$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft File: 3tdhLc0WClbGF4QCXEspBELPNb4.mft (raw, json) Hash identifier: D8yVaFUdaR7ovS+m0sUGDdauxM7aUTT2bSVrhPs1JbA= Subject key identifier: 06:A6:32:A3:57:E2:3C:3D:64:87:E0:44:5C:53:0C:5F:CB:C0:86:43 Authority key identifier: DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE Certificate issuer: /CN=A91EC8F7/serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft Manifest number: E4 Signing time: Thu 13 Mar 2025 03:41:30 +0000 Manifest this update: Thu 13 Mar 2025 03:41:29 +0000 Manifest next update: Thu 20 Mar 2025 03:41:29 +0000 Files and hashes: 1: 3tdhLc0WClbGF4QCXEspBELPNb4.crl (hash: f7Ck0nglyxah/NSKrmBNsNp8EXv+zEl0Gk38Mc0+Gvo=) 2: B852EAA6C2A611EEB2AC4B6BC4F9AE02.roa (hash: AJLTI2EsLKZasGOhjxU4aYYDsbw9jLv+XGx/grDKIug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.crl rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8F7 Validity Not Before: Mar 13 03:41:29 2025 GMT Not After : Mar 20 03:41:29 2025 GMT Subject: CN=67d253ea-4598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0f:43:2c:3e:b5:ce:1f:7b:76:aa:d4:00:a5: c5:29:b2:40:b9:06:a4:b1:42:a0:ec:28:40:13:68: f7:bf:31:67:8f:8e:93:73:ec:1b:31:95:c1:fb:11: bb:22:0b:c6:6c:46:dc:71:51:d4:e0:b6:f9:4c:66: a9:1a:d3:88:89:c7:01:72:c5:76:ac:e0:08:17:66: a1:a0:ac:9a:0c:9e:a1:be:d1:cc:6f:14:0c:a8:47: d0:3f:92:69:61:3e:da:63:e9:b6:27:60:61:f3:93: 21:70:c7:25:c7:9f:f1:5b:f7:28:d8:70:89:31:3b: 37:de:b4:65:ff:69:e0:9c:a1:a6:5f:6d:f8:1e:3a: 75:81:a2:89:ab:93:13:d9:56:9f:0f:b6:bd:85:04: ed:dd:b3:2a:18:a4:48:af:05:2b:df:0a:ba:8c:7c: 9f:5b:b6:9d:0c:70:d6:b1:6d:63:34:af:66:e2:8d: 25:17:44:52:49:30:9c:82:60:98:55:24:2d:a7:55: 32:e0:75:d1:ee:16:ab:a5:8c:31:c9:b1:17:0f:d2: 20:60:ce:e3:6d:48:95:3c:70:e8:94:bd:4f:da:cb: c0:60:da:4f:43:2b:9f:3c:be:ac:ca:22:7c:92:e2: 3a:fb:28:74:14:fb:76:40:ac:0b:55:99:f3:87:00: 4a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A6:32:A3:57:E2:3C:3D:64:87:E0:44:5C:53:0C:5F:CB:C0:86:43 X509v3 Authority Key Identifier: keyid:DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:00:e5:4a:36:6a:9e:81:ec:12:e9:4c:ea:93:57:eb:d2:28: 9c:98:d1:0b:57:6a:8e:37:73:07:16:97:f9:02:d8:73:ab:78: c8:11:98:74:32:68:48:ab:0b:b5:4c:fd:14:c6:37:c9:0f:58: 19:6c:7a:4d:a9:0a:02:5e:8e:a2:ed:6a:bf:6d:5d:8d:ff:09: 2a:dc:0e:da:54:f4:4c:25:22:0e:16:d6:cd:60:b8:b3:d1:4f: 6d:ba:66:b8:55:f9:88:b0:49:eb:f7:4f:12:a5:35:f1:18:19: 4f:18:07:1e:89:3d:35:f0:f0:bf:15:e6:3b:98:fd:0a:4c:3f: 2e:bc:ad:8a:f3:e4:cb:17:e1:14:c3:83:cb:cf:9d:25:fb:10: da:37:88:ee:6f:00:91:08:70:b4:f2:34:3b:d0:04:11:bb:e9: 70:2b:b8:85:45:0d:10:01:12:6f:42:4e:21:e3:d3:0b:ef:59: 4e:65:df:b4:b5:a8:4a:26:db:9d:ad:30:3c:ae:60:ba:90:c7: c8:9c:ed:3d:a2:27:78:ea:f8:32:a0:79:47:b2:6d:26:30:27: 72:81:38:b7:30:ed:34:75:70:10:ef:fe:5c:d3:30:61:3d:05: 05:a5:eb:8c:3f:86:fd:58:72:11:cc:17:c6:84:cf:d2:88:91: 13:42:d3:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4RjcxMTAvBgNVBAUTKERFRDc2MTJEQ0QxNjBBNTZDNjE3ODQwMjVDNEIyOTA0 NDJDRjM1QkUwHhcNMjUwMzEzMDM0MTI5WhcNMjUwMzIwMDM0MTI5WjAYMRYwFAYD VQQDEw02N2QyNTNlYS00NTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6w9DLD61zh97dqrUAKXFKbJAuQaksUKg7ChAE2j3vzFnj46Tc+wbMZXB+xG7 IgvGbEbccVHU4Lb5TGapGtOIiccBcsV2rOAIF2ahoKyaDJ6hvtHMbxQMqEfQP5Jp YT7aY+m2J2Bh85MhcMclx5/xW/co2HCJMTs33rRl/2ngnKGmX234Hjp1gaKJq5MT 2VafD7a9hQTt3bMqGKRIrwUr3wq6jHyfW7adDHDWsW1jNK9m4o0lF0RSSTCcgmCY VSQtp1Uy4HXR7harpYwxybEXD9IgYM7jbUiVPHDolL1P2svAYNpPQyufPL6syiJ8 kuI6+yh0FPt2QKwLVZnzhwBKnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAamMqNX 4jw9ZIfgRFxTDF/LwIZDMB8GA1UdIwQYMBaAFN7XYS3NFgpWxheEAlxLKQRCzzW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhGNy83Nzg2RTU3RUIy QTUxMUVFOTBERUEyMjBDNEY5QUUwMi8zdGRoTGMwV0NsYkdGNFFDWEVzcEJFTFBO YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzN0ZGhMYzBXQ2xiR0Y0UUNYRXNwQkVMUE5iNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzhGNy83Nzg2RTU3RUIyQTUxMUVFOTBERUEyMjBDNEY5QUUwMi8zdGRoTGMwV0Ns YkdGNFFDWEVzcEJFTFBOYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMAOVKNmqegewS6Uzqk1fr0iicmNELV2qON3MHFpf5Athzq3jIEZh0 MmhIqwu1TP0UxjfJD1gZbHpNqQoCXo6i7Wq/bV2N/wkq3A7aVPRMJSIOFtbNYLiz 0U9tuma4VfmIsEnr908SpTXxGBlPGAceiT018PC/FeY7mP0KTD8uvK2K8+TLF+EU w4PLz50l+xDaN4jubwCRCHC08jQ70AQRu+lwK7iFRQ0QARJvQk4h49ML71lOZd+0 tahKJtudrTA8rmC6kMfInO09oid46vgyoHlHsm0mMCdygTi3MO00dXAQ7/5c0zBh PQUFpeuMP4b9WHIRzBfGhM/SiJETQtMV -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:00 2025 by rpki-client