$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: s4MLd9ru+SZgPp6fUxqCqM1RP+vXuTkIdJNJGxsDMnE= Subject key identifier: 3D:5E:92:B8:65:10:60:DC:CA:29:76:A0:BE:98:FE:A6:A7:69:10:65 Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 0119 Signing time: Thu 03 Apr 2025 04:01:13 +0000 Manifest this update: Thu 03 Apr 2025 04:01:13 +0000 Manifest next update: Thu 10 Apr 2025 04:01:13 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: atYrAgJu/TUMclBCIO+HB6TcpDTrrTWGYje3VVGCYps=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: g/Vp4JxPAnFvSE7br/vqo4Gmy4ZBC5/7hAk3ouH5N3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B Validity Not Before: Apr 3 04:01:13 2025 GMT Not After : Apr 10 04:01:13 2025 GMT Subject: CN=67ee0809-f628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:93:4a:46:82:27:87:4c:4c:a6:cc:8c:d3:27: 92:61:99:2c:84:ed:35:43:9d:c3:08:01:e9:05:95: d7:59:ef:55:4c:ec:e4:f1:71:72:af:95:db:95:6a: cf:0c:60:22:78:f0:24:bf:02:9a:6e:a5:ef:0e:67: 73:c5:9e:80:4c:8e:0f:01:ee:ea:e0:18:cf:2c:38: 5b:cb:97:10:fe:29:75:ee:bf:b4:07:d2:f0:c2:ad: 5c:f4:bb:f5:ec:e0:bc:46:5e:30:e2:3d:38:22:32: 9b:ba:fe:ec:9b:89:18:48:35:79:ec:59:1c:25:18: f0:21:4e:83:bd:41:e1:84:30:26:3e:69:f5:d5:a2: 89:a3:63:4e:4b:5a:4d:9a:30:30:69:d0:37:92:e3: 0a:66:ea:c5:01:aa:64:3e:15:54:36:27:6f:e3:46: 17:67:5e:2f:f9:1e:47:46:2f:a4:7b:49:e7:93:eb: af:10:f3:78:cb:b0:21:b1:45:19:2a:5e:e3:c4:dc: f1:ca:68:d7:87:10:7e:c2:ae:43:14:aa:f8:af:f2: 1d:3d:ab:59:a2:0b:0f:0d:fd:ae:01:55:c2:70:48: 19:dd:56:15:61:d1:37:95:28:2c:0d:6e:d7:5a:b8: 93:88:64:61:c7:79:ce:80:28:cd:6c:4d:30:d2:be: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5E:92:B8:65:10:60:DC:CA:29:76:A0:BE:98:FE:A6:A7:69:10:65 X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:59:15:13:ba:33:24:ee:8b:a4:01:bc:07:24:b2:0d:a2:13: bb:23:12:4f:30:fd:71:e1:e9:34:85:15:85:28:79:38:62:9c: 9a:49:93:01:2e:a7:e9:3a:89:2c:52:cd:43:da:68:01:72:f1: a1:83:0e:d1:fc:7f:05:8f:fc:2c:42:b9:25:7d:61:c0:82:53: 23:a0:4d:21:8a:16:6f:0a:3d:0a:e9:0f:e6:80:37:c0:d0:0e: 38:e2:5f:42:f5:c6:80:a0:58:a8:1c:63:21:09:55:15:5b:c3: 4b:94:64:42:68:17:49:ca:51:ed:50:ee:10:00:02:9c:df:f9: b6:9d:50:8d:2b:40:06:5d:bf:f5:ba:f9:ab:81:78:7d:c0:95: 2b:c2:62:61:1e:32:62:e5:0a:10:3d:d1:e7:af:59:68:4e:07: 06:d3:f4:87:b8:b3:21:99:26:28:6d:9d:db:a6:c1:3f:dd:54: bd:eb:09:7f:23:54:07:d3:da:84:f8:d4:aa:67:7b:54:e2:ea: 00:39:7d:7e:a6:75:2f:f7:96:b2:a4:c2:07:68:19:6c:fc:6b: c4:87:95:84:37:34:84:5c:f9:de:97:58:de:87:0e:48:d6:20: 51:97:be:89:05:f0:c8:f2:a9:0c:26:3a:57:96:f8:db:b2:24: d4:6e:5d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjUwNDAzMDQwMTEzWhcNMjUwNDEwMDQwMTEzWjAYMRYwFAYD VQQDEw02N2VlMDgwOS1mNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JNKRoInh0xMpsyM0yeSYZkshO01Q53DCAHpBZXXWe9VTOzk8XFyr5XblWrP DGAiePAkvwKabqXvDmdzxZ6ATI4PAe7q4BjPLDhby5cQ/il17r+0B9Lwwq1c9Lv1 7OC8Rl4w4j04IjKbuv7sm4kYSDV57FkcJRjwIU6DvUHhhDAmPmn11aKJo2NOS1pN mjAwadA3kuMKZurFAapkPhVUNidv40YXZ14v+R5HRi+ke0nnk+uvEPN4y7AhsUUZ Kl7jxNzxymjXhxB+wq5DFKr4r/IdPatZogsPDf2uAVXCcEgZ3VYVYdE3lSgsDW7X WriTiGRhx3nOgCjNbE0w0r5iEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1ekrhl EGDcyil2oL6Y/qanaRBlMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWWRUTujMk7oukAbwHJLINohO7IxJPMP1x4ek0hRWFKHk4YpyaSZMB LqfpOoksUs1D2mgBcvGhgw7R/H8Fj/wsQrklfWHAglMjoE0hihZvCj0K6Q/mgDfA 0A444l9C9caAoFioHGMhCVUVW8NLlGRCaBdJylHtUO4QAAKc3/m2nVCNK0AGXb/1 uvmrgXh9wJUrwmJhHjJi5QoQPdHnr1loTgcG0/SHuLMhmSYobZ3bpsE/3VS96wl/ I1QH09qE+NSqZ3tU4uoAOX1+pnUv95aypMIHaBls/GvEh5WENzSEXPnel1jehw5I 1iBRl76JBfDI8qkMJjpXlvjbsiTUbl2L -----END CERTIFICATE-----Generated at Fri Apr 4 21:30:00 2025 by rpki-client