$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: prVxL7kYh4YCuliF6hq729sFM2Ka26LsA+fjOYYBamA= Subject key identifier: 60:EF:F4:35:11:2A:01:69:3E:0F:93:CA:17:AF:00:B3:7D:8A:C7:05 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 0533 Signing time: Fri 04 Apr 2025 23:36:42 +0000 Manifest this update: Fri 04 Apr 2025 23:36:41 +0000 Manifest next update: Fri 11 Apr 2025 23:36:41 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: fznDquGY95p7m7ZAf8tZ7x/aV6tkBM7+6ze56gqHxQI=) 2: B52EA19A6E0B11ECA6057963C4F9AE02.roa (hash: sRAPrM6e/yJbsGZwUamXGzz2TWejjmVOjZsdsTU0i6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972 Validity Not Before: Apr 4 23:36:41 2025 GMT Not After : Apr 11 23:36:41 2025 GMT Subject: CN=67f06d0a-0b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:0c:1c:87:dd:64:61:9a:0a:f4:0b:05:e5: 5b:48:86:6c:64:01:d0:fd:03:1e:93:eb:ae:b5:e1: 2c:1d:a5:77:eb:da:7e:21:cb:93:3f:c2:5c:55:6e: 95:96:1a:06:9d:21:1a:50:7e:b3:97:70:1a:e2:89: 5e:d5:c4:c3:1b:df:a5:d2:b1:c4:a5:ae:b8:0c:25: 96:b8:1f:34:30:6b:90:ae:a0:e8:92:1e:46:d6:1b: ea:73:81:ea:d1:a9:f8:5d:0f:03:58:4d:41:59:d9: 37:7e:7d:de:dd:51:94:04:46:8e:f0:c9:88:16:91: 57:04:7d:88:6e:f6:b5:c9:0d:e4:4d:4d:39:52:99: fa:66:5e:bb:f4:4e:1f:38:b0:e1:1f:c2:ce:ae:2b: eb:6c:b3:f3:10:f7:e6:82:aa:86:6c:d0:8e:12:50: 78:95:fa:6c:9f:8e:80:2f:54:3c:3b:bb:3e:11:f0: b6:39:ba:bd:36:78:82:03:75:59:e6:b8:9f:46:9a: 9d:3a:54:c9:78:e7:b3:60:7a:c3:b4:06:ab:64:2e: 7a:c2:20:0a:d3:e2:48:65:40:37:71:4f:1e:0e:e2: 97:7c:aa:58:8c:84:eb:da:73:6d:d1:de:6f:5b:ac: 50:bf:32:7c:f3:59:fa:c1:61:ad:6f:43:92:27:06: 0b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EF:F4:35:11:2A:01:69:3E:0F:93:CA:17:AF:00:B3:7D:8A:C7:05 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:6f:7c:24:fa:13:0d:82:ed:c7:bb:d2:7f:a5:39:08:89: f3:cb:08:5e:40:3f:8b:a6:bb:92:95:24:0e:7d:c4:cb:7b:13: b9:f0:fa:fb:58:13:43:26:e0:64:4e:20:93:3e:b9:38:07:28: 26:60:cf:eb:c8:29:8f:95:29:b6:84:e7:c0:58:0c:aa:fa:d0: d1:3a:b0:c2:3a:23:f2:53:96:98:db:c8:66:a4:93:b7:60:f3: 57:1a:a0:12:92:99:6e:3c:b7:ea:65:01:47:39:34:8e:b2:20: 08:9b:23:c4:2a:31:44:b1:9f:8c:6c:29:0f:aa:ee:9f:c4:50: ac:a7:27:aa:46:60:21:13:b5:ad:bd:a1:4c:6b:45:20:96:b5: eb:0f:3d:8e:db:9c:f4:08:b6:ce:4b:c1:4e:94:f2:16:0e:04: 78:ac:9b:36:52:40:7a:2a:d6:43:3e:30:64:d4:83:e7:22:bc: d5:34:1b:ec:d6:19:75:70:d1:9d:f2:5d:a3:53:06:60:52:df: b3:64:7c:35:12:4e:91:b3:9b:44:92:29:3f:29:75:b5:90:19: 42:1b:29:e1:ea:e2:e6:55:f2:94:40:2e:49:2e:cd:d9:57:5e: 23:f7:5f:f2:75:dd:e0:3b:38:bc:31:80:b1:38:f6:82:43:ca: 18:94:1d:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjUwNDA0MjMzNjQxWhcNMjUwNDExMjMzNjQxWjAYMRYwFAYD VQQDEw02N2YwNmQwYS0wYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWcMHIfdZGGaCvQLBeVbSIZsZAHQ/QMek+uuteEsHaV369p+IcuTP8JcVW6V lhoGnSEaUH6zl3Aa4ole1cTDG9+l0rHEpa64DCWWuB80MGuQrqDokh5G1hvqc4Hq 0an4XQ8DWE1BWdk3fn3e3VGUBEaO8MmIFpFXBH2Ibva1yQ3kTU05Upn6Zl679E4f OLDhH8LOrivrbLPzEPfmgqqGbNCOElB4lfpsn46AL1Q8O7s+EfC2Obq9NniCA3VZ 5rifRpqdOlTJeOezYHrDtAarZC56wiAK0+JIZUA3cU8eDuKXfKpYjITr2nNt0d5v W6xQvzJ881n6wWGtb0OSJwYLEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDv9DUR KgFpPg+TyhevALN9iscFMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfn298JPoTDYLtx7vSf6U5CInzywheQD+LpruSlSQOfcTLexO58Pr7 WBNDJuBkTiCTPrk4BygmYM/ryCmPlSm2hOfAWAyq+tDROrDCOiPyU5aY28hmpJO3 YPNXGqASkpluPLfqZQFHOTSOsiAImyPEKjFEsZ+MbCkPqu6fxFCspyeqRmAhE7Wt vaFMa0UglrXrDz2O25z0CLbOS8FOlPIWDgR4rJs2UkB6KtZDPjBk1IPnIrzVNBvs 1hl1cNGd8l2jUwZgUt+zZHw1Ek6Rs5tEkik/KXW1kBlCGynh6uLmVfKUQC5JLs3Z V14j91/ydd3gOzi8MYCxOPaCQ8oYlB1T -----END CERTIFICATE-----Generated at Sat Apr 5 14:43:42 2025 by rpki-client