$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json) Hash identifier: MX155pBShxgclqNlv2IrdOCi2QnzGzN9/u1QfW9hYdI= Subject key identifier: 7A:C9:9E:98:F3:8C:BB:A5:9A:89:B4:2C:B2:4B:EF:70:71:1A:20:E7 Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft Manifest number: 0207 Signing time: Sat 29 Mar 2025 03:28:16 +0000 Manifest this update: Sat 29 Mar 2025 03:28:15 +0000 Manifest next update: Sat 05 Apr 2025 03:28:15 +0000 Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: tKlWrmRnuh7VwbUVerd/Sa5dkEMWtBVvfwcb218jr7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6 Validity Not Before: Mar 29 03:28:15 2025 GMT Not After : Apr 5 03:28:15 2025 GMT Subject: CN=67e768d0-faf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:a8:ad:25:ed:99:bf:e1:24:96:21:30:d4: 42:e0:9b:cf:dc:5a:3f:6a:46:ee:89:d0:be:5d:4d: 96:00:ea:4d:87:01:ce:e8:70:20:40:6f:00:3d:71: bd:98:04:85:ef:dc:6d:72:fe:31:b7:f3:9b:8a:c1: d6:73:48:d8:09:1e:d4:c2:7e:e9:e3:d3:89:51:ea: 0c:cb:1f:38:19:c8:38:43:f6:28:7e:71:e9:6d:a1: d5:ae:b0:b1:a5:09:80:f2:0d:0f:9e:b7:8a:c8:90: 5c:f6:74:85:db:5b:81:e1:ec:3a:1b:26:ba:ee:04: 06:df:03:b4:a1:f5:63:1e:d1:c8:cb:50:f3:48:e0: 45:fc:70:ff:e2:37:c3:0f:3c:2e:6f:76:df:ba:10: 24:c5:39:bc:82:58:df:b7:64:da:38:a1:8f:0c:74: 26:fa:1c:9f:16:9f:71:35:8c:da:ea:11:e2:72:23: 93:23:4d:88:59:9f:e5:12:99:95:82:85:98:c9:9b: fc:06:af:bd:2e:00:83:e6:af:16:87:d0:51:d0:9f: 9a:c4:2a:6d:30:cd:14:9f:e7:86:8a:32:15:d3:b5: bc:73:34:a8:3b:ec:cd:58:c5:c9:cb:35:02:8e:c7: 9d:0b:0c:5a:e2:aa:a4:e0:69:dc:0f:06:4e:36:03: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C9:9E:98:F3:8C:BB:A5:9A:89:B4:2C:B2:4B:EF:70:71:1A:20:E7 X509v3 Authority Key Identifier: keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ee:42:21:ae:4b:5e:ce:73:c8:cd:b6:2b:7d:a2:ee:c3:87: b6:97:8a:30:6f:7c:f0:96:1b:e4:6a:19:36:fa:fc:13:d4:c1: a8:fe:ce:23:db:ca:b8:3f:04:18:37:a8:be:7e:80:5f:c2:b7: 19:d7:cd:fe:8c:d0:d1:46:ff:45:d1:f1:48:31:11:fd:39:d8: 7e:61:29:ec:e4:79:11:4e:29:99:f7:39:2d:92:90:db:fb:b7: a3:a5:ed:17:59:23:df:3e:4c:53:58:de:ac:bc:f9:ca:d6:05: bf:bc:b5:e4:ac:20:94:fa:48:77:68:11:3a:17:dc:58:0a:70: 14:99:ed:03:97:10:09:f2:9a:37:06:70:c8:e6:bc:c5:9c:c9: b6:bc:1e:08:25:e4:ef:4a:d6:8d:de:fe:34:fb:b2:d8:61:27: b0:ed:49:d3:fe:a4:c2:c2:e1:48:22:05:5a:bf:c6:67:7e:bd: 59:f0:d9:0f:87:4c:2d:3d:61:ca:6a:9a:5b:d3:68:2d:6a:84: 12:87:a6:af:29:f0:34:f6:48:6f:7a:b6:87:b2:7c:07:cf:a0: 49:1f:96:6a:bb:99:e7:66:4d:0a:f7:69:df:11:95:02:74:16: f1:a3:53:2e:6c:92:b6:c5:d8:bd:9c:9a:c3:7f:a7:4e:68:0b: 96:01:ab:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1 Qzk2NzZBNjIwHhcNMjUwMzI5MDMyODE1WhcNMjUwNDA1MDMyODE1WjAYMRYwFAYD VQQDEw02N2U3NjhkMC1mYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAOorSXtmb/hJJYhMNRC4JvP3Fo/akbuidC+XU2WAOpNhwHO6HAgQG8APXG9 mASF79xtcv4xt/ObisHWc0jYCR7Uwn7p49OJUeoMyx84Gcg4Q/YofnHpbaHVrrCx pQmA8g0PnreKyJBc9nSF21uB4ew6Gya67gQG3wO0ofVjHtHIy1DzSOBF/HD/4jfD Dzwub3bfuhAkxTm8gljft2TaOKGPDHQm+hyfFp9xNYza6hHiciOTI02IWZ/lEpmV goWYyZv8Bq+9LgCD5q8Wh9BR0J+axCptMM0Un+eGijIV07W8czSoO+zNWMXJyzUC jsedCwxa4qqk4GncDwZONgOBqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrJnpjz jLulmom0LLJL73BxGiDnMB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu UFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+7kIhrkteznPIzbYrfaLuw4e2l4owb3zwlhvkahk2+vwT1MGo/s4j 28q4PwQYN6i+foBfwrcZ183+jNDRRv9F0fFIMRH9Odh+YSns5HkRTimZ9zktkpDb +7ejpe0XWSPfPkxTWN6svPnK1gW/vLXkrCCU+kh3aBE6F9xYCnAUme0DlxAJ8po3 BnDI5rzFnMm2vB4IJeTvStaN3v40+7LYYSew7UnT/qTCwuFIIgVav8Znfr1Z8NkP h0wtPWHKappb02gtaoQSh6avKfA09khveraHsnwHz6BJH5Zqu5nnZk0K92nfEZUC dBbxo1MubJK2xdi9nJrDf6dOaAuWAasY -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:01 2025 by rpki-client