$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: X+MPIUUAokmcU6q2FiLZZkOQqOobCM6pzYIpfDiHxMY= Subject key identifier: 29:F9:1C:6E:9D:11:DB:E6:37:F8:91:69:53:18:9F:CD:5D:EC:14:D5 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 0431 Signing time: Sat 29 Mar 2025 00:34:50 +0000 Manifest this update: Sat 29 Mar 2025 00:34:49 +0000 Manifest next update: Sat 05 Apr 2025 00:34:49 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: igXRZAp/cnqOWKtlJmTrV8tKuwi7ABuwKzoMVjZ50D8=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: XOYLtUkvxxhHrcsvmr5WB+I6ZV608DvzcypTgdpZOb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9 Validity Not Before: Mar 29 00:34:49 2025 GMT Not After : Apr 5 00:34:49 2025 GMT Subject: CN=67e74029-c4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:f8:b0:20:0f:1c:db:63:4f:fb:6a:52:5e: ad:7a:49:0c:bf:dc:db:90:24:94:b5:34:13:c2:1b: 17:78:d9:42:42:d0:48:26:92:84:71:5f:1d:6c:c1: 81:cd:3a:12:68:48:31:5d:82:b8:a5:31:cf:6f:aa: 13:c1:da:a6:62:0f:e3:1f:a8:78:63:2b:98:51:ba: 31:96:c5:82:80:0f:0c:14:d7:51:a1:1f:52:9d:bc: 3d:10:a9:3d:ab:4a:01:f3:87:ed:3c:18:d5:33:dc: 64:f5:6a:45:49:9f:f2:c1:ff:1d:33:e1:4d:94:3d: d6:ef:8b:fe:6d:13:bb:b1:2c:e7:75:6a:8d:46:cc: 8b:df:dd:71:7e:f8:5a:79:00:ec:bb:66:b1:96:f9: 31:20:08:bc:6c:aa:31:2a:47:5c:81:db:dc:ce:78: 15:51:35:db:b1:3e:b5:97:cc:e1:c9:3a:a5:5a:19: 82:2b:e3:3c:ac:ee:0d:f3:e2:07:10:65:4b:4d:49: f3:4c:db:fb:03:bb:49:73:10:2c:38:81:51:26:07: 03:75:0b:02:a2:ec:35:34:16:80:e5:1a:13:9b:eb: 66:e7:10:62:78:b7:18:6a:0c:a0:1c:07:24:f6:c5: 35:13:0d:cb:98:54:88:67:c4:bb:42:11:7e:02:81: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F9:1C:6E:9D:11:DB:E6:37:F8:91:69:53:18:9F:CD:5D:EC:14:D5 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ae:a2:e7:89:ce:36:2c:55:57:ad:99:a8:06:e0:94:78:7b: ef:1e:5e:86:76:bb:58:e4:67:43:f6:a9:76:25:cb:64:59:cd: 2b:1c:e8:4b:9e:a7:45:0b:a6:7a:c9:e9:d0:08:83:33:cd:df: 2a:89:cd:6d:c2:ba:5a:07:c4:cc:cc:3f:e6:e1:c5:0c:3e:6c: 41:5b:6c:65:b6:ca:a0:0d:1b:6f:a9:0c:08:12:d8:fc:ab:30: 3d:ea:5c:71:a4:91:8a:b1:c2:c3:fd:f6:81:eb:58:9f:09:1a: b0:83:04:aa:08:33:71:f3:9c:0c:7e:2d:5b:65:61:bc:74:3b: 28:41:c0:e8:be:57:9c:f0:2e:8a:25:d4:64:e9:56:4f:44:63: 17:0e:f8:9e:17:57:07:d8:45:f7:18:5a:db:e9:ee:dc:45:68: b2:9e:fc:42:fc:3f:3b:6d:85:59:76:2d:ef:d9:16:ea:a4:ed: cb:a2:6b:a5:1c:9d:90:ab:92:b4:32:d3:be:9d:e9:12:e2:c7: ac:27:0d:f5:bb:35:27:61:2c:eb:2a:ba:ac:93:4d:15:96:a2: 82:ba:a3:53:b4:cd:0d:24:dd:0b:9d:e1:02:47:d3:e5:d6:c4: 57:36:d3:6f:50:ca:9d:d1:69:02:44:27:7c:ec:bd:e8:39:6a: 4c:ad:d0:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjUwMzI5MDAzNDQ5WhcNMjUwNDA1MDAzNDQ5WjAYMRYwFAYD VQQDEw02N2U3NDAyOS1jNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywP4sCAPHNtjT/tqUl6tekkMv9zbkCSUtTQTwhsXeNlCQtBIJpKEcV8dbMGB zToSaEgxXYK4pTHPb6oTwdqmYg/jH6h4YyuYUboxlsWCgA8MFNdRoR9Snbw9EKk9 q0oB84ftPBjVM9xk9WpFSZ/ywf8dM+FNlD3W74v+bRO7sSzndWqNRsyL391xfvha eQDsu2axlvkxIAi8bKoxKkdcgdvczngVUTXbsT61l8zhyTqlWhmCK+M8rO4N8+IH EGVLTUnzTNv7A7tJcxAsOIFRJgcDdQsCouw1NBaA5RoTm+tm5xBieLcYagygHAck 9sU1Ew3LmFSIZ8S7QhF+AoFIXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn5HG6d EdvmN/iRaVMYn81d7BTVMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIrqLnic42LFVXrZmoBuCUeHvvHl6GdrtY5GdD9ql2JctkWc0rHOhL nqdFC6Z6yenQCIMzzd8qic1twrpaB8TMzD/m4cUMPmxBW2xltsqgDRtvqQwIEtj8 qzA96lxxpJGKscLD/faB61ifCRqwgwSqCDNx85wMfi1bZWG8dDsoQcDovlec8C6K JdRk6VZPRGMXDvieF1cH2EX3GFrb6e7cRWiynvxC/D87bYVZdi3v2RbqpO3Lomul HJ2Qq5K0MtO+nekS4sesJw31uzUnYSzrKrqsk00VlqKCuqNTtM0NJN0LneECR9Pl 1sRXNtNvUMqd0WkCRCd87L3oOWpMrdCP -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:42 2025 by rpki-client