$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: 7BGXmzqXpI69624x3yILx7+ZhID7S7WN0vqzvNNdFvs= Subject key identifier: 42:70:82:3C:83:26:EC:4A:2C:07:85:25:FE:07:79:BB:46:FB:3B:74 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 033D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0336 Signing time: Sat 19 Apr 2025 01:03:29 +0000 Manifest this update: Sat 19 Apr 2025 01:03:28 +0000 Manifest next update: Sat 26 Apr 2025 01:03:28 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: hfhMnB/4lqjor14v6Gtb28ohMyWaTQaQl1UnHM2PVUs=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: cZx0qXYBX+AYL013+FqThkX1+Tb5yDxAcWdH8ZbjfkA=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: byHK1k9Kptni3DE/dYb+CIJQHhmNjQCYM2tQRu5DpPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 01:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 829 (0x33d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Apr 19 01:03:28 2025 GMT Not After : Apr 26 01:03:28 2025 GMT Subject: CN=6802f661-2b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:b9:c0:02:49:96:44:7e:b7:35:70:5e:21: 04:39:80:63:30:51:32:75:41:58:c4:ff:9e:d2:78: 33:e4:02:10:98:c1:72:ff:a7:f6:80:ad:a6:9a:cb: 1e:04:fb:d1:c1:91:11:d6:54:b9:22:2c:df:d5:06: 73:89:e7:10:7c:86:67:c4:dc:de:9a:a8:ae:d2:f8: cd:65:cc:8f:ce:0c:b2:7b:f9:da:ca:4b:b8:c8:31: 17:3e:43:1e:4b:b1:69:15:cf:f0:24:aa:02:d0:ff: ce:30:61:15:6c:b2:8a:4a:b4:bc:e8:4f:b8:d1:bf: 3c:b8:12:af:21:91:d7:d9:6b:c0:29:ab:47:d9:b0: 69:87:a4:bb:e4:f7:cc:5f:ad:91:a5:56:98:bd:a4: 50:73:78:a4:e5:49:ce:57:e9:84:bf:05:f7:c3:09: 34:db:55:51:28:54:84:96:24:28:70:e7:69:f2:a1: a7:e4:c7:a8:d1:30:a6:97:08:61:0b:db:11:d1:58: d8:a0:7b:95:c2:0c:d7:77:fe:23:55:53:b9:96:9f: a1:77:56:58:2f:11:0d:ec:9b:3d:1f:df:c3:07:82: d6:19:7b:e7:a7:72:38:3e:c2:25:08:a9:15:1a:fe: 51:ef:81:7d:f3:32:49:a6:2f:f1:c5:1c:2c:18:89: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:70:82:3C:83:26:EC:4A:2C:07:85:25:FE:07:79:BB:46:FB:3B:74 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e1:2a:90:e9:63:3f:65:84:73:de:29:0c:9f:58:c2:db:3a: 79:18:8d:9b:0b:3f:bd:f6:8e:06:fb:bf:56:40:60:09:bf:1a: 5b:6f:26:32:bf:b8:a8:79:19:3e:15:01:41:fb:93:f4:0e:5e: 8c:69:df:95:df:49:9c:28:81:15:ff:1c:7f:07:a4:fa:15:bf: 19:9d:97:3c:4d:fc:46:d9:4e:4b:55:12:b4:6b:ca:8c:19:b9: 8c:ac:1a:77:fc:5c:dc:c9:65:af:cb:7c:c2:3f:13:a7:77:4c: 42:f0:62:7a:d8:ad:88:93:2b:a0:76:c5:e2:90:de:e4:9c:55: 82:b6:fe:2c:86:82:0b:ca:2b:95:52:3e:50:ef:7b:4c:15:b0: 2b:72:45:74:53:60:b2:f3:89:36:d5:eb:9d:bd:05:cc:08:05: be:14:d2:01:4f:8e:4a:c3:89:97:7e:d8:0f:87:00:55:fe:52: 80:2c:fa:49:14:56:1e:55:be:d7:67:62:37:75:48:a4:e5:19: e6:58:09:d4:65:b9:74:d4:01:35:f0:ad:f7:bb:06:53:50:43: 81:ff:de:90:58:05:e9:7f:5e:c1:3b:1e:44:8f:68:0f:ba:14: 53:17:59:fe:3e:7f:2a:67:47:f1:ce:62:02:40:60:0f:aa:a7: bd:4c:ce:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjUwNDE5MDEwMzI4WhcNMjUwNDI2MDEwMzI4WjAYMRYwFAYD VQQDEw02ODAyZjY2MS0yYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBG5wAJJlkR+tzVwXiEEOYBjMFEydUFYxP+e0ngz5AIQmMFy/6f2gK2mmsse BPvRwZER1lS5Iizf1QZziecQfIZnxNzemqiu0vjNZcyPzgyye/nayku4yDEXPkMe S7FpFc/wJKoC0P/OMGEVbLKKSrS86E+40b88uBKvIZHX2WvAKatH2bBph6S75PfM X62RpVaYvaRQc3ik5UnOV+mEvwX3wwk021VRKFSEliQocOdp8qGn5Meo0TCmlwhh C9sR0VjYoHuVwgzXd/4jVVO5lp+hd1ZYLxEN7Js9H9/DB4LWGXvnp3I4PsIlCKkV Gv5R74F98zJJpi/xxRwsGImZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJwgjyD JuxKLAeFJf4HebtG+zt0MB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj4SqQ6WM/ZYRz3ikMn1jC2zp5GI2bCz+99o4G+79WQGAJvxpbbyYy v7ioeRk+FQFB+5P0Dl6Mad+V30mcKIEV/xx/B6T6Fb8ZnZc8TfxG2U5LVRK0a8qM GbmMrBp3/FzcyWWvy3zCPxOnd0xC8GJ62K2IkyugdsXikN7knFWCtv4shoILyiuV Uj5Q73tMFbArckV0U2Cy84k21eudvQXMCAW+FNIBT45Kw4mXftgPhwBV/lKALPpJ FFYeVb7XZ2I3dUik5RnmWAnUZbl01AE18K33uwZTUEOB/96QWAXpf17BOx5Ej2gP uhRTF1n+Pn8qZ0fxzmICQGAPqqe9TM4R -----END CERTIFICATE-----Generated at Sat Apr 19 08:27:33 2025 by rpki-client