$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: Y/5uQmNGSKGW72+cZcXQzfzPSSe5par2/jr6jc1uJSU= Subject key identifier: 67:3C:3C:A4:2A:DF:27:DA:AC:DE:F4:F4:1E:F7:D9:07:69:68:24:F5 Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 04AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 04A6 Signing time: Wed 02 Apr 2025 23:56:18 +0000 Manifest this update: Wed 02 Apr 2025 23:56:17 +0000 Manifest next update: Wed 09 Apr 2025 23:56:17 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: /ivmh98pxkQkUuqylcyxnZkYCr10UPWiLAHb8gMwUfs=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: wh1NM+NSrXNgk+dMjusznA6q+s8v+UAafuQbIX3k9wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE Validity Not Before: Apr 2 23:56:17 2025 GMT Not After : Apr 9 23:56:17 2025 GMT Subject: CN=67edcea1-a23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:2c:9a:8e:22:63:1d:e0:78:63:99:11:79: 4c:77:5f:63:bb:a5:4a:30:99:fa:f1:37:9b:b0:5b: 4b:2d:f9:b5:32:10:df:7d:ba:3d:6d:65:b8:83:a4: 3a:17:cf:d6:e8:c3:a1:4c:26:a9:e0:16:13:2c:63: 82:5f:b2:fd:08:66:4d:f6:7a:2e:d8:62:5a:7f:d2: 15:89:0c:70:29:9a:16:28:f2:4c:7a:0f:f7:32:ea: ba:4f:cb:e0:1a:d2:74:46:5a:5d:74:74:f4:52:09: 8f:6f:49:3b:18:2d:eb:ba:53:dd:7b:df:e0:e6:fc: 3a:e7:de:a1:03:a2:65:42:7f:ec:52:74:7b:b8:c8: 39:54:59:fb:3c:77:bd:e6:95:97:1f:3e:46:b7:a7: a8:4a:43:63:c5:b3:88:47:0e:13:5a:42:42:57:7f: fd:84:78:e9:63:61:72:4e:fd:5b:83:0d:02:51:64: bf:e5:ac:a6:f9:69:22:02:18:71:70:dd:2d:97:c8: 9f:43:57:a4:0f:fd:3d:d6:1e:ab:03:78:f0:71:6a: 70:ed:22:76:ab:4e:82:b5:2f:73:55:aa:f9:33:fe: 8d:d4:24:9e:20:2a:3b:37:46:08:95:d2:bf:f4:9b: ae:59:40:ad:3e:42:09:82:e9:e6:6f:ea:60:7f:d2: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3C:3C:A4:2A:DF:27:DA:AC:DE:F4:F4:1E:F7:D9:07:69:68:24:F5 X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:69:5a:a6:d0:b9:46:5a:ff:13:f6:34:9d:b6:48:12:7d:c1: b0:5a:d7:38:df:e9:0a:31:e9:3c:ae:47:26:de:16:57:b5:ef: 8b:d2:33:73:62:3d:9a:63:ac:f3:21:e3:80:dc:96:ae:a1:49: 90:c4:d3:30:a3:d6:04:87:3d:3c:3d:ce:2c:cf:a5:1c:23:ef: 68:e1:2d:72:85:4d:0a:68:46:69:8f:6f:06:fc:49:dd:5d:13: c1:71:6a:b2:48:df:ac:e5:f7:4b:06:53:04:92:66:cd:1d:b3: 35:30:0e:36:3f:2d:25:b3:a8:c3:71:89:89:4d:9d:bd:fa:a5: bf:c2:c0:48:02:dc:9f:8e:ec:47:ad:f5:1e:bb:52:44:b4:b5: 46:76:36:4f:6e:e1:ae:59:b7:46:49:c8:23:a4:ba:eb:ad:39: 99:56:8e:8f:06:bb:6f:65:9a:23:c3:f9:a3:e5:c6:ce:03:3a: 78:fe:fc:6e:42:36:c8:ee:0e:76:ed:b1:5e:55:1b:b5:8c:18: e1:e2:70:85:cd:5c:7e:3f:3e:22:a6:f4:f4:f3:61:24:ae:b3: 06:36:81:27:49:83:c5:75:ca:3e:2b:8a:83:8f:50:75:48:d9: 15:50:d2:1e:66:7a:8d:6f:f4:46:06:68:e8:07:84:c7:21:55: 93:d1:13:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjUwNDAyMjM1NjE3WhcNMjUwNDA5MjM1NjE3WjAYMRYwFAYD VQQDEw02N2VkY2VhMS1hMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRosmo4iYx3geGOZEXlMd19ju6VKMJn68TebsFtLLfm1MhDffbo9bWW4g6Q6 F8/W6MOhTCap4BYTLGOCX7L9CGZN9nou2GJaf9IViQxwKZoWKPJMeg/3Muq6T8vg GtJ0RlpddHT0UgmPb0k7GC3rulPde9/g5vw6596hA6JlQn/sUnR7uMg5VFn7PHe9 5pWXHz5Gt6eoSkNjxbOIRw4TWkJCV3/9hHjpY2FyTv1bgw0CUWS/5aym+WkiAhhx cN0tl8ifQ1ekD/091h6rA3jwcWpw7SJ2q06CtS9zVar5M/6N1CSeICo7N0YIldK/ 9JuuWUCtPkIJgunmb+pgf9KSTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc8PKQq 3yfarN709B732QdpaCT1MB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXaVqm0LlGWv8T9jSdtkgSfcGwWtc43+kKMek8rkcm3hZXte+L0jNz Yj2aY6zzIeOA3JauoUmQxNMwo9YEhz08Pc4sz6UcI+9o4S1yhU0KaEZpj28G/End XRPBcWqySN+s5fdLBlMEkmbNHbM1MA42Py0ls6jDcYmJTZ29+qW/wsBIAtyfjuxH rfUeu1JEtLVGdjZPbuGuWbdGScgjpLrrrTmZVo6PBrtvZZojw/mj5cbOAzp4/vxu QjbI7g527bFeVRu1jBjh4nCFzVx+Pz4ipvT082EkrrMGNoEnSYPFdco+K4qDj1B1 SNkVUNIeZnqNb/RGBmjoB4THIVWT0RNZ -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:37 2025 by rpki-client