$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: o1Vq/Vkld98eqx34sOblGcUs+n2KiBbKhhCmUOkszms= Subject key identifier: 07:AC:90:90:EA:44:57:A8:FA:B9:52:13:65:18:E2:75:48:10:65:10 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: 78 Signing time: Wed 09 Apr 2025 05:34:41 +0000 Manifest this update: Wed 09 Apr 2025 05:34:41 +0000 Manifest next update: Wed 16 Apr 2025 05:34:41 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: q7Z0W0Zyln+NQu4EECcxrZ2h3sATVl596YFKSzfm4sk=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qWDPCZUNoXxLfCTQ51artmgIDTxez9EecMCL2qvkzMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED Validity Not Before: Apr 9 05:34:41 2025 GMT Not After : Apr 16 05:34:41 2025 GMT Subject: CN=67f606f1-6d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:49:25:8f:3c:cf:d0:de:2a:1d:ca:71:d8: bb:4d:eb:04:da:db:49:1c:44:d6:02:83:b1:ad:87: 16:60:e7:57:31:00:42:ba:ac:0b:ee:4a:91:6c:a1: ae:37:de:2d:64:41:85:2b:d5:b5:12:6d:2f:06:fd: b4:2b:94:13:9a:e7:b5:25:cb:e2:de:8d:26:6e:ab: f9:01:59:9c:b4:3e:00:89:c1:3e:db:55:cd:35:46: 61:c0:16:04:02:20:a7:33:fe:16:69:a2:e3:2e:2f: d6:83:56:9d:9f:be:e5:32:f6:f0:d5:38:31:72:75: ed:02:08:20:a9:ce:3d:3e:b4:07:19:24:39:eb:0c: 20:1a:71:ee:2f:10:55:f7:98:9f:2e:97:92:30:e5: a8:41:ab:18:4a:e6:1f:24:6f:4e:e3:50:87:d5:90: be:70:d2:96:ec:bc:21:76:73:25:d0:09:86:d6:d4: b5:28:8e:0b:5a:15:9a:bc:f5:5a:84:a1:5d:23:e8: 7c:28:de:15:db:3d:c7:c7:b3:9d:af:d4:4b:f6:a9: 72:fc:a1:d3:e1:2c:15:0d:86:56:6e:c7:4e:a3:87: 0f:bb:38:9b:fd:04:73:80:63:93:ae:2b:98:82:ce: d5:56:e8:52:56:62:79:3e:b6:8b:9c:9a:35:65:0e: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AC:90:90:EA:44:57:A8:FA:B9:52:13:65:18:E2:75:48:10:65:10 X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:47:69:24:be:0a:af:93:40:b6:4d:ea:9b:b4:1d:c7:74:eb: 27:cf:4e:2c:f4:ad:85:ca:6e:95:e0:5c:06:e3:84:f5:48:36: f7:7d:5d:fd:3d:56:fb:8f:e1:ab:41:47:e4:5a:0b:69:95:8b: 54:7e:42:d7:35:2e:35:69:03:6b:95:3e:9a:0b:fc:3b:49:31: 96:42:8f:42:7e:a6:21:38:44:2a:22:8c:69:dd:0e:c2:f8:26: ef:cf:09:0d:56:ec:2e:4a:ec:55:12:bb:4b:af:08:95:48:84: e8:c5:f9:50:8a:b8:88:d2:47:01:3d:cb:94:52:5f:e9:03:34: ea:fe:26:50:6b:0d:02:ae:ee:79:77:5d:79:dd:23:d4:98:76: 63:ee:e8:61:e8:a5:ca:98:df:a7:c6:03:c5:06:2e:09:82:22: a4:a3:88:98:12:ff:c2:59:fd:6e:e3:6e:84:c3:16:4f:30:be: 7a:48:eb:7c:8c:68:6f:b3:a1:ca:a3:4e:8e:59:25:5e:2d:9d: 99:56:e2:ed:55:bd:c8:ce:6d:2c:40:f0:75:ad:ec:2c:5c:40: f5:09:bc:3c:ea:c8:bc:9c:7c:ed:96:0f:f4:1c:06:c5:27:c1: 00:36:e4:27:df:46:86:10:aa:64:f6:e7:2f:df:ec:9d:5e:74: 2b:7a:f7:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTNFRDExMC8GA1UEBRMoREYyNEI0RDUxQzY3ODQxREQ2MDBERDJBNjE3ODZCQ0U5 ODg3ODY2NzAeFw0yNTA0MDkwNTM0NDFaFw0yNTA0MTYwNTM0NDFaMBgxFjAUBgNV BAMTDTY3ZjYwNmYxLTZkMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFC0kljzzP0N4qHcpx2LtN6wTa20kcRNYCg7GthxZg51cxAEK6rAvuSpFsoa43 3i1kQYUr1bUSbS8G/bQrlBOa57Uly+LejSZuq/kBWZy0PgCJwT7bVc01RmHAFgQC IKcz/hZpouMuL9aDVp2fvuUy9vDVODFyde0CCCCpzj0+tAcZJDnrDCAace4vEFX3 mJ8ul5Iw5ahBqxhK5h8kb07jUIfVkL5w0pbsvCF2cyXQCYbW1LUojgtaFZq89VqE oV0j6Hwo3hXbPcfHs52v1Ev2qXL8odPhLBUNhlZux06jhw+7OJv9BHOAY5OuK5iC ztVW6FJWYnk+toucmjVlDgVzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB6yQkOpE V6j6uVITZRjidUgQZRAwHwYDVR0jBBgwFoAU3yS01RxnhB3WAN0qYXhrzpiHhmcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxM0VELzY3N0FBQTNDNUYz NzExRUZCRjM2OUU1OEM0RjlBRTAyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGht Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM3lTMDFSeG5oQjNXQU4wcVlYaHJ6cGlIaG1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx M0VELzY3N0FBQTNDNUYzNzExRUZCRjM2OUU1OEM0RjlBRTAyLzN5UzAxUnhuaEIz V0FOMHFZWGhyenBpSGhtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHdHaSS+Cq+TQLZN6pu0Hcd06yfPTiz0rYXKbpXgXAbjhPVINvd9Xf09 VvuP4atBR+RaC2mVi1R+Qtc1LjVpA2uVPpoL/DtJMZZCj0J+piE4RCoijGndDsL4 Ju/PCQ1W7C5K7FUSu0uvCJVIhOjF+VCKuIjSRwE9y5RSX+kDNOr+JlBrDQKu7nl3 XXndI9SYdmPu6GHopcqY36fGA8UGLgmCIqSjiJgS/8JZ/W7jboTDFk8wvnpI63yM aG+zocqjTo5ZJV4tnZlW4u1VvcjObSxA8HWt7CxcQPUJvDzqyLycfO2WD/QcBsUn wQA25CffRoYQqmT25y/f7J1edCt69yE= -----END CERTIFICATE-----Generated at Thu Apr 10 23:57:47 2025 by rpki-client