$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json) Hash identifier: OouunGsaWXHqXxabLrM8jy+5O4cF3WH7qF+Hvunmjto= Subject key identifier: 50:2B:CE:72:EB:F7:98:F9:16:53:3F:42:0D:9C:0F:B6:79:78:C6:CE Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft Manifest number: 44 Signing time: Thu 17 Apr 2025 06:15:29 +0000 Manifest this update: Thu 17 Apr 2025 06:15:28 +0000 Manifest next update: Thu 24 Apr 2025 06:15:28 +0000 Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: Ru3q8JQw+tSRL/zVxyWEnWm/HTDaQ93PWXZmgWsO0Hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Validity Not Before: Apr 17 06:15:28 2025 GMT Not After : Apr 24 06:15:28 2025 GMT Subject: CN=68009c80-9ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:7c:ff:7c:cc:ee:22:9b:46:90:8f:e0:42: fd:c5:a9:ec:16:f9:5b:11:3d:71:a2:f8:48:cc:57: 64:02:43:06:cd:a0:5c:42:b5:25:65:77:85:ca:ca: 2a:17:e1:61:4b:76:4a:b5:54:4f:24:65:71:1d:57: bf:d8:bb:7c:25:74:c8:43:8c:eb:46:85:de:01:81: 23:cd:5f:f6:3c:09:ab:34:ee:34:88:0e:56:f1:d4: 2d:d5:2f:f7:bb:1d:8d:19:c3:96:31:f9:03:9a:3e: fe:56:61:58:58:c9:c8:8b:fe:b7:95:a8:19:c7:af: c5:1a:4d:d0:2b:c6:e3:c6:b9:53:3b:d1:5e:1b:63: 23:e8:2e:ed:5e:37:34:d3:9e:5b:b5:ee:63:f4:55: 20:14:6b:f5:ed:b1:07:41:ec:8b:81:b9:8c:11:51: d5:ad:0a:b6:e8:03:21:50:34:24:6c:1d:48:9e:ed: 7c:6f:26:b9:0c:57:19:93:ce:02:b3:fa:ef:ce:4a: d7:df:03:b8:e7:20:25:35:3f:d8:5c:b5:01:42:f5: 2f:30:38:3c:86:3b:d2:7a:cc:39:9d:fa:18:1c:76: 0f:b0:83:0e:88:1e:e2:55:74:b9:27:62:dc:63:82: bf:01:87:0c:9b:4c:e7:11:26:43:fe:ff:7d:40:01: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2B:CE:72:EB:F7:98:F9:16:53:3F:42:0D:9C:0F:B6:79:78:C6:CE X509v3 Authority Key Identifier: keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:16:01:e6:00:cc:43:fc:c9:74:e8:2a:cd:4b:c4:f1:45:5f: 0e:6b:5b:47:af:81:c3:b9:e1:24:f1:28:30:97:5c:2f:85:d9: bd:42:89:2b:03:bc:09:00:2e:16:7e:ab:32:37:f6:6a:ff:5c: 67:60:82:70:e0:56:79:36:ac:a0:7e:ed:3e:f6:2a:ee:35:1f: b6:2f:9a:29:3a:2f:01:b0:e7:fb:28:7b:1c:fd:b6:26:4e:14: 9a:70:ef:8e:33:cc:1e:a9:4b:32:5a:41:cf:2d:4d:09:29:55: 8c:06:5a:a4:47:99:46:33:76:bb:08:12:71:3c:a2:77:6f:13: 20:ee:5c:35:ac:5a:c7:c1:e1:39:0a:a1:00:66:13:bf:f3:af: bc:5a:33:28:ed:e4:ce:ad:dc:94:a0:93:88:c7:00:b5:d9:3d: f4:5b:90:cb:cf:3b:b5:97:3c:4d:27:8e:ad:08:8e:de:f1:6b: 71:db:c0:97:77:77:e1:49:2d:5c:61:e8:9b:4f:12:74:cd:52: 34:0c:25:dc:05:22:d2:a1:a9:03:ad:63:08:31:2c:d9:1d:58: dd:b1:b3:9a:f7:2a:d8:d0:5a:de:ee:63:81:c9:fd:68:7e:9d: 07:b7:d0:4f:c5:91:bc:df:d1:e1:2c:c1:72:21:ed:42:fa:e0: 0e:ab:24:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkM2MTExMC8GA1UEBRMoMEI3N0Y3QkQyM0NCNDI4NThEMEJCRkY2RjdFM0FDNzMx MzU1MzFENTAeFw0yNTA0MTcwNjE1MjhaFw0yNTA0MjQwNjE1MjhaMBgxFjAUBgNV BAMTDTY4MDA5YzgwLTllZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ0Hz/fMzuIptGkI/gQv3FqewW+VsRPXGi+EjMV2QCQwbNoFxCtSVld4XKyioX 4WFLdkq1VE8kZXEdV7/Yu3wldMhDjOtGhd4BgSPNX/Y8Cas07jSIDlbx1C3VL/e7 HY0Zw5Yx+QOaPv5WYVhYyciL/reVqBnHr8UaTdArxuPGuVM70V4bYyPoLu1eNzTT nlu17mP0VSAUa/XtsQdB7IuBuYwRUdWtCrboAyFQNCRsHUie7XxvJrkMVxmTzgKz +u/OStffA7jnICU1P9hctQFC9S8wODyGO9J6zDmd+hgcdg+wgw6IHuJVdLknYtxj gr8BhwybTOcRJkP+/31AAW5NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUCvOcuv3 mPkWUz9CDZwPtnl4xs4wHwYDVR0jBBgwFoAUC3f3vSPLQoWNC7/29+OscxNVMdUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQzYxLzRDNkY2ODU2QjZD NDExRUZBMjRBQTYxNkM0RjlBRTAyL0MzZjN2U1BMUW9XTkM3XzI5LU9zY3hOVk1k VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzNmM3ZTUExRb1dOQzdfMjktT3NjeE5WTWRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QzYxLzRDNkY2ODU2QjZDNDExRUZBMjRBQTYxNkM0RjlBRTAyL0MzZjN2U1BMUW9X TkM3XzI5LU9zY3hOVk1kVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALMWAeYAzEP8yXToKs1LxPFFXw5rW0evgcO54STxKDCXXC+F2b1CiSsD vAkALhZ+qzI39mr/XGdggnDgVnk2rKB+7T72Ku41H7Yvmik6LwGw5/soexz9tiZO FJpw744zzB6pSzJaQc8tTQkpVYwGWqRHmUYzdrsIEnE8ondvEyDuXDWsWsfB4TkK oQBmE7/zr7xaMyjt5M6t3JSgk4jHALXZPfRbkMvPO7WXPE0njq0Ijt7xa3HbwJd3 d+FJLVxh6JtPEnTNUjQMJdwFItKhqQOtYwgxLNkdWN2xs5r3KtjQWt7uY4HJ/Wh+ nQe30E/Fkbzf0eEswXIh7UL64A6rJCc= -----END CERTIFICATE-----Generated at Fri Apr 18 06:20:33 2025 by rpki-client