$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: XCV3YrnMDN/MvBpZSN6jGbH/gLqKGXi5w8tMIZe1HcM= Subject key identifier: 37:EE:98:7F:F1:BB:E8:EF:B0:3E:2D:0D:FC:D8:4B:56:A6:74:47:37 Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 346E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 346D Signing time: Sun 20 Apr 2025 15:11:06 +0000 Manifest this update: Sun 20 Apr 2025 15:11:05 +0000 Manifest next update: Sun 27 Apr 2025 15:11:05 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: JQxe5nPPFFcCu57cLxsbHpotXHDHxEpY+ayyX2lGYp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13422 (0x346e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Apr 20 15:11:05 2025 GMT Not After : Apr 27 15:11:05 2025 GMT Subject: CN=68050e8a-ec8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:37:fa:18:e5:ca:6c:81:74:74:fd:91:56: 40:7e:23:61:79:2c:e8:73:92:03:a5:74:8f:83:98: 47:d3:76:01:13:bb:35:35:2f:84:68:87:ca:74:f7: 59:50:c5:31:3f:10:e4:62:0d:db:fb:fa:eb:69:18: 17:5d:ca:2d:02:e5:e4:35:e9:87:32:ff:14:10:45: 63:34:be:23:f6:cf:5f:43:e0:d0:7f:3c:0e:41:d0: d4:cb:30:b3:d6:c7:86:49:cd:fc:05:00:e3:cc:0e: af:e7:c4:8a:72:d5:36:14:ab:e9:0d:e5:21:8a:b4: e0:2d:4f:85:26:51:ab:fc:e3:14:39:3f:c8:5f:d3: 12:15:2e:56:09:a9:77:ab:1a:35:d9:dd:fa:2f:6f: d0:57:42:a3:b1:2f:c6:57:fe:58:e3:56:39:a9:c5: d7:eb:a0:3e:31:cb:cf:df:d2:15:3b:34:cb:59:84: c0:16:ce:8f:69:46:91:d8:ad:f0:df:c3:aa:bc:99: 78:f7:e4:ce:6f:26:97:4a:47:e6:d1:04:b8:f8:cc: 43:2b:12:d3:ab:92:6e:16:07:b2:f3:19:0e:14:ee: 88:cc:20:f1:53:6f:47:8b:ee:ef:bc:8d:ea:24:fa: 81:40:bb:52:78:ba:be:98:a1:6a:bc:13:5e:d5:1b: b0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EE:98:7F:F1:BB:E8:EF:B0:3E:2D:0D:FC:D8:4B:56:A6:74:47:37 X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5d:a7:25:69:67:a3:b2:a6:ce:35:83:92:85:23:d4:cb:fc: 54:e8:38:36:bd:1d:fb:ef:42:3c:3f:8b:32:89:d9:9f:5b:e5: 24:5d:25:94:7b:15:a3:28:40:a3:fa:08:3f:57:8a:22:fc:48: a1:d7:4a:4e:4a:6d:8f:42:bb:ff:9f:0c:eb:d2:43:d2:1b:a6: b5:24:60:96:80:8a:bc:fa:d1:f7:a3:52:6a:4e:17:95:29:40: 11:b4:73:84:76:11:26:9c:d1:81:6d:60:20:d1:f1:78:03:35: 9d:d8:ea:03:6b:b6:b4:4e:0a:4a:df:06:b3:74:0c:15:cb:3a: ab:83:1e:41:09:2d:5b:eb:e2:9f:0d:9f:76:f8:66:f7:4c:db: 51:0a:e2:d7:ea:7c:d7:fe:ec:a0:2d:33:72:1a:0d:5a:e8:76: b2:51:10:6c:22:60:ca:ff:ba:ab:0f:4e:3f:5d:fb:8a:9c:fc: dd:4c:54:57:b8:83:c7:fb:1e:b8:f9:32:65:e6:b6:b8:82:2c: 24:43:2b:d2:6e:8f:b2:c9:eb:3e:98:4b:8f:25:fd:31:f2:fe: 92:f5:d7:f0:05:3d:f0:5f:c5:0a:fa:24:ff:8c:ad:f6:16:f8: 5d:13:e0:d5:7f:f2:59:b6:d3:ef:f8:a4:72:57:44:d6:13:e0: 57:38:4a:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjUwNDIwMTUxMTA1WhcNMjUwNDI3MTUxMTA1WjAYMRYwFAYD VQQDEw02ODA1MGU4YS1lYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubA3+hjlymyBdHT9kVZAfiNheSzoc5IDpXSPg5hH03YBE7s1NS+EaIfKdPdZ UMUxPxDkYg3b+/rraRgXXcotAuXkNemHMv8UEEVjNL4j9s9fQ+DQfzwOQdDUyzCz 1seGSc38BQDjzA6v58SKctU2FKvpDeUhirTgLU+FJlGr/OMUOT/IX9MSFS5WCal3 qxo12d36L2/QV0KjsS/GV/5Y41Y5qcXX66A+McvP39IVOzTLWYTAFs6PaUaR2K3w 38OqvJl49+TObyaXSkfm0QS4+MxDKxLTq5JuFgey8xkOFO6IzCDxU29Hi+7vvI3q JPqBQLtSeLq+mKFqvBNe1RuwQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfumH/x u+jvsD4tDfzYS1amdEc3MB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJXaclaWejsqbONYOShSPUy/xU6Dg2vR3770I8P4syidmfW+UkXSWU exWjKECj+gg/V4oi/Eih10pOSm2PQrv/nwzr0kPSG6a1JGCWgIq8+tH3o1JqTheV KUARtHOEdhEmnNGBbWAg0fF4AzWd2OoDa7a0TgpK3wazdAwVyzqrgx5BCS1b6+Kf DZ92+Gb3TNtRCuLX6nzX/uygLTNyGg1a6HayURBsImDK/7qrD04/XfuKnPzdTFRX uIPH+x64+TJl5ra4giwkQyvSbo+yyes+mEuPJf0x8v6S9dfwBT3wX8UK+iT/jK32 FvhdE+DVf/JZttPv+KRyV0TWE+BXOEro -----END CERTIFICATE-----Generated at Sun Apr 20 22:22:27 2025 by rpki-client