$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: bdLQlTwAOdTrl7hOxF3lKmsn8nnOyJX+F8g7WRBwH6g= Subject key identifier: CB:F7:11:28:D2:E4:B7:BD:98:36:68:87:B4:D7:35:E7:AD:36:7B:C9 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 034A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 033F Signing time: Sat 29 Mar 2025 01:18:50 +0000 Manifest this update: Sat 29 Mar 2025 01:18:49 +0000 Manifest next update: Sat 05 Apr 2025 01:18:49 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: qkbFj3y0j8NUigN2FB/D4j4sCjbw9Kx6GlzxfDSh+eQ=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB Validity Not Before: Mar 29 01:18:49 2025 GMT Not After : Apr 5 01:18:49 2025 GMT Subject: CN=67e74a7a-6ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:af:18:59:54:09:47:32:5f:b2:21:d5:6a: 3d:1e:a4:eb:f5:f2:8d:b7:ca:18:23:c0:69:5e:1a: 9a:23:06:d8:a1:14:7a:9d:28:5f:14:52:82:f5:23: 16:74:88:28:35:7d:1b:83:8d:ab:c4:a1:81:b5:2f: c2:2f:a3:c1:a1:2c:2b:98:ef:ed:97:b4:7a:bb:b3: 2b:5e:07:bb:c2:9d:9b:1f:49:a4:64:fa:c4:63:fc: 02:6d:91:c9:4a:ef:4d:60:23:07:77:b8:fd:4e:33: 7e:81:4e:52:97:96:73:91:91:23:e1:91:4b:ab:d8: e8:69:49:eb:aa:ec:39:6f:17:5a:b8:23:a4:9e:92: 82:7b:bb:c9:dd:b7:7d:f5:04:bb:d6:4d:b7:aa:7b: e2:2f:53:8a:6b:ca:24:58:44:9f:10:18:0b:a5:5a: 33:5b:98:35:59:b4:50:fd:f3:04:0d:58:f1:44:f2: 12:e8:f8:f1:28:ad:ad:46:f8:3e:3f:c4:ee:4b:68: 24:c3:90:82:7b:36:80:67:2b:77:10:70:83:a0:70: 4a:63:df:4a:ef:2d:94:a4:5d:87:ad:3b:17:34:29: 35:45:d6:70:08:ae:45:88:ac:bc:72:a5:60:35:c9: 71:59:67:61:f7:14:de:a1:34:8c:32:aa:a1:0b:64: 68:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F7:11:28:D2:E4:B7:BD:98:36:68:87:B4:D7:35:E7:AD:36:7B:C9 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ac:b9:9c:ac:58:15:c9:ed:14:a2:6b:7e:e5:d0:bf:77:77: 3d:43:e7:15:0b:77:a7:0f:eb:87:3a:bc:34:36:00:56:0b:b7: 0f:30:b9:08:42:f6:46:cd:25:a2:4a:df:8c:57:9e:3e:6d:1d: af:04:87:08:d1:c9:c4:73:4a:8c:d7:17:e8:77:95:53:5a:1c: fa:2b:71:cc:98:20:d1:0c:84:58:22:b8:43:26:0a:4f:57:8d: 47:9e:f0:89:83:0f:b6:97:c5:d5:36:59:ca:cb:bd:54:05:ac: 3a:a8:97:32:8d:50:8f:af:2a:00:2d:b3:41:cc:74:c7:7c:ad: 75:9c:b9:83:cf:39:db:24:db:20:3d:08:4a:f3:f6:48:89:5a: c5:81:1e:85:0f:97:73:03:e1:46:ea:80:01:90:bf:b8:9e:30: 8a:06:16:e3:9e:75:96:20:34:2a:30:40:1c:5f:8a:13:93:e1: a1:b5:24:50:85:60:a6:d3:64:d7:66:d4:80:3d:84:af:37:7f: 14:8a:68:eb:97:5c:13:30:97:e8:74:93:90:0e:4c:8e:25:1e: 94:bd:21:1e:97:14:c4:b5:71:eb:50:5a:37:47:57:b1:ef:10: 13:a4:97:48:8f:14:c5:55:ec:7a:08:86:d6:ea:3c:c8:aa:1b: 5e:1a:9b:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUwMzI5MDExODQ5WhcNMjUwNDA1MDExODQ5WjAYMRYwFAYD VQQDEw02N2U3NGE3YS02YWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79+vGFlUCUcyX7Ih1Wo9HqTr9fKNt8oYI8BpXhqaIwbYoRR6nShfFFKC9SMW dIgoNX0bg42rxKGBtS/CL6PBoSwrmO/tl7R6u7MrXge7wp2bH0mkZPrEY/wCbZHJ Su9NYCMHd7j9TjN+gU5Sl5ZzkZEj4ZFLq9joaUnrquw5bxdauCOknpKCe7vJ3bd9 9QS71k23qnviL1OKa8okWESfEBgLpVozW5g1WbRQ/fMEDVjxRPIS6PjxKK2tRvg+ P8TuS2gkw5CCezaAZyt3EHCDoHBKY99K7y2UpF2HrTsXNCk1RdZwCK5FiKy8cqVg NclxWWdh9xTeoTSMMqqhC2RonwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv3ESjS 5Le9mDZoh7TXNeetNnvJMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHrLmcrFgVye0Uomt+5dC/d3c9Q+cVC3enD+uHOrw0NgBWC7cPMLkI QvZGzSWiSt+MV54+bR2vBIcI0cnEc0qM1xfod5VTWhz6K3HMmCDRDIRYIrhDJgpP V41HnvCJgw+2l8XVNlnKy71UBaw6qJcyjVCPryoALbNBzHTHfK11nLmDzznbJNsg PQhK8/ZIiVrFgR6FD5dzA+FG6oABkL+4njCKBhbjnnWWIDQqMEAcX4oTk+GhtSRQ hWCm02TXZtSAPYSvN38Uimjrl1wTMJfodJOQDkyOJR6UvSEelxTEtXHrUFo3R1ex 7xATpJdIjxTFVex6CIbW6jzIqhteGpsD -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:17 2025 by rpki-client