$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: nt/P3s4ySHz2uaxTerXdAdrql0pdP6y0ECT4zwrOeOk= Subject key identifier: A2:23:65:17:EC:CE:10:6F:38:B1:20:EC:38:3E:21:DE:08:1E:94:C2 Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: 61 Signing time: Wed 09 Apr 2025 05:51:17 +0000 Manifest this update: Wed 09 Apr 2025 05:51:17 +0000 Manifest next update: Wed 16 Apr 2025 05:51:17 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: dMJh5YAwqrlrAoiVYTYj6Ywi6z9a4p2JBnnayYdIMJg=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC Validity Not Before: Apr 9 05:51:17 2025 GMT Not After : Apr 16 05:51:17 2025 GMT Subject: CN=67f60ad5-4f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:f9:7b:ac:e1:b4:65:a0:6f:57:8e:40:07: 3c:f5:ac:f6:d3:93:d3:f1:1c:83:4e:34:67:33:27: b6:48:0f:f1:63:45:b9:87:21:42:57:82:47:a7:0f: 14:99:55:d4:3e:a7:b4:72:1a:8c:41:fd:05:ee:34: e1:2b:b3:1d:f4:b9:1d:90:8e:20:0e:07:8e:80:27: 0f:99:39:ac:1d:1b:36:73:d7:85:4e:9e:a5:ad:cc: 6d:93:d2:9d:36:98:68:fc:92:92:e7:13:88:32:6c: 37:c3:d7:a2:a6:09:f8:8b:c6:a7:f5:67:1c:aa:5e: 6b:25:e4:27:1e:f0:6b:9a:a9:05:23:e9:aa:5e:1e: 5f:76:c6:c3:e6:10:2e:6d:4b:a3:6b:79:df:c5:03: 02:49:38:e0:0d:e8:f1:2f:d9:a7:02:42:8a:f1:43: ea:82:90:97:3b:f2:35:e8:e5:37:3a:fa:98:a9:95: f0:7b:29:7b:6d:b5:5c:99:45:fb:30:88:0c:3c:dd: 0e:10:5b:ae:d3:e4:7b:01:12:0d:85:5e:cf:8f:78: af:8a:63:b0:80:51:22:fe:e8:ce:e0:c1:f1:f3:33: 6a:dc:18:6f:66:2d:e1:5a:c5:80:74:98:00:0e:4e: df:62:66:10:a9:96:e6:66:f3:6d:2f:33:7e:ff:3d: d2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:65:17:EC:CE:10:6F:38:B1:20:EC:38:3E:21:DE:08:1E:94:C2 X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:26:d9:82:54:c9:5f:6d:ec:7e:3e:2c:ba:87:92:fe:d4:3b: 19:43:95:7c:73:8b:c9:55:d3:b6:32:a6:22:dc:1d:41:ec:28: 64:37:7e:8f:33:c5:86:47:c0:0c:8f:ba:38:fd:70:7c:32:2b: 5a:c3:a8:02:db:95:12:33:92:f8:7c:07:6a:55:35:17:51:30: da:e6:d9:2c:d0:8e:14:1e:f8:4c:67:ca:64:2b:b2:c4:f2:97: f1:93:fe:53:75:4d:2e:39:59:e2:68:76:fd:02:22:97:ea:0c: 02:63:e0:6d:e9:d1:c6:e8:a6:dc:18:0c:cf:e1:83:d0:b9:5b: 4f:21:55:e9:4b:b8:d4:19:b7:5b:7e:7c:58:bd:7a:35:bc:9d: e4:9d:52:51:67:76:b3:86:ef:8e:e1:21:66:72:d9:57:32:c2: 9e:98:06:1a:b4:a4:35:b8:2a:04:ee:e3:83:97:65:5e:53:10: 6d:27:c0:53:54:fb:79:02:8a:07:04:1a:7b:29:9a:0f:3e:f7: f7:ff:3a:8e:1e:9f:f0:2a:10:5f:57:08:6e:80:65:c9:d0:58: 9e:bf:fd:9c:77:d1:ca:f0:35:a5:f2:04:ca:d7:ad:ec:91:58: 2d:9d:4f:28:64:4f:58:fe:aa:b8:85:01:0d:6a:f8:28:1e:a1: cc:a3:9f:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoREQ1NzQ2MEYwQzEyQkUwNTQ2MTNBMkY0Mjk2N0IwN0RB NTY4N0JGMDAeFw0yNTA0MDkwNTUxMTdaFw0yNTA0MTYwNTUxMTdaMBgxFjAUBgNV BAMTDTY3ZjYwYWQ1LTRmNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmGvl7rOG0ZaBvV45ABzz1rPbTk9PxHINONGczJ7ZID/FjRbmHIUJXgkenDxSZ VdQ+p7RyGoxB/QXuNOErsx30uR2QjiAOB46AJw+ZOawdGzZz14VOnqWtzG2T0p02 mGj8kpLnE4gybDfD16KmCfiLxqf1ZxyqXmsl5Cce8GuaqQUj6apeHl92xsPmEC5t S6Nred/FAwJJOOAN6PEv2acCQorxQ+qCkJc78jXo5Tc6+piplfB7KXtttVyZRfsw iAw83Q4QW67T5HsBEg2FXs+PeK+KY7CAUSL+6M7gwfHzM2rcGG9mLeFaxYB0mAAO Tt9iZhCpluZm820vM37/PdIvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoiNlF+zO EG84sSDsOD4h3ggelMIwHwYDVR0jBBgwFoAU3VdGDwwSvgVGE6L0KWewfaVoe/Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzVBMTgyQzdDODUy MzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2Vf QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1ZkR0R3d1N2Z1ZHRTZMMEtXZXdmYVZvZV9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzVBMTgyQzdDODUyMzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdW R0U2TDBLV2V3ZmFWb2VfQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKEm2YJUyV9t7H4+LLqHkv7UOxlDlXxzi8lV07YypiLcHUHsKGQ3fo8z xYZHwAyPujj9cHwyK1rDqALblRIzkvh8B2pVNRdRMNrm2SzQjhQe+ExnymQrssTy l/GT/lN1TS45WeJodv0CIpfqDAJj4G3p0cboptwYDM/hg9C5W08hVelLuNQZt1t+ fFi9ejW8neSdUlFndrOG747hIWZy2Vcywp6YBhq0pDW4KgTu44OXZV5TEG0nwFNU +3kCigcEGnspmg8+9/f/Oo4en/AqEF9XCG6AZcnQWJ6//Zx30crwNaXyBMrXreyR WC2dTyhkT1j+qriFAQ1q+Cgeocyjn7Q= -----END CERTIFICATE-----Generated at Thu Apr 10 22:12:27 2025 by rpki-client