$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: Ay96qrxFVZBya/0yzVhB2I6ZwUyy90+CSVbwI7R3470= Subject key identifier: B1:28:E1:95:6B:48:EA:07:5A:D1:9F:24:0E:E9:E2:B6:16:51:B7:EE Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1CDC Signing time: Sat 12 Apr 2025 16:07:11 +0000 Manifest this update: Sat 12 Apr 2025 16:07:10 +0000 Manifest next update: Sat 19 Apr 2025 16:07:10 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: zPZWQHw8lKwrxBk5Gn6z0zq8/t/wHnLT2eddgmJC00A=) 2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: fz4f6MmX7R6kRL2gcaEtaQrQoy9cdumfsJWJxUL1YME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7398 (0x1ce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Apr 12 16:07:10 2025 GMT Not After : Apr 19 16:07:10 2025 GMT Subject: CN=67fa8faf-4dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:cb:cf:0f:08:54:d0:ab:a7:5c:d5:65:be: 38:30:62:df:04:96:9c:7a:20:46:aa:90:cb:8e:95: 27:18:a8:e8:41:7e:fe:e0:18:16:a6:4d:61:15:8d: 5d:15:d5:b4:ce:63:38:c7:ac:ee:43:48:42:1a:85: fb:44:57:7a:f1:d2:8b:7c:fe:ab:93:c4:20:e2:08: f2:04:70:52:42:9b:9f:6a:20:49:6d:8a:17:0e:ed: d8:f9:db:19:33:a2:27:82:da:fc:30:aa:5c:e1:1c: 6a:5e:79:99:53:9c:e3:e0:32:c0:b1:f4:c8:80:88: 68:ef:e1:4d:58:19:a8:eb:f0:15:b1:41:e7:26:d4: eb:45:e3:44:c1:f9:2d:2c:b4:dc:65:fe:e2:73:e4: 3d:d1:26:7a:20:ba:8a:48:05:f5:9c:75:cb:08:c1: a3:54:c8:c0:2f:95:5f:59:4a:23:69:88:9a:e1:7d: 35:cd:ec:1f:25:a3:e4:8f:a9:ae:9a:9a:23:d0:f0: fb:bd:f9:36:b3:d2:fa:e1:ec:78:14:86:e3:ef:ae: ef:bb:09:bd:8b:68:c2:c3:31:f3:d0:b6:13:8a:00: 3e:fc:21:33:3a:20:4e:6c:45:47:73:ad:ed:58:40: 99:db:c1:6d:3b:d5:15:2f:78:11:bf:ba:38:6e:97: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:28:E1:95:6B:48:EA:07:5A:D1:9F:24:0E:E9:E2:B6:16:51:B7:EE X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:72:ed:b8:b9:fa:58:85:05:e8:0f:1f:12:25:ce:00:6f:87: 82:21:84:3f:34:ec:c5:29:d3:70:ce:fd:d8:e7:a0:b0:3d:0f: 65:07:ab:0c:0c:24:42:5f:14:87:df:e0:cd:d3:4f:6f:3e:f6: e9:67:af:68:53:18:44:bb:1a:f6:8a:40:82:10:65:79:b9:b0: 8d:9a:a1:04:9a:a4:66:8d:90:48:29:f0:50:a7:06:ca:fe:0b: 46:ae:cb:cd:44:95:aa:66:15:ec:32:87:4f:d6:62:06:1f:10: 0e:7d:17:d9:d7:a9:21:f4:c8:05:85:0e:12:1a:7d:74:4a:24: 39:c5:5e:cf:2e:d8:9b:f3:25:88:05:85:6e:9b:c0:c0:ae:6f: 74:80:ad:49:af:5f:11:95:11:df:0b:12:9e:85:3b:31:fd:c6: 68:a7:8d:5d:4a:1f:d8:98:6f:99:c5:76:f8:dd:85:ce:10:83: ed:fb:c5:0d:f8:1f:49:11:75:c0:70:b6:84:37:e9:3b:81:6d: 79:61:1a:3c:f8:4f:c5:f3:f7:73:de:7d:9d:5d:f3:9a:75:97: f4:59:a5:cd:61:02:be:d3:91:c3:c8:70:4b:91:11:0f:80:e2: bd:5c:d5:4b:6c:89:56:ab:0a:89:41:e2:53:64:82:89:b9:f1: af:59:de:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjUwNDEyMTYwNzEwWhcNMjUwNDE5MTYwNzEwWjAYMRYwFAYD VQQDEw02N2ZhOGZhZi00ZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6nLzw8IVNCrp1zVZb44MGLfBJaceiBGqpDLjpUnGKjoQX7+4BgWpk1hFY1d FdW0zmM4x6zuQ0hCGoX7RFd68dKLfP6rk8Qg4gjyBHBSQpufaiBJbYoXDu3Y+dsZ M6Ingtr8MKpc4RxqXnmZU5zj4DLAsfTIgIho7+FNWBmo6/AVsUHnJtTrReNEwfkt LLTcZf7ic+Q90SZ6ILqKSAX1nHXLCMGjVMjAL5VfWUojaYia4X01zewfJaPkj6mu mpoj0PD7vfk2s9L64ex4FIbj767vuwm9i2jCwzHz0LYTigA+/CEzOiBObEVHc63t WECZ28FtO9UVL3gRv7o4bpeFQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEo4ZVr SOoHWtGfJA7p4rYWUbfuMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4cu24ufpYhQXoDx8SJc4Ab4eCIYQ/NOzFKdNwzv3Y56CwPQ9lB6sM DCRCXxSH3+DN009vPvbpZ69oUxhEuxr2ikCCEGV5ubCNmqEEmqRmjZBIKfBQpwbK /gtGrsvNRJWqZhXsModP1mIGHxAOfRfZ16kh9MgFhQ4SGn10SiQ5xV7PLtib8yWI BYVum8DArm90gK1Jr18RlRHfCxKehTsx/cZop41dSh/YmG+ZxXb43YXOEIPt+8UN +B9JEXXAcLaEN+k7gW15YRo8+E/F8/dz3n2dXfOadZf0WaXNYQK+05HDyHBLkREP gOK9XNVLbIlWqwqJQeJTZIKJufGvWd7I -----END CERTIFICATE-----Generated at Sat Apr 12 17:55:28 2025 by rpki-client