$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json) Hash identifier: qVYrr5Os71zXgZR4aGq+VZaGpOmUDGRdFg+u38X6IFs= Subject key identifier: B6:32:BB:8B:74:40:02:80:DE:D9:52:87:C0:2B:97:FD:1A:AD:A8:55 Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Certificate serial: 0B02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft Manifest number: 0AF6 Signing time: Fri 04 Apr 2025 19:27:30 +0000 Manifest this update: Fri 04 Apr 2025 19:27:30 +0000 Manifest next update: Fri 11 Apr 2025 19:27:30 +0000 Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: s3L7ebQfT6UPqHa4A75w3fIufzGZ6Rc6p4RQBS1xL1A=) 2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: um1rPyDGy/aHUSBxco8n3OW5NdOsLGQIMyWpHja+2mw=) 3: CDEA6D9E05EE11F0A62FE512C4F9AE02.roa (hash: dB2B9yGj3kDbaxuuhfKLvRAbw8CrYhM4WFr6OVGCZsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2818 (0xb02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A016 Validity Not Before: Apr 4 19:27:30 2025 GMT Not After : Apr 11 19:27:30 2025 GMT Subject: CN=67f032a2-0882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:d6:3d:70:0a:92:6b:5e:3a:d5:95:ec:aa: 08:e7:9c:ac:b6:03:c5:be:12:3f:2d:b3:e0:fa:72: 66:99:19:de:90:0d:84:f8:64:01:28:6a:99:5b:88: cd:ef:13:47:ef:54:e1:0f:4e:04:99:de:6a:34:fc: 3b:4c:11:0b:05:b6:d8:64:4c:3a:1f:9b:9e:d7:10: 2b:47:45:0a:e6:69:97:82:a3:a2:3f:f4:98:fa:81: c2:b6:1c:3f:27:26:2e:9d:b2:89:50:c7:f9:c6:71: 37:5e:1c:ce:e8:e0:ac:ba:d2:ec:cf:41:c7:c9:ba: d1:88:ea:da:8d:27:01:50:42:85:98:66:50:3a:34: 33:2c:9a:da:7e:82:51:73:ea:a1:e4:67:9f:38:98: 04:f7:5f:36:c9:ad:ed:79:2c:2e:2c:16:1d:fc:b5: cf:d5:6e:4c:3c:d9:15:0a:23:7c:bf:69:d6:83:67: 3b:e0:dd:bd:3a:cf:ab:dc:35:4d:23:1b:81:ba:d5: a8:f5:19:dd:eb:8a:be:4b:db:81:f3:c4:5a:48:12: d3:d4:ee:d2:39:1b:e3:af:8b:c9:69:1a:67:31:b7: 30:d8:00:66:c8:9e:6f:c9:32:8d:3d:dd:36:12:d3: 11:61:97:b6:e2:ea:7a:6b:a8:ee:3b:b1:b5:04:67: 3c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:BB:8B:74:40:02:80:DE:D9:52:87:C0:2B:97:FD:1A:AD:A8:55 X509v3 Authority Key Identifier: keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:78:2f:e3:b4:80:d6:fc:0e:97:ff:cd:ad:38:44:0c:54:ec: 67:37:db:64:ed:40:8c:7d:e7:b3:ad:47:6c:5c:a2:01:62:93: cf:29:dc:cb:a5:31:d5:8e:64:b8:4e:fe:14:8d:6d:7f:7a:45: 89:4b:c0:64:c4:b6:98:10:34:e6:b0:a0:8b:ca:31:38:3b:ff: dd:13:bd:5a:09:cd:5b:73:74:a2:df:cb:94:62:81:4a:e3:f8: 76:ef:5c:4d:e9:49:3a:aa:68:15:4d:81:5c:07:54:b8:43:67: 51:54:9f:95:61:23:02:d7:85:ee:10:8a:87:cc:1c:58:44:e2: bb:80:72:23:c4:3a:84:c2:7f:f3:ec:52:11:6e:1c:93:00:2d: 29:56:75:b6:00:c9:24:34:05:61:63:d7:78:f3:93:9c:eb:43: 7f:4b:02:3c:f7:1a:7b:c1:f3:1a:d9:1a:31:28:08:06:26:c6: 88:fd:83:e0:d1:d6:50:b4:3b:a4:a2:46:6e:b3:0d:7a:3c:cc: f4:9a:4d:2b:2a:49:4f:f1:fe:35:77:26:2f:e7:c9:27:16:2f: 32:fd:2a:98:00:a2:94:33:79:d6:dd:a1:42:2f:fc:c4:47:84: ee:c6:1e:f6:25:91:90:6f:cd:1a:e4:34:97:3a:36:9a:ff:28: 51:4b:1d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3 OTExQkU1QjUwHhcNMjUwNDA0MTkyNzMwWhcNMjUwNDExMTkyNzMwWjAYMRYwFAYD VQQDEw02N2YwMzJhMi0wODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GbWPXAKkmteOtWV7KoI55ystgPFvhI/LbPg+nJmmRnekA2E+GQBKGqZW4jN 7xNH71ThD04Emd5qNPw7TBELBbbYZEw6H5ue1xArR0UK5mmXgqOiP/SY+oHCthw/ JyYunbKJUMf5xnE3XhzO6OCsutLsz0HHybrRiOrajScBUEKFmGZQOjQzLJrafoJR c+qh5GefOJgE9182ya3teSwuLBYd/LXP1W5MPNkVCiN8v2nWg2c74N29Os+r3DVN IxuButWo9Rnd64q+S9uB88RaSBLT1O7SORvjr4vJaRpnMbcw2ABmyJ5vyTKNPd02 EtMRYZe24up6a6juO7G1BGc8CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYyu4t0 QAKA3tlSh8Arl/0arahVMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCceC/jtIDW/A6X/82tOEQMVOxnN9tk7UCMfeezrUdsXKIBYpPPKdzL pTHVjmS4Tv4UjW1/ekWJS8BkxLaYEDTmsKCLyjE4O//dE71aCc1bc3Si38uUYoFK 4/h271xN6Uk6qmgVTYFcB1S4Q2dRVJ+VYSMC14XuEIqHzBxYROK7gHIjxDqEwn/z 7FIRbhyTAC0pVnW2AMkkNAVhY9d485Oc60N/SwI89xp7wfMa2RoxKAgGJsaI/YPg 0dZQtDukokZusw16PMz0mk0rKklP8f41dyYv58knFi8y/SqYAKKUM3nW3aFCL/zE R4Tuxh72JZGQb80a5DSXOjaa/yhRSx3o -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:24 2025 by rpki-client