$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json) Hash identifier: tZZp/VyYcTkeO/EEl+w2Y11M8h0acIQ04qp9tMdnvzU= Subject key identifier: A2:C8:04:B0:1F:B2:8E:B3:B2:DA:33:10:6D:F5:80:DA:1A:7F:65:A6 Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft Manifest number: 12 Signing time: Sat 05 Apr 2025 07:21:09 +0000 Manifest this update: Sat 05 Apr 2025 07:21:08 +0000 Manifest next update: Sat 12 Apr 2025 07:21:08 +0000 Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: a5SaDQ5sPZ4vFMY1a1E1+t/BkLgIxGA14/hZZNNpUqY=) 2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: hHpuvEEfCl4OhjB2zfY/eTXHBtooIatBX5e91JuXgS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282 Validity Not Before: Apr 5 07:21:08 2025 GMT Not After : Apr 12 07:21:08 2025 GMT Subject: CN=67f0d9e4-037a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:8b:f7:a0:43:54:06:58:6a:fb:d8:e3:6a: 50:91:ee:9b:aa:20:41:b6:5a:d8:63:00:85:33:e4: 23:de:fe:31:50:84:1c:45:6a:48:ae:e4:87:9d:72: fd:29:64:29:42:22:08:f7:99:9f:84:be:48:05:a5: 32:54:e0:79:65:85:b8:e3:0d:c9:7c:bb:79:43:15: f4:11:7e:c5:68:37:bb:fe:c7:a2:4b:73:e7:86:eb: 63:19:9f:4d:0d:9e:d9:e8:08:91:e0:95:01:79:22: cd:79:1b:5f:f8:02:51:0d:5c:f8:83:b2:e4:c2:3e: 40:af:ab:71:53:a6:d3:30:32:6b:24:93:ad:ba:ad: 3f:b3:54:c7:d7:47:ca:b5:50:41:e7:07:13:ca:84: 6f:50:a6:e6:d6:51:6e:20:14:cb:84:d0:45:a7:e3: 11:bb:37:07:59:a4:fa:db:65:1d:c4:c8:de:30:7f: 64:d9:c3:2b:f6:2e:3b:aa:a9:2b:16:74:b7:64:62: 03:66:9e:c6:f6:31:27:d6:0f:a5:46:d9:54:5d:70: 0a:51:84:fb:02:bc:dd:58:a7:be:96:a0:84:8b:75: 3d:aa:11:6b:ca:d9:e8:e6:bc:b2:86:f6:be:d5:b0: 58:45:c7:24:e8:e5:ef:73:b3:46:5a:e8:3a:ba:ed: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:04:B0:1F:B2:8E:B3:B2:DA:33:10:6D:F5:80:DA:1A:7F:65:A6 X509v3 Authority Key Identifier: keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:44:fe:bc:02:41:d8:98:f5:63:dd:f2:74:88:c3:ce:e1:53: f8:a2:93:92:f3:a4:c2:49:03:c7:75:4a:4f:12:e5:af:5c:eb: 85:97:86:b4:8e:42:4e:59:40:0c:38:ec:5d:18:5a:ce:a0:cf: 5c:fc:05:ce:02:36:0c:84:24:7f:df:a0:f1:38:71:26:de:64: 6a:a1:dd:17:b2:41:be:70:47:96:e2:61:f3:f4:1a:4d:62:86: 9f:b7:ce:66:b3:05:81:22:ec:12:64:8d:d4:ff:c7:86:7b:cb: cd:49:8f:f2:5a:94:de:94:55:6e:18:2e:22:8d:d1:f2:0b:bb: b8:5c:ad:80:3e:14:ef:83:9e:1c:2e:01:1a:5e:c8:7a:77:c2: fb:0c:ca:36:65:15:12:9b:8e:e0:c9:c5:02:2d:cb:5d:8a:1b: c1:94:d8:ef:6b:34:ab:9a:af:ad:a1:c7:75:c3:4a:aa:29:65: e9:8e:26:ed:1b:50:ec:59:79:a4:d7:0b:df:96:e8:c7:fd:b4: a1:47:b6:f5:b8:12:ab:63:41:2b:d3:7e:f2:1e:69:5e:b3:4c: 1a:c4:f1:fb:0f:6d:04:d2:c4:4c:8e:24:88:46:bf:61:d9:18: 57:53:41:ba:da:71:a0:f4:6b:74:0a:27:70:3d:be:b8:67:a9: 23:c6:5e:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODI4MjExMC8GA1UEBRMoOUY3QjQyRUYxOEQzNDJGREQ1NkE5RkRDNUYzRDgwMUUy RDJDMUFCNzAeFw0yNTA0MDUwNzIxMDhaFw0yNTA0MTIwNzIxMDhaMBgxFjAUBgNV BAMTDTY3ZjBkOWU0LTAzN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFBov3oENUBlhq+9jjalCR7puqIEG2WthjAIUz5CPe/jFQhBxFakiu5Iedcv0p ZClCIgj3mZ+EvkgFpTJU4HllhbjjDcl8u3lDFfQRfsVoN7v+x6JLc+eG62MZn00N ntnoCJHglQF5Is15G1/4AlENXPiDsuTCPkCvq3FTptMwMmskk626rT+zVMfXR8q1 UEHnBxPKhG9QpubWUW4gFMuE0EWn4xG7NwdZpPrbZR3EyN4wf2TZwyv2LjuqqSsW dLdkYgNmnsb2MSfWD6VG2VRdcApRhPsCvN1Yp76WoISLdT2qEWvK2ejmvLKG9r7V sFhFxyTo5e9zs0Za6Dq67VXHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUosgEsB+y jrOy2jMQbfWA2hp/ZaYwHwYDVR0jBBgwFoAUn3tC7xjTQv3Vap/cXz2AHi0sGrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MjgyLzA2MUFBQjUyRkJG RTExRUZCNTUyMEExMkM0RjlBRTAyL24zdEM3eGpUUXYzVmFwX2NYejJBSGkwc0dy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjN0Qzd4alRRdjNWYXBfY1h6MkFIaTBzR3JjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MjgyLzA2MUFBQjUyRkJGRTExRUZCNTUyMEExMkM0RjlBRTAyL24zdEM3eGpUUXYz VmFwX2NYejJBSGkwc0dyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINE/rwCQdiY9WPd8nSIw87hU/iik5LzpMJJA8d1Sk8S5a9c64WXhrSO Qk5ZQAw47F0YWs6gz1z8Bc4CNgyEJH/foPE4cSbeZGqh3ReyQb5wR5biYfP0Gk1i hp+3zmazBYEi7BJkjdT/x4Z7y81Jj/JalN6UVW4YLiKN0fILu7hcrYA+FO+Dnhwu ARpeyHp3wvsMyjZlFRKbjuDJxQIty12KG8GU2O9rNKuar62hx3XDSqopZemOJu0b UOxZeaTXC9+W6Mf9tKFHtvW4EqtjQSvTfvIeaV6zTBrE8fsPbQTSxEyOJIhGv2HZ GFdTQbracaD0a3QKJ3A9vrhnqSPGXhA= -----END CERTIFICATE-----Generated at Sun Apr 6 20:49:31 2025 by rpki-client