$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: NozK6wSz7rDFIG6m2g+D+UeMGrEwrR3qnBImTNWN3vk= Subject key identifier: 4C:20:2D:05:73:59:92:E4:96:DC:B2:30:AE:2D:42:98:1D:63:88:0A Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 046A Signing time: Sat 29 Mar 2025 00:23:02 +0000 Manifest this update: Sat 29 Mar 2025 00:23:02 +0000 Manifest next update: Sat 05 Apr 2025 00:23:02 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: RnQpQD3Spqsf3nQO/x19uCLNbdvRPohHinZIFw7RfSQ=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90 Validity Not Before: Mar 29 00:23:02 2025 GMT Not After : Apr 5 00:23:02 2025 GMT Subject: CN=67e73d66-ada1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:eb:9b:d4:4e:8f:dd:8b:32:82:ae:e7:39: 23:b8:24:70:75:3a:f8:59:36:e7:e6:81:49:7d:e9: 2d:d8:85:c4:ec:fa:4f:85:9d:58:7a:86:b1:f4:76: 4d:60:3a:08:a3:fc:0c:a9:b1:72:a5:d8:24:8e:3d: 58:53:90:29:e0:a0:65:0c:35:a8:82:01:b9:f7:c7: a7:20:d4:3c:e8:9a:62:48:42:27:42:25:f0:91:08: 07:83:4d:ad:52:bd:78:ac:e6:7f:fb:a6:1c:21:86: 3c:35:a8:b0:b4:f3:a2:34:39:84:8a:e3:ec:5c:c3: cf:ea:f0:5a:94:91:d3:0d:55:ba:d6:92:ec:7a:f3: 84:e8:a2:73:9f:f3:c8:36:36:ec:d9:7c:21:33:15: 14:1d:47:7c:cb:3a:e0:d7:20:48:e6:1e:fd:de:27: e7:02:e9:27:d5:87:8d:bb:e9:0d:57:d4:16:0d:ab: 74:f6:3c:d9:fb:a3:ee:65:6d:90:aa:c9:7a:fe:5c: bf:bf:2c:54:e9:ae:52:e4:bb:8e:8c:4f:0b:d6:e0: ac:21:a6:6e:a8:99:53:f2:8b:62:e7:38:cd:da:86: a5:b1:e1:66:f6:da:3f:0b:7b:9d:57:9f:19:dd:7d: bb:71:8f:14:e0:00:2c:5f:49:71:03:d3:0c:f1:20: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:2D:05:73:59:92:E4:96:DC:B2:30:AE:2D:42:98:1D:63:88:0A X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c9:03:ce:9b:9d:c8:cb:6c:9a:91:8c:40:7d:89:2b:d3:a5: 67:5c:7a:d0:47:45:81:50:b8:f4:1e:07:47:a7:89:ad:56:c5: 2e:95:90:50:0a:16:da:05:59:96:64:a8:54:89:f7:f1:e7:7e: e5:63:e9:31:a6:c6:cf:08:38:1a:f6:0e:05:78:42:32:b1:33: d1:a7:1d:93:a7:e3:39:21:17:49:9c:67:53:55:fd:75:fe:96: 13:b1:f1:de:93:60:11:c5:ee:c6:9a:15:17:ce:1b:bc:d7:9a: 0c:34:2a:01:fb:67:fd:0e:f3:92:b1:fc:37:04:cb:af:b3:d0: c8:2d:c5:b8:24:73:c4:f2:6a:48:08:5b:e7:a4:b0:4e:ff:05: 50:dd:e6:8d:bd:f2:e2:a5:69:6a:f3:4b:94:ff:a6:70:c1:84: 9d:76:d7:0f:eb:6c:b3:ec:f5:52:fa:2c:d7:c5:6f:1e:1c:24: 5a:8c:69:85:1d:b3:c0:76:53:83:d4:38:e1:92:fd:13:fe:d6: f1:e0:f9:7a:fe:bb:25:80:86:40:e8:af:c5:c9:c6:f6:1e:03: a3:3b:17:b3:b4:21:12:f1:ed:da:86:12:52:39:99:6a:5c:24: c5:39:6e:cf:8e:55:c5:bd:19:41:c1:98:d1:56:5d:c7:bd:92: 54:a4:66:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUwMzI5MDAyMzAyWhcNMjUwNDA1MDAyMzAyWjAYMRYwFAYD VQQDEw02N2U3M2Q2Ni1hZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Mnrm9ROj92LMoKu5zkjuCRwdTr4WTbn5oFJfekt2IXE7PpPhZ1Yeoax9HZN YDoIo/wMqbFypdgkjj1YU5Ap4KBlDDWoggG598enINQ86JpiSEInQiXwkQgHg02t Ur14rOZ/+6YcIYY8NaiwtPOiNDmEiuPsXMPP6vBalJHTDVW61pLsevOE6KJzn/PI Njbs2XwhMxUUHUd8yzrg1yBI5h793ifnAukn1YeNu+kNV9QWDat09jzZ+6PuZW2Q qsl6/ly/vyxU6a5S5LuOjE8L1uCsIaZuqJlT8oti5zjN2oalseFm9to/C3udV58Z 3X27cY8U4AAsX0lxA9MM8SCJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwgLQVz WZLkltyyMK4tQpgdY4gKMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWyQPOm53Iy2yakYxAfYkr06VnXHrQR0WBULj0HgdHp4mtVsUulZBQ ChbaBVmWZKhUiffx537lY+kxpsbPCDga9g4FeEIysTPRpx2Tp+M5IRdJnGdTVf11 /pYTsfHek2ARxe7GmhUXzhu815oMNCoB+2f9DvOSsfw3BMuvs9DILcW4JHPE8mpI CFvnpLBO/wVQ3eaNvfLipWlq80uU/6ZwwYSddtcP62yz7PVS+izXxW8eHCRajGmF HbPAdlOD1Djhkv0T/tbx4Pl6/rslgIZA6K/Fycb2HgOjOxeztCES8e3ahhJSOZlq XCTFOW7PjlXFvRlBwZjRVl3HvZJUpGbV -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:56 2025 by rpki-client