhYx4mGdph xUu2uP3a+TqWv4UqGevriOLJgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZQrVA+ A2/Z2ciP5phwO9E4R8s3MB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkVzbpD4a6JYt+ivi0XDVesTCW6v4YEN8AhJcDSVX0lVmpxNRa5d09 zbT+508gnCoeLey9ktx8cFaXGiybqWTIOrVn9DIMdEouzukpl8qvzVjao756xeOG iWD39DqEMD8ORdxE2D59XUhrwfxukJazD4xpG5BJTAaxIw/JYZ4J4AJe8VNewuSe NPbc0iHuRV2fHMNBiDm9mQDFHjkkyB4TWz0HlIc09+um1YuJ2CtZpXqFcU6wW2/n bbXlTB73vszQnSQF+sc+pVDrf2uF5hjL5q9d9gyV0GfnDD6sfxiaV885QwP1O5J/ E/4EUPmbW/CiSKI47TvzHUVmV/dQaoN4 -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:25 2025 by rpki-client