$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: FDDaYlNwOtHhqOLuMVeklMgUe5c3QAwjvTgWlL+uiJM= Subject key identifier: C6:E2:A6:AE:62:2E:4D:AE:15:9F:28:54:DD:3C:F0:B4:BD:33:12:88 Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2F55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2F2A Signing time: Fri 04 Apr 2025 15:32:15 +0000 Manifest this update: Fri 04 Apr 2025 15:32:14 +0000 Manifest next update: Fri 11 Apr 2025 15:32:14 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: nYIpqH10ftiTAPHKQZnUBtvNXmOXqUtDOP+fLLXhQ2w=) 2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zMgG3GuNf+zDyezkOM45N+LyqO/kzryLIYKrCSpbqDo=) 3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: vhNYX3z+Zi/YDPj0M1GT/QNGQGsFRe3lw3Q5mL3YNtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12117 (0x2f55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762 Validity Not Before: Apr 4 15:32:14 2025 GMT Not After : Apr 11 15:32:14 2025 GMT Subject: CN=67effb7e-1c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:7f:04:02:72:78:52:18:9b:55:80:9f:35: 4d:5f:c8:de:81:1c:a6:9b:e0:3e:ff:63:1f:43:4f: c7:e1:4d:70:26:b9:4f:97:ae:7b:c8:9b:da:19:4d: 30:33:40:80:5a:7e:c4:ac:72:49:6e:13:3d:ea:ce: 3f:5e:7d:01:4d:5a:89:63:ab:af:e2:e0:96:19:12: 45:e3:fe:ad:a4:97:5a:d4:54:9a:fc:7e:61:31:24: c1:77:34:81:74:41:66:61:53:46:be:ac:f4:f4:ce: 2b:36:fe:72:38:a8:4b:58:69:c6:99:58:89:33:6f: 13:15:27:4f:c4:94:0c:ca:0b:e6:00:3e:69:72:f1: 40:00:75:5c:5d:78:44:db:2c:e4:1f:cd:52:42:20: 6c:3d:fc:5e:f7:50:84:e8:7b:35:77:b1:c8:00:15: d4:82:1c:a0:ca:ad:e2:f3:10:d5:8f:46:d0:f1:aa: 3a:db:88:62:2b:19:ed:5d:7b:b5:32:da:34:92:bb: 03:93:75:2f:a7:e7:cd:28:97:d7:c6:68:cb:92:ea: 48:92:1b:6a:9e:d1:b5:a3:16:ce:68:dc:f5:1f:70: cd:55:f2:b8:4f:11:a7:a2:4b:34:5b:03:13:80:0f: be:06:36:db:8a:9b:1d:1c:a6:45:ee:a2:0f:e5:94: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E2:A6:AE:62:2E:4D:AE:15:9F:28:54:DD:3C:F0:B4:BD:33:12:88 X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2d:c4:ea:62:fc:48:c3:5a:e6:18:85:93:7e:47:33:aa:af: e3:f7:3e:91:51:5c:3b:eb:cd:ab:d4:d2:e6:7e:4e:1d:02:97: 24:ae:55:ca:43:e9:8f:37:3a:ee:ae:10:1e:d3:91:8d:44:df: 7c:2f:65:b2:29:f8:39:7d:fc:c9:28:aa:0d:3d:41:23:50:f6: 08:8e:88:4f:19:d9:3b:f5:76:f2:bc:88:c1:a0:37:5c:70:f5: 43:43:52:f0:5e:bc:e0:c8:ad:6c:f5:a9:6a:d1:ef:50:54:02: 79:9c:df:ca:c7:e1:3b:26:58:7e:28:16:06:f5:33:a7:86:68: 65:93:8e:3c:96:43:3a:fe:62:a1:ca:7d:1d:da:87:c0:1a:5b: f0:16:12:6f:fb:52:c1:2a:80:08:2b:51:d6:8e:0a:69:f2:e9: 90:20:b5:8b:3c:b3:dc:fb:cd:0c:90:56:f6:88:07:2c:76:82: 84:d9:cd:7f:a2:e5:f7:0f:ff:a1:f7:a2:b7:d1:ec:b4:4b:c2: 78:69:5d:54:4b:f9:6e:22:73:04:0b:57:f7:39:0b:92:f8:86: c0:fd:3e:4c:a9:94:60:7f:b8:fd:d9:b8:73:e0:86:db:84:5d: d7:b9:21:9f:0c:56:1e:d7:2a:e2:3c:2b:f7:b9:70:c5:9f:f5: 32:e0:8b:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjUwNDA0MTUzMjE0WhcNMjUwNDExMTUzMjE0WjAYMRYwFAYD VQQDEw02N2VmZmI3ZS0xYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2l9/BAJyeFIYm1WAnzVNX8jegRymm+A+/2MfQ0/H4U1wJrlPl657yJvaGU0w M0CAWn7ErHJJbhM96s4/Xn0BTVqJY6uv4uCWGRJF4/6tpJda1FSa/H5hMSTBdzSB dEFmYVNGvqz09M4rNv5yOKhLWGnGmViJM28TFSdPxJQMygvmAD5pcvFAAHVcXXhE 2yzkH81SQiBsPfxe91CE6Hs1d7HIABXUghygyq3i8xDVj0bQ8ao624hiKxntXXu1 Mto0krsDk3Uvp+fNKJfXxmjLkupIkhtqntG1oxbOaNz1H3DNVfK4TxGnoks0WwMT gA++BjbbipsdHKZF7qIP5ZS+2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbipq5i Lk2uFZ8oVN088LS9MxKIMB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAULcTqYvxIw1rmGIWTfkczqq/j9z6RUVw7682r1NLmfk4dApckrlXK Q+mPNzrurhAe05GNRN98L2WyKfg5ffzJKKoNPUEjUPYIjohPGdk79XbyvIjBoDdc cPVDQ1LwXrzgyK1s9alq0e9QVAJ5nN/Kx+E7Jlh+KBYG9TOnhmhlk448lkM6/mKh yn0d2ofAGlvwFhJv+1LBKoAIK1HWjgpp8umQILWLPLPc+80MkFb2iAcsdoKE2c1/ ouX3D/+h96K30ey0S8J4aV1US/luInMEC1f3OQuS+IbA/T5MqZRgf7j92bhz4Ibb hF3XuSGfDFYe1yriPCv3uXDFn/Uy4Itw -----END CERTIFICATE-----Generated at Sun Apr 6 16:35:27 2025 by rpki-client