$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: CRb8xGpCX2E4JtAVoU43sHXhA1d7flfcQsO8UyNER2A= Subject key identifier: C7:2E:8E:74:15:A4:45:15:06:3F:E5:41:3F:D9:92:94:F2:07:ED:64 Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: 3E Signing time: Sat 05 Apr 2025 06:47:22 +0000 Manifest this update: Sat 05 Apr 2025 06:47:21 +0000 Manifest next update: Sat 12 Apr 2025 06:47:21 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: sIxfJ0nSXEgigbIm0FhCuKnKFS1NMve30WhgXFht8I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A Validity Not Before: Apr 5 06:47:21 2025 GMT Not After : Apr 12 06:47:21 2025 GMT Subject: CN=67f0d1f9-15d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b3:91:04:22:af:a2:91:7e:92:9e:be:1f:48: 09:d6:fb:e9:28:04:1a:ea:e0:22:c5:52:6e:50:9e: 71:3d:84:1d:a5:bc:cd:dc:c2:13:4e:38:97:48:40: 5d:7a:fd:6b:fd:4a:c9:98:fb:44:41:25:e0:0c:81: 02:c3:35:e3:e3:d0:1d:07:d5:21:51:84:16:c1:89: 51:53:2b:1b:b4:70:9b:93:82:ae:45:d5:84:56:33: 27:62:40:46:c9:db:12:7b:4e:9c:43:1e:ba:61:e8: de:fa:0f:eb:95:09:03:4e:62:cf:81:31:0d:7a:11: e1:7b:1f:b4:f8:a9:89:e7:36:e6:15:20:7b:4e:cd: fb:d6:3d:81:ac:e7:19:5e:59:f3:25:50:8d:ff:24: a4:c7:b2:e1:11:a4:85:f0:f6:3c:9f:8b:97:8a:d0: ef:45:6b:e1:0c:74:a3:0f:a7:e5:01:da:bc:47:a8: 64:db:81:ea:15:67:10:39:50:64:1b:c5:8a:6b:8b: 27:49:0f:db:7a:07:32:70:84:ac:8e:22:ac:37:ba: 4f:f1:a7:41:cb:d4:29:95:78:ba:c5:4c:e2:b1:23: 17:3b:2d:b3:67:4c:a6:df:b1:00:09:e4:53:24:e7: f3:3f:ca:7b:c4:b9:59:eb:5f:f6:56:c5:06:f8:c8: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2E:8E:74:15:A4:45:15:06:3F:E5:41:3F:D9:92:94:F2:07:ED:64 X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:77:f3:1f:fa:aa:f8:fc:aa:48:80:9e:51:83:b7:f8:65:74: 7b:08:62:19:f8:d7:de:1d:0d:20:98:83:9a:a0:10:ef:93:c6: 33:40:2d:5e:2b:98:36:8f:65:bc:f2:20:4e:65:cc:ae:da:4c: 4f:1e:a5:a1:cb:e3:92:07:71:2f:98:7a:30:f4:fe:72:34:56: b7:1c:7c:96:ae:1c:41:19:06:93:08:19:c1:23:d4:e0:48:93: 68:89:d2:d2:91:fe:db:6c:73:4d:20:b7:55:8d:eb:02:48:55: 80:44:f9:f6:10:78:1e:4b:bf:8f:9c:a5:43:df:96:d0:72:88: 57:c0:ba:6f:54:b0:6a:66:8a:a7:1e:2b:71:50:29:3d:6f:72: f8:41:f8:54:26:85:35:f8:33:2c:ac:ff:4f:66:e4:c0:be:9c: 21:79:12:e4:f0:07:36:eb:bd:72:ef:7f:51:32:e8:c7:79:59: e8:0f:88:27:f1:5e:e0:52:ce:26:99:79:7d:9c:4a:8a:c2:f4: 56:64:88:5b:4b:8e:5e:fa:7c:5d:68:8b:77:29:7d:f0:48:97: b3:b5:32:55:c7:4c:5b:c4:63:30:3e:f7:41:de:76:26:e0:c2: e7:a1:50:36:c3:93:19:66:10:47:05:b4:d5:cb:d5:f2:2a:c5: af:a1:d4:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzMyQTExMC8GA1UEBRMoREMxMTMwRDg2MTZCQUJDNkNFMDg4RjVGMjBFNjk3MTlB OTlDMzJCQjAeFw0yNTA0MDUwNjQ3MjFaFw0yNTA0MTIwNjQ3MjFaMBgxFjAUBgNV BAMTDTY3ZjBkMWY5LTE1ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDts5EEIq+ikX6Snr4fSAnW++koBBrq4CLFUm5QnnE9hB2lvM3cwhNOOJdIQF16 /Wv9SsmY+0RBJeAMgQLDNePj0B0H1SFRhBbBiVFTKxu0cJuTgq5F1YRWMydiQEbJ 2xJ7TpxDHrph6N76D+uVCQNOYs+BMQ16EeF7H7T4qYnnNuYVIHtOzfvWPYGs5xle WfMlUI3/JKTHsuERpIXw9jyfi5eK0O9Fa+EMdKMPp+UB2rxHqGTbgeoVZxA5UGQb xYpriydJD9t6BzJwhKyOIqw3uk/xp0HL1CmVeLrFTOKxIxc7LbNnTKbfsQAJ5FMk 5/M/ynvEuVnrX/ZWxQb4yLMdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxy6OdBWk RRUGP+VBP9mSlPIH7WQwHwYDVR0jBBgwFoAU3BEw2GFrq8bOCI9fIOaXGamcMrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MzJBLzA4OUJDNEU2QjYz MTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01y cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0JFdzJHRnJxOGJPQ0k5ZklPYVhHYW1jTXJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MzJBLzA4OUJDNEU2QjYzMTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThi T0NJOWZJT2FYR2FtY01ycy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK538x/6qvj8qkiAnlGDt/hldHsIYhn4194dDSCYg5qgEO+TxjNALV4r mDaPZbzyIE5lzK7aTE8epaHL45IHcS+YejD0/nI0VrccfJauHEEZBpMIGcEj1OBI k2iJ0tKR/ttsc00gt1WN6wJIVYBE+fYQeB5Lv4+cpUPfltByiFfAum9UsGpmiqce K3FQKT1vcvhB+FQmhTX4Myys/09m5MC+nCF5EuTwBzbrvXLvf1Ey6Md5WegPiCfx XuBSziaZeX2cSorC9FZkiFtLjl76fF1oi3cpffBIl7O1MlXHTFvEYzA+90Hedibg wuehUDbDkxlmEEcFtNXL1fIqxa+h1IY= -----END CERTIFICATE-----Generated at Sat Apr 5 09:45:12 2025 by rpki-client