$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: UwDJp89i/hWbGzv6TiLBMTJIJVjJIOusAC9n6iLXLI8= Subject key identifier: CD:97:F7:EF:E0:A2:16:B6:C1:7A:12:8F:22:C1:F8:02:AE:A8:6B:F4 Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 03DC Signing time: Sat 29 Mar 2025 00:51:45 +0000 Manifest this update: Sat 29 Mar 2025 00:51:45 +0000 Manifest next update: Sat 05 Apr 2025 00:51:45 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: 7bgGAe2Tpg36o1Pg9ZkBCkUqCep15ZZVFt5wS48xmz4=) 2: 2940AFDCD84211EDBD609A4DC4F9AE02.roa (hash: 0k/cIYnPQXwy+zTSkxTlGjeXYEeYNzK6r8YzvtnE4aQ=) 3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556 Validity Not Before: Mar 29 00:51:45 2025 GMT Not After : Apr 5 00:51:45 2025 GMT Subject: CN=67e74421-33f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:50:4b:09:c3:a4:6a:73:35:d2:e6:80:92:16: 3a:c4:3d:d9:bc:63:e2:ed:72:16:7f:6e:69:ef:c0: d5:87:92:6e:26:e9:7a:f5:1b:1a:06:44:94:23:9a: b1:0d:5e:7d:ea:d9:58:59:46:ff:38:65:b9:93:63: 05:94:60:ab:65:33:34:91:82:d1:c5:b0:f4:ec:58: 0f:37:92:80:cc:07:95:7a:60:c8:ec:7a:6f:f5:43: 4c:56:6b:f8:c7:f2:1e:b9:9f:bf:37:1e:27:44:72: a9:9a:fd:60:d9:79:f6:72:cf:b8:be:ab:0c:e5:0b: 28:67:b8:79:89:38:3c:26:f5:e1:9a:9d:4b:4a:8c: 93:5c:48:75:46:29:54:74:55:39:89:22:54:79:67: 07:20:3d:22:da:af:45:2d:00:90:62:0b:8b:91:11: e8:32:6d:44:4a:15:03:e3:02:e7:9e:56:d8:9b:5a: 08:f2:79:d7:08:22:d1:ee:fa:34:be:fa:4d:4f:79: 6f:6c:2d:34:5a:ea:67:36:4b:44:de:1f:55:3d:df: cf:50:ea:ba:2b:f8:9a:f8:fc:f6:6b:25:39:e4:2e: ad:07:01:88:05:32:f6:b9:31:4e:7a:f7:8a:ce:2c: 3a:b6:ff:3a:98:59:81:32:14:f9:85:01:dd:20:50: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:97:F7:EF:E0:A2:16:B6:C1:7A:12:8F:22:C1:F8:02:AE:A8:6B:F4 X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:59:35:c3:2d:51:e9:f2:00:5e:d6:11:0e:19:46:d3:17:85: 25:20:ea:30:9d:55:f7:66:1d:8d:f8:bf:49:2d:e5:da:21:29: e8:e4:08:8b:d9:1d:6e:2e:ea:ca:f5:19:69:97:5b:bc:2a:4a: 66:7f:16:ff:e0:cd:4d:fc:44:a4:0f:54:05:3e:e0:7d:66:07: c0:df:b1:27:84:60:71:23:95:ac:a7:d5:46:1e:cf:6b:84:2b: 7e:d3:0a:1e:f1:96:95:32:90:3c:b6:4d:04:4e:40:ef:38:3e: e3:67:22:49:75:03:41:c5:a6:ed:f4:82:68:b6:ae:4f:db:4e: 46:a3:13:54:2a:a6:c9:84:9e:cf:b6:f6:90:d2:50:c5:68:a7: bf:60:b2:bd:7c:c8:9f:6f:0d:61:0c:14:46:80:f9:03:43:ff: 4e:cd:6d:b9:8a:cf:f6:f6:40:b9:64:01:e7:ea:82:81:81:c7: 71:6e:1f:66:76:0f:3e:55:46:18:ea:31:99:6c:e8:7b:02:8e: 2c:5e:a2:d8:dd:5c:be:db:78:47:56:29:42:38:80:77:34:34: 88:da:3e:5d:66:01:72:78:99:f8:46:74:bd:a5:d8:5f:ec:d5: 5f:8c:49:15:3f:13:04:6d:f7:e2:ef:f8:55:21:71:c9:4b:98: 11:77:71:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjUwMzI5MDA1MTQ1WhcNMjUwNDA1MDA1MTQ1WjAYMRYwFAYD VQQDEw02N2U3NDQyMS0zM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFBLCcOkanM10uaAkhY6xD3ZvGPi7XIWf25p78DVh5JuJul69RsaBkSUI5qx DV596tlYWUb/OGW5k2MFlGCrZTM0kYLRxbD07FgPN5KAzAeVemDI7Hpv9UNMVmv4 x/IeuZ+/Nx4nRHKpmv1g2Xn2cs+4vqsM5QsoZ7h5iTg8JvXhmp1LSoyTXEh1RilU dFU5iSJUeWcHID0i2q9FLQCQYguLkRHoMm1EShUD4wLnnlbYm1oI8nnXCCLR7vo0 vvpNT3lvbC00WupnNktE3h9VPd/PUOq6K/ia+Pz2ayU55C6tBwGIBTL2uTFOeveK ziw6tv86mFmBMhT5hQHdIFB9+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2X9+/g oha2wXoSjyLB+AKuqGv0MB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClWTXDLVHp8gBe1hEOGUbTF4UlIOownVX3Zh2N+L9JLeXaISno5AiL 2R1uLurK9Rlpl1u8Kkpmfxb/4M1N/ESkD1QFPuB9ZgfA37EnhGBxI5Wsp9VGHs9r hCt+0woe8ZaVMpA8tk0ETkDvOD7jZyJJdQNBxabt9IJotq5P205GoxNUKqbJhJ7P tvaQ0lDFaKe/YLK9fMifbw1hDBRGgPkDQ/9OzW25is/29kC5ZAHn6oKBgcdxbh9m dg8+VUYY6jGZbOh7Ao4sXqLY3Vy+23hHVilCOIB3NDSI2j5dZgFyeJn4RnS9pdhf 7NVfjEkVPxMEbffi7/hVIXHJS5gRd3Hr -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:33 2025 by rpki-client