$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: mt0UVmMPk7PVFkEFT/H9osGy2jBelaAWEJ4Jz3PQyP4= Subject key identifier: 43:CB:CC:1C:5F:36:30:83:03:C6:99:D8:4F:06:77:1F:14:0C:B6:A8 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 0760 Signing time: Sun 06 Apr 2025 21:12:03 +0000 Manifest this update: Sun 06 Apr 2025 21:12:02 +0000 Manifest next update: Sun 13 Apr 2025 21:12:02 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: OzE0qykQcN/hkXY6Gf+OMffxuiT44EdbT6WtlUX//HA=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: SiUJ7SYlbA21+yPfD2uZbgHjH4MPfQViyjJFRbUxFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 21:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C Validity Not Before: Apr 6 21:12:02 2025 GMT Not After : Apr 13 21:12:02 2025 GMT Subject: CN=67f2ee23-5c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:79:ff:cc:99:87:7d:09:54:7c:6b:e5:eb:20: 4a:61:49:cd:56:4c:6b:5b:8c:87:16:4b:17:94:26: 2f:a1:91:22:74:62:95:73:67:a0:46:a7:7d:27:1a: 8c:5f:97:02:79:0b:5c:db:c2:0d:fa:0c:51:b7:64: 70:00:08:ff:e4:9a:69:b3:a1:10:14:f9:84:ae:fe: 13:95:0a:0f:08:21:e8:e2:1b:5e:65:98:bc:07:f3: 62:29:74:37:cd:44:97:5f:24:54:f8:cb:ec:a0:0c: f3:6a:0b:b0:fd:87:7b:bc:6a:9f:6a:c1:30:d6:e0: cc:c8:a3:f0:d2:0e:63:d8:c0:f1:6a:76:86:56:34: 8a:79:38:53:2b:3f:c0:21:89:a3:40:11:bf:3a:96: 48:1e:4b:06:63:46:80:0e:d4:88:2c:ae:31:6a:f4: dc:a6:74:95:4f:3c:85:92:36:73:ed:6c:7a:46:05: d8:01:37:0a:a1:45:ca:53:b3:1f:eb:a7:50:76:72: 86:53:ac:6d:8a:71:bb:b3:f7:a9:9a:5b:2c:f9:93: 57:93:88:c5:d6:93:f5:42:ba:58:c8:24:d4:a4:49: 22:48:77:ae:80:9b:54:86:88:7a:ab:fb:67:0e:e7: 18:fe:d4:5c:96:60:05:b1:1a:6e:35:bb:33:6d:57: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:CC:1C:5F:36:30:83:03:C6:99:D8:4F:06:77:1F:14:0C:B6:A8 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:0a:eb:ed:b1:d5:ba:75:a5:05:04:f6:cb:f3:f0:fc:ff:78: 63:d9:e5:1f:10:9f:54:14:f5:3c:1e:6d:74:be:e5:f9:c9:65: be:d6:1d:6e:01:b2:e3:0e:c3:d8:ff:86:67:a2:1c:9f:be:93: 33:4c:99:bc:b9:14:23:86:ce:08:6b:a3:0e:87:c3:49:5a:8a: 50:29:5c:c5:6c:d1:06:93:da:e7:b6:fe:7e:42:e4:43:cc:87: 50:43:cc:00:31:0a:50:b9:0f:7b:91:31:6e:df:50:38:a2:64: d1:5d:d4:92:6d:2e:f8:a0:2f:6f:b7:e1:42:f0:6a:a4:8e:40: c1:2b:b0:a5:04:af:cf:82:4b:4a:17:4a:2c:34:14:b6:88:b7: 4c:22:80:a8:48:a3:66:89:9c:56:7c:62:1a:dc:0f:0f:59:bb: 18:d6:f0:22:65:4a:a6:e3:60:8b:34:ba:ff:01:40:9c:8c:c9: 10:3b:d4:0f:15:3f:97:ef:94:f0:2d:5a:c6:0e:22:5f:f5:be: 95:3e:1a:5a:7b:df:a5:62:5a:ab:83:4f:38:69:57:10:4c:a6: a6:19:da:b1:78:a2:42:78:03:ce:f4:6c:bd:e1:f7:ad:9b:dc: de:2b:9c:62:51:71:c7:63:dd:61:d2:1e:31:72:ae:4b:97:25: fa:45:87:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjUwNDA2MjExMjAyWhcNMjUwNDEzMjExMjAyWjAYMRYwFAYD VQQDEw02N2YyZWUyMy01YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23n/zJmHfQlUfGvl6yBKYUnNVkxrW4yHFksXlCYvoZEidGKVc2egRqd9JxqM X5cCeQtc28IN+gxRt2RwAAj/5Jpps6EQFPmErv4TlQoPCCHo4hteZZi8B/NiKXQ3 zUSXXyRU+MvsoAzzaguw/Yd7vGqfasEw1uDMyKPw0g5j2MDxanaGVjSKeThTKz/A IYmjQBG/OpZIHksGY0aADtSILK4xavTcpnSVTzyFkjZz7Wx6RgXYATcKoUXKU7Mf 66dQdnKGU6xtinG7s/epmlss+ZNXk4jF1pP1QrpYyCTUpEkiSHeugJtUhoh6q/tn DucY/tRclmAFsRpuNbszbVfI7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPLzBxf NjCDA8aZ2E8Gdx8UDLaoMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgCuvtsdW6daUFBPbL8/D8/3hj2eUfEJ9UFPU8Hm10vuX5yWW+1h1u AbLjDsPY/4ZnohyfvpMzTJm8uRQjhs4Ia6MOh8NJWopQKVzFbNEGk9rntv5+QuRD zIdQQ8wAMQpQuQ97kTFu31A4omTRXdSSbS74oC9vt+FC8GqkjkDBK7ClBK/PgktK F0osNBS2iLdMIoCoSKNmiZxWfGIa3A8PWbsY1vAiZUqm42CLNLr/AUCcjMkQO9QP FT+X75TwLVrGDiJf9b6VPhpae9+lYlqrg084aVcQTKamGdqxeKJCeAPO9Gy94fet m9zeK5xiUXHHY91h0h4xcq5LlyX6RYfw -----END CERTIFICATE-----Generated at Tue Apr 8 00:24:45 2025 by rpki-client