$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: QvSV4sbc/ntuilh3hiPAT9icAORRUE1mztib54KtPGU= Subject key identifier: BF:95:FA:3E:63:70:9C:C8:02:7F:60:28:3D:B2:BB:E6:5D:F4:8E:82 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1CEF Signing time: Fri 04 Apr 2025 16:12:55 +0000 Manifest this update: Fri 04 Apr 2025 16:12:55 +0000 Manifest next update: Fri 11 Apr 2025 16:12:55 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: wYZqTnP37WO2pMTLqrm0MPM5GRk41Ad1EKGcSsI0PK4=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: kc6Qio1nm2R7Nmekjn2RQdz6FiLOSkIgyD8v0SWSLok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7427 (0x1d03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D Validity Not Before: Apr 4 16:12:55 2025 GMT Not After : Apr 11 16:12:55 2025 GMT Subject: CN=67f00507-0655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ad:d8:5e:f8:66:88:5b:a3:ea:2c:71:f0:af: 6b:4b:d3:04:5e:22:84:2f:b9:ec:0c:e3:21:e1:2b: f2:c3:2a:f9:22:e6:06:74:22:c8:ff:4f:4c:b6:6f: 40:83:d6:cc:fd:f6:53:2c:9f:07:d4:43:37:4b:8b: 7e:83:cd:20:36:79:17:cb:f1:f8:8f:18:55:9a:b8: 5e:3b:d0:76:8a:aa:b6:b7:02:b6:1d:15:5b:66:63: ae:39:56:1c:75:f0:d9:8b:e4:71:ce:40:19:7a:ff: 74:78:f1:f5:fd:94:a9:44:f7:62:9e:a9:ac:30:22: d5:3a:e1:0f:3c:4b:56:0b:af:93:6d:81:14:a1:19: 92:21:18:10:92:f4:c6:e6:1e:d9:49:c3:56:d2:ba: 3c:be:c5:a6:ad:fb:3b:3d:31:8b:fb:ef:13:0a:36: 07:13:1c:ce:b7:d6:3f:ae:5b:78:22:d2:47:df:3c: 27:68:ef:27:ec:00:42:a7:6c:b7:ea:81:a2:8e:b5: 39:c8:39:64:b9:b0:1b:1e:d4:97:11:fe:1a:d5:c8: 9a:91:26:71:bf:0d:5e:85:46:d5:40:af:a9:b7:38: ea:c0:10:fc:7e:c0:11:ff:5d:fc:0e:eb:da:91:85: 54:6b:a2:fd:dd:d6:a5:b1:08:4a:ea:8d:d4:51:cd: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:95:FA:3E:63:70:9C:C8:02:7F:60:28:3D:B2:BB:E6:5D:F4:8E:82 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:88:2c:00:0f:fc:27:88:e9:d0:bd:ac:57:91:a8:64:bb:e5: b8:b5:fe:26:4c:72:93:0e:e3:5a:3f:eb:cd:ed:16:38:9a:64: 81:ed:0a:c2:f5:28:1f:33:a6:f6:bd:bf:43:d2:87:1c:98:05: 2c:ea:55:44:77:0c:bb:a2:79:88:9f:38:f5:e5:53:63:d4:4f: da:dc:39:9f:0e:fa:84:fe:a3:8f:f5:16:5f:8d:aa:ca:75:20: 98:04:62:65:ac:2b:90:85:a4:5b:bd:b5:7d:a2:d3:1e:28:95: 0a:29:ca:54:6b:21:24:61:68:69:ab:a7:8a:a9:c7:07:12:66: ac:ed:85:d3:62:91:74:4a:db:56:8b:23:24:0e:e7:05:13:f9: e4:de:90:86:80:b6:cf:87:63:38:46:78:ed:e2:94:28:b8:93: 96:02:8c:9a:67:90:49:03:18:05:83:4f:97:b5:1e:55:b7:76: 93:e5:77:7b:2f:06:1c:0d:e5:7e:a2:f3:ec:a1:40:ad:5a:82: 81:ac:a5:30:60:ac:f2:87:27:46:a9:55:91:b3:24:c5:cd:1a: 50:9b:71:9a:2c:af:04:cb:de:3e:f2:e3:f0:d2:d7:65:69:04: 8b:0f:99:cc:ef:4e:e9:08:b7:6a:d1:66:78:34:c5:f7:9b:45: 6d:58:66:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjUwNDA0MTYxMjU1WhcNMjUwNDExMTYxMjU1WjAYMRYwFAYD VQQDEw02N2YwMDUwNy0wNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA463YXvhmiFuj6ixx8K9rS9MEXiKEL7nsDOMh4Svywyr5IuYGdCLI/09Mtm9A g9bM/fZTLJ8H1EM3S4t+g80gNnkXy/H4jxhVmrheO9B2iqq2twK2HRVbZmOuOVYc dfDZi+RxzkAZev90ePH1/ZSpRPdinqmsMCLVOuEPPEtWC6+TbYEUoRmSIRgQkvTG 5h7ZScNW0ro8vsWmrfs7PTGL++8TCjYHExzOt9Y/rlt4ItJH3zwnaO8n7ABCp2y3 6oGijrU5yDlkubAbHtSXEf4a1ciakSZxvw1ehUbVQK+ptzjqwBD8fsAR/138Duva kYVUa6L93dalsQhK6o3UUc3CTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+V+j5j cJzIAn9gKD2yu+Zd9I6CMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAciCwAD/wniOnQvaxXkahku+W4tf4mTHKTDuNaP+vN7RY4mmSB7QrC 9SgfM6b2vb9D0occmAUs6lVEdwy7onmInzj15VNj1E/a3DmfDvqE/qOP9RZfjarK dSCYBGJlrCuQhaRbvbV9otMeKJUKKcpUayEkYWhpq6eKqccHEmas7YXTYpF0SttW iyMkDucFE/nk3pCGgLbPh2M4Rnjt4pQouJOWAoyaZ5BJAxgFg0+XtR5Vt3aT5Xd7 LwYcDeV+ovPsoUCtWoKBrKUwYKzyhydGqVWRsyTFzRpQm3GaLK8Ey94+8uPw0tdl aQSLD5nM707pCLdq0WZ4NMX3m0VtWGaG -----END CERTIFICATE-----Generated at Sat Apr 5 19:25:20 2025 by rpki-client