$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: FzK0CIgY8YFWrlaX29t1gwTbqdMzJClnIoBzKnAlA6o= Subject key identifier: 38:03:6B:E7:F7:AD:9E:33:4A:8F:E7:43:74:F6:AE:90:1F:D8:E2:11 Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 056D Signing time: Fri 28 Mar 2025 23:37:34 +0000 Manifest this update: Fri 28 Mar 2025 23:37:33 +0000 Manifest next update: Fri 04 Apr 2025 23:37:33 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: NoxPcmF5JU+75GOAZabLJH8YBeyAvX93YGht64jJDbI=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: cPDgWfK2zOB3bgbWohc7RllaAj78iS9Dek771g2OWfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD Validity Not Before: Mar 28 23:37:33 2025 GMT Not After : Apr 4 23:37:33 2025 GMT Subject: CN=67e732be-3bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:f4:81:a7:d3:b6:0b:10:60:50:d5:0a:56: 11:eb:4f:d6:52:a9:02:65:15:a9:e3:a2:1e:78:77: 3d:90:37:4d:79:a7:43:58:57:0b:0b:fc:b7:4b:12: ea:34:12:dc:df:35:12:3b:28:4e:5f:ef:4a:32:e4: ee:8e:a2:33:bd:aa:76:2d:e0:a6:a0:34:0e:f5:ce: 10:b8:05:f6:c0:05:d9:1e:a3:d1:37:d1:ec:1b:11: cc:cc:87:e7:6a:34:4e:76:4f:9b:1f:22:70:95:f0: 53:a0:e9:c9:8b:72:96:1a:34:17:8e:00:32:e7:3b: f8:5b:d2:4b:33:f7:54:d1:ca:38:57:40:39:ee:0b: 78:30:a2:cb:5e:e7:38:af:2e:87:41:d1:87:92:e4: 23:b2:10:17:14:4d:19:33:63:2c:22:d1:fb:f3:c9: b1:69:f5:bb:7b:27:e9:59:a4:f8:fd:cf:b4:5a:08: ef:43:d9:5f:e6:0b:79:9f:d1:1c:aa:64:b2:c1:9c: c4:32:10:64:06:b5:03:8d:db:13:8b:27:aa:43:99: 6d:77:49:f3:4a:c9:cb:c1:e2:75:b3:97:08:5f:54: 22:19:02:e5:88:a6:83:84:5f:d2:7a:46:48:a6:1a: 8c:7b:c7:c3:c8:08:45:54:61:43:fd:4d:05:30:7e: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:03:6B:E7:F7:AD:9E:33:4A:8F:E7:43:74:F6:AE:90:1F:D8:E2:11 X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b9:b7:d5:3a:ec:64:51:73:a6:46:ea:a1:af:05:46:9e:20: f5:53:ab:92:e0:7a:d2:19:59:3d:d8:bd:2b:f7:d9:53:4e:ab: ea:e9:b4:cf:61:1d:f8:57:a7:b6:ef:bc:c7:f3:99:5c:63:59: 88:90:b9:84:80:a6:19:f9:4b:7d:37:94:8c:0b:7c:12:f3:dc: 98:5a:1e:be:6d:ee:be:2f:c8:cd:34:15:9a:c6:00:dc:4e:09: c4:c7:b1:87:8a:c8:c7:cc:47:07:bd:5c:81:59:c1:b1:a9:08: 3b:6a:77:76:92:a4:d3:a6:11:3b:94:07:18:91:62:85:fc:23: 67:1c:6f:fc:32:03:d4:d1:32:98:35:c5:64:e6:e1:72:1b:02: 0d:03:81:1b:92:da:03:f5:0f:fa:0c:54:ad:3d:c2:b5:07:ee: 99:72:86:01:ea:88:7e:c2:0c:e1:fc:78:60:de:29:ed:ec:fa: b0:47:11:d9:cf:14:bb:93:b8:d4:2d:e7:ae:2c:37:e6:44:2b: 62:8c:76:28:2f:5c:fc:bc:63:81:83:e4:5c:31:d7:37:1b:e8: 87:07:b6:29:aa:25:27:a2:42:82:26:03:47:39:a7:77:d3:13: 13:b2:5c:a3:af:f9:9a:55:04:b4:1d:da:52:8e:9b:1e:df:18: 1d:0e:42:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjUwMzI4MjMzNzMzWhcNMjUwNDA0MjMzNzMzWjAYMRYwFAYD VQQDEw02N2U3MzJiZS0zYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4/0gafTtgsQYFDVClYR60/WUqkCZRWp46IeeHc9kDdNeadDWFcLC/y3SxLq NBLc3zUSOyhOX+9KMuTujqIzvap2LeCmoDQO9c4QuAX2wAXZHqPRN9HsGxHMzIfn ajROdk+bHyJwlfBToOnJi3KWGjQXjgAy5zv4W9JLM/dU0co4V0A57gt4MKLLXuc4 ry6HQdGHkuQjshAXFE0ZM2MsItH788mxafW7eyfpWaT4/c+0WgjvQ9lf5gt5n9Ec qmSywZzEMhBkBrUDjdsTiyeqQ5ltd0nzSsnLweJ1s5cIX1QiGQLliKaDhF/SekZI phqMe8fDyAhFVGFD/U0FMH7iuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgDa+f3 rZ4zSo/nQ3T2rpAf2OIRMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMubfVOuxkUXOmRuqhrwVGniD1U6uS4HrSGVk92L0r99lTTqvq6bTP YR34V6e277zH85lcY1mIkLmEgKYZ+Ut9N5SMC3wS89yYWh6+be6+L8jNNBWaxgDc TgnEx7GHisjHzEcHvVyBWcGxqQg7and2kqTTphE7lAcYkWKF/CNnHG/8MgPU0TKY NcVk5uFyGwINA4EbktoD9Q/6DFStPcK1B+6ZcoYB6oh+wgzh/Hhg3int7PqwRxHZ zxS7k7jULeeuLDfmRCtijHYoL1z8vGOBg+RcMdc3G+iHB7YpqiUnokKCJgNHOad3 0xMTslyjr/maVQS0HdpSjpse3xgdDkJL -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:48 2025 by rpki-client