$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json) Hash identifier: L4wVzFz4uqatm9Sw5bbpI/ytMVG4gzPziMRZWrq5G0A= Subject key identifier: 55:CF:9A:A6:AC:1D:CF:08:C8:02:CE:26:1F:AC:09:47:30:E1:4E:A0 Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Certificate serial: 0808 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft Manifest number: 0800 Signing time: Wed 02 Apr 2025 20:53:27 +0000 Manifest this update: Wed 02 Apr 2025 20:53:27 +0000 Manifest next update: Wed 09 Apr 2025 20:53:27 +0000 Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: Oh9NLClJL46sHV/JvehoUwsL7PBLk1woAmjU180c9dw=) 2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: gZyKCd69uOR05q6m/VeY/HmMPOj6FtQSF2UlUbB28zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFFB Validity Not Before: Apr 2 20:53:27 2025 GMT Not After : Apr 9 20:53:27 2025 GMT Subject: CN=67eda3c7-0b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:6f:91:f5:33:fc:b1:de:b4:43:f2:36:51: cc:3b:91:94:6e:54:5b:6f:f2:ac:4c:63:3d:1e:9c: 09:8f:e6:87:74:be:bd:33:95:72:db:97:c1:47:88: dd:f6:19:40:e0:de:e1:2e:f1:cd:dc:77:5c:f0:c6: e8:8b:98:cf:78:27:51:64:6c:12:5d:3b:ff:0d:c2: 88:90:01:cd:bb:f2:cf:1b:bb:08:49:65:12:62:8d: 51:29:27:94:8a:0f:3e:ba:40:9e:9c:31:d0:cc:e2: 32:b9:f9:59:32:1f:de:27:6c:db:9c:fd:05:16:0b: 9c:13:29:9a:0b:7c:1a:78:56:80:47:66:9a:6c:dc: 41:29:25:d0:86:8c:49:06:f3:0c:d6:c2:86:1a:f3: 4c:8c:f0:7f:72:d5:e4:da:2c:44:e1:5c:73:8f:bb: 2f:b3:8a:e1:9c:49:b3:9d:db:a2:08:b9:be:04:8b: 71:18:a4:2b:c0:4d:c6:6e:bf:d0:3d:d6:97:d8:cb: 44:73:21:78:ce:1d:a1:bc:fb:2a:5b:19:02:85:bf: 1e:56:8d:dc:5b:0d:96:c3:b3:25:2f:27:55:e8:fc: 22:b3:b0:48:2b:16:28:f5:ff:66:84:32:e2:8e:4b: b4:6a:d5:b6:ca:e6:14:b6:30:06:4b:4e:86:57:ec: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CF:9A:A6:AC:1D:CF:08:C8:02:CE:26:1F:AC:09:47:30:E1:4E:A0 X509v3 Authority Key Identifier: keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:64:67:f7:8b:21:c2:c7:d5:cb:41:58:99:10:c2:6a:3b:0a: 7b:3e:5a:58:29:21:f9:7b:a8:6f:b5:1b:be:4c:6e:e3:c1:61: 84:c2:f0:2c:4b:51:69:32:3f:67:61:39:66:c5:8d:72:cd:31: 4f:ea:05:a0:01:6c:23:ba:57:e0:01:8c:d2:cb:64:b9:1f:6b: e8:f8:65:b4:12:1a:06:0d:76:4e:0e:dc:5b:9e:9d:46:e6:5c: 56:dc:57:30:14:a8:44:23:8f:d1:0b:c2:5f:f7:a0:90:c5:20: 84:9f:98:8f:08:8c:58:58:78:e4:f1:1b:6f:11:cf:ef:07:1b: 66:54:88:c0:c5:15:c9:0c:1a:4d:c8:b6:a4:b8:f3:45:50:de: 69:dd:0a:a5:77:2e:eb:6b:6a:da:82:3b:a7:77:cd:8b:a3:09: 70:d5:40:17:42:62:b8:fb:38:f5:d4:ff:9a:14:88:42:52:2e: 5f:d5:12:8c:be:68:9f:25:1e:58:b5:7c:64:f1:29:b6:ed:3e: 7a:1c:42:1c:0b:5b:cf:01:af:f3:56:5f:e1:7b:e6:7d:1a:1a: 53:36:24:b4:89:91:25:e7:2e:a5:e3:87:dd:b2:77:6a:97:6a: ea:cc:98:2d:cf:1c:45:91:da:07:aa:a7:4a:e7:3c:38:b6:11: df:98:ae:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4 RjhBMjA2QzYwHhcNMjUwNDAyMjA1MzI3WhcNMjUwNDA5MjA1MzI3WjAYMRYwFAYD VQQDEw02N2VkYTNjNy0wYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0BvkfUz/LHetEPyNlHMO5GUblRbb/KsTGM9HpwJj+aHdL69M5Vy25fBR4jd 9hlA4N7hLvHN3Hdc8Mboi5jPeCdRZGwSXTv/DcKIkAHNu/LPG7sISWUSYo1RKSeU ig8+ukCenDHQzOIyuflZMh/eJ2zbnP0FFgucEymaC3waeFaAR2aabNxBKSXQhoxJ BvMM1sKGGvNMjPB/ctXk2ixE4Vxzj7svs4rhnEmznduiCLm+BItxGKQrwE3Gbr/Q PdaX2MtEcyF4zh2hvPsqWxkChb8eVo3cWw2Ww7MlLydV6Pwis7BIKxYo9f9mhDLi jku0atW2yuYUtjAGS06GV+wY+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXPmqas Hc8IyALOJh+sCUcw4U6gMB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0 RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3 M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYZGf3iyHCx9XLQViZEMJqOwp7PlpYKSH5e6hvtRu+TG7jwWGEwvAs S1FpMj9nYTlmxY1yzTFP6gWgAWwjulfgAYzSy2S5H2vo+GW0EhoGDXZODtxbnp1G 5lxW3FcwFKhEI4/RC8Jf96CQxSCEn5iPCIxYWHjk8RtvEc/vBxtmVIjAxRXJDBpN yLakuPNFUN5p3Qqldy7ra2ragjund82Lowlw1UAXQmK4+zj11P+aFIhCUi5f1RKM vmifJR5YtXxk8Sm27T56HEIcC1vPAa/zVl/he+Z9GhpTNiS0iZEl5y6l44fdsndq l2rqzJgtzxxFkdoHqqdK5zw4thHfmK7d -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:29 2025 by rpki-client