$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: 5TP0fk1zVnq5LjmPXYbhbM+4hwhB5a3pfK9qadDgV44= Subject key identifier: 0B:35:AE:6B:1E:D1:BD:32:C8:0D:4A:FC:EF:90:1B:AF:C3:FB:66:91 Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: 7B Signing time: Sat 19 Apr 2025 05:47:55 +0000 Manifest this update: Sat 19 Apr 2025 05:47:54 +0000 Manifest next update: Sat 26 Apr 2025 05:47:54 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: bQINUEDJT6XWtpLLeq2PYdBzIzS0KLXboDpEmLQTraw=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: +q7i8FT7aXv5TbfXQs0zmVnbFdJSpOU7FUV6yCY0qyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 05:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Apr 19 05:47:54 2025 GMT Not After : Apr 26 05:47:54 2025 GMT Subject: CN=6803390a-8604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cb:bb:70:aa:08:58:0c:a8:e8:e2:ab:c1:1f: 54:dd:01:a5:99:1b:6c:2e:ab:b1:98:60:3f:ec:b4: 47:9a:f3:b3:b8:ad:75:0d:70:4a:12:d9:7d:ba:ee: 35:57:0c:8c:ff:d9:91:05:76:b9:54:18:58:46:a2: 43:3d:77:18:5b:08:86:cb:d7:60:36:f0:f9:85:a7: ea:1d:68:53:c4:94:9c:e6:25:0c:1a:aa:b6:ad:7c: 34:79:22:cb:f3:3b:dd:3e:50:b8:50:85:9b:82:1a: c8:38:78:4c:a2:dc:5e:6f:52:f0:f3:cb:2b:53:e8: 62:9f:a6:ff:2c:0b:80:ab:da:e4:f7:9d:0a:48:39: 01:91:ef:d4:57:b5:30:0a:f9:db:0c:d5:4f:fb:09: 2f:7c:41:70:b9:47:62:d9:cb:b9:4f:a7:6b:82:e0: ef:f1:41:fc:43:d6:cb:7d:02:bd:0f:7f:93:10:3e: f2:69:33:d0:3e:4a:f9:dd:b9:8f:37:50:17:3c:dd: df:4f:41:cc:82:f0:4c:bd:6c:82:25:92:f5:42:81: 9a:2d:01:2f:f6:db:6d:c9:b7:22:14:30:76:be:4f: db:ad:fc:cb:c5:59:41:fb:c8:f7:31:64:80:c9:af: 59:ad:96:eb:5b:7e:cf:62:e6:40:cf:fb:98:96:e9: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:35:AE:6B:1E:D1:BD:32:C8:0D:4A:FC:EF:90:1B:AF:C3:FB:66:91 X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:14:06:e7:79:75:7d:e4:c9:a6:54:50:90:82:4b:57:2f:0f: 6c:e0:bf:c5:12:bd:b7:72:ca:00:02:49:6e:4f:34:2a:39:a9: af:a8:8f:ad:9b:4c:a6:53:a5:5a:ad:a2:84:b1:b2:0d:47:25: 14:19:4c:43:d0:7a:bf:61:31:29:75:89:c8:c1:8c:eb:37:27: 2b:a4:8c:58:c7:61:c7:42:f2:e0:bb:33:96:bd:3c:7f:37:29: 11:3b:10:a6:e5:e9:7f:76:40:50:1a:fa:ab:df:83:bd:62:5e: 86:a5:cf:bc:39:8c:bc:f6:0a:67:5f:de:ab:aa:19:93:f0:f7: 47:a2:b0:f0:cd:63:86:5c:43:18:c2:02:fb:22:0b:70:88:19: 9f:a8:6c:25:73:09:dc:e5:da:bb:e6:57:cf:3d:37:dc:7c:db: 3a:c2:7d:4a:62:18:b4:bf:02:f3:24:22:ca:36:86:04:57:7b: ab:8a:40:07:dd:83:cb:eb:32:4c:0f:9f:05:e2:25:5c:6f:70: 8d:9a:7f:17:d6:c0:0b:2c:02:69:f9:a7:3f:b1:9a:7d:43:28: 49:fa:00:8c:41:f0:6c:39:89:7d:47:ec:08:4e:7b:c1:df:14: e1:5a:18:23:58:33:32:da:9f:33:50:6a:4e:91:f6:b4:b9:dc: 4f:33:8d:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTU2QzExMC8GA1UEBRMoREM3NTU5RUU1QTIyNTA2MDM5NzMzOEZDQUEzODAzRkZB QTRCMjM1NzAeFw0yNTA0MTkwNTQ3NTRaFw0yNTA0MjYwNTQ3NTRaMBgxFjAUBgNV BAMTDTY4MDMzOTBhLTg2MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDey7twqghYDKjo4qvBH1TdAaWZG2wuq7GYYD/stEea87O4rXUNcEoS2X267jVX DIz/2ZEFdrlUGFhGokM9dxhbCIbL12A28PmFp+odaFPElJzmJQwaqratfDR5Isvz O90+ULhQhZuCGsg4eEyi3F5vUvDzyytT6GKfpv8sC4Cr2uT3nQpIOQGR79RXtTAK +dsM1U/7CS98QXC5R2LZy7lPp2uC4O/xQfxD1st9Ar0Pf5MQPvJpM9A+SvnduY83 UBc83d9PQcyC8Ey9bIIlkvVCgZotAS/2223JtyIUMHa+T9ut/MvFWUH7yPcxZIDJ r1mtlutbfs9i5kDP+5iW6YUBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCzWuax7R vTLIDUr875Abr8P7ZpEwHwYDVR0jBBgwFoAU3HVZ7loiUGA5czj8qjgD/6pLI1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBNTZDL0REREU4QzQ4NjRG RjExRUZBNUE4MTE1OEM0RjlBRTAyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0hWWjdsb2lVR0E1Y3pqOHFqZ0RfNnBMSTFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB NTZDL0REREU4QzQ4NjRGRjExRUZBNUE4MTE1OEM0RjlBRTAyLzNIVlo3bG9pVUdB NWN6ajhxamdEXzZwTEkxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB0UBud5dX3kyaZUUJCCS1cvD2zgv8USvbdyygACSW5PNCo5qa+oj62b TKZTpVqtooSxsg1HJRQZTEPQer9hMSl1icjBjOs3JyukjFjHYcdC8uC7M5a9PH83 KRE7EKbl6X92QFAa+qvfg71iXoalz7w5jLz2Cmdf3quqGZPw90eisPDNY4ZcQxjC AvsiC3CIGZ+obCVzCdzl2rvmV889N9x82zrCfUpiGLS/AvMkIso2hgRXe6uKQAfd g8vrMkwPnwXiJVxvcI2afxfWwAssAmn5pz+xmn1DKEn6AIxB8Gw5iX1H7AhOe8Hf FOFaGCNYMzLanzNQak6R9rS53E8zjbw= -----END CERTIFICATE-----Generated at Sun Apr 20 22:04:51 2025 by rpki-client