$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: 49SMjdXf0UpLupv73kCg0D4dymlVcNYdLItDIler87E= Subject key identifier: 5D:F2:19:7F:BF:C1:CC:C9:CF:30:25:F8:DF:5E:93:80:CD:5C:FA:4E Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: C2 Signing time: Thu 03 Apr 2025 05:03:06 +0000 Manifest this update: Thu 03 Apr 2025 05:03:05 +0000 Manifest next update: Thu 10 Apr 2025 05:03:05 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: EvPJEuCMcqE2VBnQRVEoY4o8qtEqh2nco/NcOqDj65I=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3 Validity Not Before: Apr 3 05:03:05 2025 GMT Not After : Apr 10 05:03:05 2025 GMT Subject: CN=67ee1689-ea86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:95:d9:43:ba:a2:53:d6:f6:d0:b1:45:47: f0:c1:9f:21:c7:04:41:a3:60:56:2b:2c:d7:d5:25: ad:f7:c2:74:ba:a1:42:ef:30:17:f5:cf:aa:a2:87: 89:e1:3f:d9:35:d1:ec:e3:f4:77:5d:92:61:db:6f: e0:ea:62:a6:b9:0a:33:a7:d4:e2:35:be:b1:df:b7: 6e:56:f6:55:54:31:48:02:e3:7d:d0:d3:cc:41:87: 03:e7:8b:ea:ab:05:03:93:93:cf:19:8c:05:a2:79: d7:40:49:6c:23:e0:a1:83:53:b5:d5:7b:6d:d0:40: 8d:6d:94:6b:84:be:0b:1a:e2:5c:aa:aa:06:22:bf: 5c:97:9e:29:e3:30:a8:ba:44:30:b1:fc:30:00:98: 31:49:5c:db:96:3d:20:2b:cb:49:eb:af:3b:94:33: 8b:c7:cf:05:8a:d1:02:19:14:c2:e6:62:a6:51:8d: 0d:b5:16:e6:a4:7f:33:9c:08:b0:e6:dd:a9:42:03: 48:3e:a0:f4:43:5d:e7:b0:ae:39:ca:8e:fa:3b:5b: b1:a8:6f:c1:e8:81:14:4d:f4:ce:48:f8:6a:18:c4: aa:13:04:4a:30:67:d7:9e:d5:77:35:c1:b6:bd:6e: 2d:c8:99:69:78:3a:96:ac:66:1c:6a:a6:43:2d:64: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F2:19:7F:BF:C1:CC:C9:CF:30:25:F8:DF:5E:93:80:CD:5C:FA:4E X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:c5:a2:65:61:a6:e0:7e:1b:72:b6:41:86:99:cd:d0:af: b9:85:ad:cc:02:ff:3b:e7:eb:45:72:6d:70:e2:2e:26:f2:68: 23:87:3a:81:0a:bb:e6:00:e6:fb:85:4b:1d:9c:fb:42:44:c6: b4:bb:88:85:63:28:04:89:70:ad:a9:ac:79:0c:89:d8:4a:cc: 3a:b2:77:72:98:36:83:6d:40:8f:49:a1:83:d7:5d:97:20:44: 83:4c:a5:06:8c:3f:02:a8:55:0e:74:41:22:d7:78:47:31:fd: 06:dc:09:5c:c3:3f:2a:78:8b:fd:f1:80:33:ee:62:eb:7b:6f: f1:55:b9:07:c6:bd:33:21:04:f3:be:82:f8:f4:17:92:8a:50: eb:7b:28:e8:f2:3b:08:3b:f9:9b:a6:cc:38:df:27:7e:50:44: 72:f9:a4:c2:da:9d:11:4f:94:59:bc:86:bb:99:9e:b6:68:dc: 4f:17:d2:69:26:15:32:ab:92:77:8b:bb:00:9c:82:92:51:f7: b0:14:0e:01:77:0d:6b:37:5b:c9:a1:bf:02:f0:37:da:5e:7e: df:7d:7e:90:1e:12:ea:a6:c4:6b:c8:1c:cb:52:7a:fb:75:6d: 5a:d3:b9:e8:03:6a:3b:3e:1b:27:1e:c2:99:50:ae:9b:87:68: 53:c9:cc:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjUwNDAzMDUwMzA1WhcNMjUwNDEwMDUwMzA1WjAYMRYwFAYD VQQDEw02N2VlMTY4OS1lYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGeV2UO6olPW9tCxRUfwwZ8hxwRBo2BWKyzX1SWt98J0uqFC7zAX9c+qooeJ 4T/ZNdHs4/R3XZJh22/g6mKmuQozp9TiNb6x37duVvZVVDFIAuN90NPMQYcD54vq qwUDk5PPGYwFonnXQElsI+Chg1O11Xtt0ECNbZRrhL4LGuJcqqoGIr9cl54p4zCo ukQwsfwwAJgxSVzblj0gK8tJ6687lDOLx88FitECGRTC5mKmUY0NtRbmpH8znAiw 5t2pQgNIPqD0Q13nsK45yo76O1uxqG/B6IEUTfTOSPhqGMSqEwRKMGfXntV3NcG2 vW4tyJlpeDqWrGYcaqZDLWTNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3yGX+/ wczJzzAl+N9ek4DNXPpOMB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKEsWiZWGm4H4bcrZBhpnN0K+5ha3MAv875+tFcm1w4i4m8mgjhzqB CrvmAOb7hUsdnPtCRMa0u4iFYygEiXCtqax5DInYSsw6sndymDaDbUCPSaGD112X IESDTKUGjD8CqFUOdEEi13hHMf0G3Alcwz8qeIv98YAz7mLre2/xVbkHxr0zIQTz voL49BeSilDreyjo8jsIO/mbpsw43yd+UERy+aTC2p0RT5RZvIa7mZ62aNxPF9Jp JhUyq5J3i7sAnIKSUfewFA4Bdw1rN1vJob8C8DfaXn7ffX6QHhLqpsRryBzLUnr7 dW1a07noA2o7PhsnHsKZUK6bh2hTycxB -----END CERTIFICATE-----Generated at Fri Apr 4 22:26:57 2025 by rpki-client