$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json) Hash identifier: oFiKdCeHMmgWilpgC+gyKmyzzjx8yZdL+cNyrfGVpUs= Subject key identifier: 5A:A8:E1:05:15:11:42:6F:58:CA:6F:07:40:86:B6:D3:72:84:66:B5 Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft Manifest number: 06A5 Signing time: Fri 28 Mar 2025 22:27:31 +0000 Manifest this update: Fri 28 Mar 2025 22:27:31 +0000 Manifest next update: Fri 04 Apr 2025 22:27:31 +0000 Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: 6UTOsAvU446b3J0cH8lno7AlKpf/pgHPTGOPEpgYXQI=) 2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: owZNdsc75aBAEeMxk8dZOIuYb/+Ukc36obf7oLhTJGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11A Validity Not Before: Mar 28 22:27:31 2025 GMT Not After : Apr 4 22:27:31 2025 GMT Subject: CN=67e72253-f83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:8f:c2:b4:d8:59:cd:ec:9f:43:a4:ac:a9: 67:36:e4:14:76:e9:40:b6:93:7a:51:d5:77:5b:92: d7:be:12:8e:7e:62:f3:f8:05:1e:cb:44:0f:09:b4: d5:4e:08:82:68:7d:9d:1d:7d:1c:7c:d7:66:35:82: 22:2d:d3:9b:a1:4e:e9:80:e3:26:39:35:3c:97:cb: e5:f1:71:1b:ea:38:e3:42:a5:18:74:63:33:8e:21: 09:ad:31:89:1e:c8:9d:76:7f:d6:3f:ec:12:61:9a: 6f:3a:16:77:bc:87:dd:ec:2a:51:b5:58:a3:7b:13: 8a:8f:64:84:fa:95:37:62:c9:56:31:ae:16:e1:a2: 98:3e:21:f2:2c:ac:57:d4:c1:db:fa:3d:71:14:32: be:02:c2:a1:4c:28:66:f4:24:39:90:99:3e:a0:ca: e9:22:83:f9:a9:4c:8f:0f:1c:04:98:fd:41:0d:51: 76:67:12:ed:62:12:ea:bd:19:e0:23:08:c0:ca:15: 2f:05:b3:a3:3f:20:bf:d9:31:4c:ce:b0:57:b5:aa: e1:36:bd:af:e8:39:a6:29:a5:ac:51:65:0c:d3:aa: 4d:ba:64:9a:58:5b:c7:f4:44:0f:2b:d5:ff:1c:a7: 5e:70:f3:2e:e1:f9:a0:f5:36:8c:55:42:80:e6:2b: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:E1:05:15:11:42:6F:58:CA:6F:07:40:86:B6:D3:72:84:66:B5 X509v3 Authority Key Identifier: keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:8f:1b:c4:1d:01:d4:e3:70:f4:7b:1a:91:fd:01:ff:e6:12: d4:62:96:32:34:12:70:1d:4b:47:48:49:bc:09:ac:f7:74:62: c6:18:e6:06:e4:a4:54:4f:10:da:b0:d1:2c:ce:60:2c:65:ed: 28:9b:8f:f5:10:2e:81:ee:87:b1:7e:6b:a0:0f:ed:08:c2:f7: 7d:73:93:6f:9c:2e:35:36:5a:0b:4d:1e:81:1c:eb:04:16:07: 13:45:7c:4c:65:92:dd:1a:76:a8:ab:b8:22:f5:d1:76:73:4c: 50:ff:ca:fa:2e:9c:9c:93:28:61:a8:f1:bc:5f:03:1a:6b:14: 11:57:81:26:1c:e6:d6:94:5b:db:36:e9:00:74:47:03:f6:8d: 7e:1d:c0:36:68:b7:1c:22:e3:40:2b:6e:b9:3d:76:7b:69:64: a8:5b:26:24:7d:20:83:7b:f1:33:91:8a:25:81:30:bf:11:b0: ca:7d:2c:37:db:41:b8:37:08:24:9c:54:7a:4a:c8:78:e4:9f: 11:2b:ce:30:64:ad:7f:f2:82:b8:aa:c3:7b:7a:db:5e:e6:a4: ed:9c:20:79:69:0e:7b:3e:b9:97:cf:d7:36:1b:00:e2:2c:9f: 76:0a:14:b5:0c:cc:30:a1:72:e9:46:f1:ae:4f:25:2c:82:9c: c5:fc:02:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJDOTc2NThEQTcz Mjg1MDkzRTUwHhcNMjUwMzI4MjIyNzMxWhcNMjUwNDA0MjIyNzMxWjAYMRYwFAYD VQQDEw02N2U3MjI1My1mODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3ePwrTYWc3sn0OkrKlnNuQUdulAtpN6UdV3W5LXvhKOfmLz+AUey0QPCbTV TgiCaH2dHX0cfNdmNYIiLdOboU7pgOMmOTU8l8vl8XEb6jjjQqUYdGMzjiEJrTGJ Hsiddn/WP+wSYZpvOhZ3vIfd7CpRtVijexOKj2SE+pU3YslWMa4W4aKYPiHyLKxX 1MHb+j1xFDK+AsKhTChm9CQ5kJk+oMrpIoP5qUyPDxwEmP1BDVF2ZxLtYhLqvRng IwjAyhUvBbOjPyC/2TFMzrBXtarhNr2v6DmmKaWsUWUM06pNumSaWFvH9EQPK9X/ HKdecPMu4fmg9TaMVUKA5itk5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqo4QUV EUJvWMpvB0CGttNyhGa1MB8GA1UdIwQYMBaAFN6Bc+fSj+rR7DqSyXZY2nMoUJPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExQS9DMDg2RUE5ODVB MzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0SHNPcExKZGxqYWN5aFFr LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvRno1OUtQNnRIc09wTEpkbGphY3loUWstVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0 SHNPcExKZGxqYWN5aFFrLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIjxvEHQHU43D0exqR/QH/5hLUYpYyNBJwHUtHSEm8Caz3dGLGGOYG 5KRUTxDasNEszmAsZe0om4/1EC6B7oexfmugD+0Iwvd9c5NvnC41NloLTR6BHOsE FgcTRXxMZZLdGnaoq7gi9dF2c0xQ/8r6LpyckyhhqPG8XwMaaxQRV4EmHObWlFvb NukAdEcD9o1+HcA2aLccIuNAK265PXZ7aWSoWyYkfSCDe/EzkYolgTC/EbDKfSw3 20G4NwgknFR6Ssh45J8RK84wZK1/8oK4qsN7ette5qTtnCB5aQ57PrmXz9c2GwDi LJ92ChS1DMwwoXLpRvGuTyUsgpzF/AJr -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:42 2025 by rpki-client