$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: IvdCsq6a7VNF9YDNjUm7ZsdmPf89liZMbdXAb4U6l0U= Subject key identifier: 66:9F:C2:FE:96:3E:8C:FC:9E:D0:0E:D8:CF:05:5C:5D:87:65:C3:D5 Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 0147 Signing time: Sat 29 Mar 2025 03:45:08 +0000 Manifest this update: Sat 29 Mar 2025 03:45:08 +0000 Manifest next update: Sat 05 Apr 2025 03:45:08 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: L5zNP8ROXVp3zQp07lHCkf4MAWYEaBQHcFuQQ6hMwv4=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: rH0gRhN/HJ8HJHVTL+JV1bpQN/J5hF8E0YYPa3z7lJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F Validity Not Before: Mar 29 03:45:08 2025 GMT Not After : Apr 5 03:45:08 2025 GMT Subject: CN=67e76cc4-2bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:bc:c6:0d:32:f8:f0:b9:e2:ad:a9:c0:de: a1:aa:f4:c5:44:93:f4:88:94:38:ea:8a:1a:a3:43: e1:81:99:32:0e:47:9c:53:a5:ed:26:51:68:42:8c: c6:92:83:56:bc:1d:dc:22:ec:ec:f4:c7:3f:d9:e3: 74:57:12:1d:c4:f1:42:57:c6:9d:ce:7b:c2:fe:46: 0f:7d:37:47:d3:09:0c:ac:be:97:e5:4c:ef:b2:76: 88:a2:a2:86:ba:b9:9e:93:7f:d9:d1:fd:71:01:0a: 9e:b0:0f:b1:49:6e:ec:48:ab:8b:ed:12:07:35:f3: db:e5:cd:f4:0a:43:61:0b:68:17:6a:f0:ec:f8:6d: 75:4f:b7:2f:24:9b:fa:ec:96:1d:9d:ca:11:09:7d: ee:46:1b:ff:7c:70:4b:06:83:5a:25:7d:21:ab:bf: b8:38:4f:83:f1:2f:ae:e9:ac:5d:b9:14:33:42:1a: 24:79:d6:f0:c6:32:d9:38:d6:3f:a1:64:2b:7b:78: 92:91:a6:c5:06:ea:9e:d5:22:ab:8d:72:91:e9:b0: 3e:dc:78:8c:9c:04:50:9e:f2:b5:f4:0d:a1:2f:54: d3:a7:dd:ef:c3:ae:df:de:5e:6a:67:c5:4b:74:0c: 3d:7d:75:ba:55:6a:71:3e:fc:c9:59:13:df:a8:fe: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:C2:FE:96:3E:8C:FC:9E:D0:0E:D8:CF:05:5C:5D:87:65:C3:D5 X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ba:29:3a:b2:ba:13:8d:4f:f4:cd:56:be:a8:72:96:53:3a: 54:74:22:9f:b6:4e:ea:91:10:e0:cf:44:33:db:41:5b:8a:74: 1c:b5:37:cb:d1:f2:e7:7b:90:16:d2:02:ad:22:97:cd:72:50: be:1d:1d:c8:a9:2c:38:d1:a8:8a:5d:6e:c8:38:e6:ed:fc:3c: d3:b2:68:12:45:9b:d5:4a:1c:55:02:d2:11:fe:aa:c7:31:8f: 9c:9e:61:90:d7:fd:d3:74:c4:19:5a:2e:c2:f2:f1:ce:35:62: 13:25:15:98:f4:94:ce:74:35:4e:2d:fc:2f:09:ac:b6:eb:9b: 14:63:3e:34:5a:11:c7:95:ba:70:b7:5c:2e:da:50:08:8d:5c: c9:f9:42:1d:45:81:bd:c3:71:10:0b:04:b8:3a:16:fa:d4:9f: 76:60:14:2d:23:67:2c:60:89:4c:30:87:e1:17:62:5c:ac:41: 96:0d:35:f9:49:af:26:28:2d:72:2f:ec:e6:68:9c:0f:c6:60: 93:f6:b6:66:65:9a:bd:d9:3d:c5:9d:5b:05:5a:cd:53:6a:71: 8e:db:16:80:aa:cc:e0:01:19:67:b1:18:30:76:4f:6b:a8:72: 5d:cc:82:85:d2:ce:4e:2b:bf:af:50:3e:74:8d:00:07:f6:0d: 68:fc:f3:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjUwMzI5MDM0NTA4WhcNMjUwNDA1MDM0NTA4WjAYMRYwFAYD VQQDEw02N2U3NmNjNC0yYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWm8xg0y+PC54q2pwN6hqvTFRJP0iJQ46ooao0PhgZkyDkecU6XtJlFoQozG koNWvB3cIuzs9Mc/2eN0VxIdxPFCV8adznvC/kYPfTdH0wkMrL6X5UzvsnaIoqKG urmek3/Z0f1xAQqesA+xSW7sSKuL7RIHNfPb5c30CkNhC2gXavDs+G11T7cvJJv6 7JYdncoRCX3uRhv/fHBLBoNaJX0hq7+4OE+D8S+u6axduRQzQhokedbwxjLZONY/ oWQre3iSkabFBuqe1SKrjXKR6bA+3HiMnARQnvK19A2hL1TTp93vw67f3l5qZ8VL dAw9fXW6VWpxPvzJWRPfqP47/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGafwv6W Poz8ntAO2M8FXF2HZcPVMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuuik6sroTjU/0zVa+qHKWUzpUdCKftk7qkRDgz0Qz20FbinQctTfL 0fLne5AW0gKtIpfNclC+HR3IqSw40aiKXW7IOObt/DzTsmgSRZvVShxVAtIR/qrH MY+cnmGQ1/3TdMQZWi7C8vHONWITJRWY9JTOdDVOLfwvCay265sUYz40WhHHlbpw t1wu2lAIjVzJ+UIdRYG9w3EQCwS4Ohb61J92YBQtI2csYIlMMIfhF2JcrEGWDTX5 Sa8mKC1yL+zmaJwPxmCT9rZmZZq92T3FnVsFWs1TanGO2xaAqszgARlnsRgwdk9r qHJdzIKF0s5OK7+vUD50jQAH9g1o/POs -----END CERTIFICATE-----Generated at Fri Apr 4 21:14:57 2025 by rpki-client