$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: AgNm61auk8YMD9hZlWpm0JbpK8sT0L6oDPJ+HJNEb+w= Subject key identifier: 18:8B:8A:35:3D:71:F7:CA:D0:26:33:62:91:1C:B1:A6:CB:5E:F5:01 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 0155 Signing time: Fri 09 May 2025 03:14:02 +0000 Manifest this update: Fri 09 May 2025 03:14:01 +0000 Manifest next update: Fri 16 May 2025 03:14:01 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: DtzWLScjDgtsejlx1IIKzwA9CwWB/joabLOA0KBNP8U=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: tEbg35ruInXFvBobh8FVluJNLAlP7tv3JLnCppA5H5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: May 9 03:14:01 2025 GMT Not After : May 16 03:14:01 2025 GMT Subject: CN=681d72f9-1351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:12:4d:5c:c5:37:f7:d0:5e:74:aa:ea:64: 9e:85:6a:21:12:bd:80:62:e9:2d:9d:a1:52:36:18: 42:ba:fb:ab:f2:3a:00:23:5b:47:e3:99:21:69:99: ea:50:62:7a:70:27:95:2e:26:b3:ce:37:37:30:4b: d2:e2:1b:74:9b:66:6c:9a:9b:2e:4a:ff:75:6c:9d: 6b:f5:c4:19:6e:0e:cb:21:0a:4e:47:82:41:21:36: aa:2c:c4:0b:ca:58:c3:f7:a6:ba:6c:00:0f:77:ce: fb:e5:09:18:bf:9e:31:c4:48:91:10:61:5c:76:69: 10:76:2d:66:c1:85:d6:42:01:ef:4a:f1:5a:d1:e4: b4:d5:38:5c:d8:04:15:65:65:4d:10:76:7a:62:ed: ae:3d:4c:0e:20:76:43:e9:34:ad:c5:f8:6c:b1:35: d2:6c:96:20:4f:1c:54:1a:b4:d6:ca:ae:29:41:c3: 4e:48:b8:e8:97:ce:5b:08:25:46:e2:29:0a:50:7d: a9:e5:15:97:90:32:87:bc:03:10:48:4e:c2:e4:66: 99:49:0f:06:08:e9:aa:9f:4e:8d:d6:00:da:61:5e: 1b:8e:b3:55:13:8d:2c:80:1a:d2:93:e5:f4:4b:16: 40:07:ce:f6:fe:cf:49:7a:fa:d0:52:a4:0f:95:1c: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:8A:35:3D:71:F7:CA:D0:26:33:62:91:1C:B1:A6:CB:5E:F5:01 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7e:ed:fc:8d:e7:a1:b6:5d:a6:0b:dc:26:75:ae:e7:36:b1: 45:3d:d0:f1:11:38:62:53:db:89:8c:a1:17:03:6b:3c:cb:d0: d1:70:ba:b1:4d:8d:ae:ce:d1:30:ea:15:7e:3a:b1:d1:d2:05: a7:1f:c3:0c:37:5e:c2:90:62:a4:d3:3f:33:52:f9:77:3c:82: 29:53:d4:39:26:09:61:1f:5b:da:0c:78:4f:d0:dc:95:0b:1f: 55:5f:c0:77:f8:d4:cc:9e:c3:0e:85:df:32:9e:70:d2:12:af: fe:a7:c1:3b:d7:12:b8:d9:6c:e5:30:8c:2c:f6:9c:b1:46:e9: 76:c0:8f:fc:55:12:06:82:b9:ce:f9:2f:54:3c:ff:4c:f2:80: 85:72:1b:4a:ce:0a:60:36:f1:f0:1b:e1:f2:18:48:df:65:05: b7:cc:b4:14:b0:92:42:f5:1e:38:4a:a7:08:eb:17:18:90:66: 6f:a8:fb:4b:eb:8d:a2:14:1a:13:b6:1d:65:d4:dd:61:81:fc: 8e:85:71:06:6f:a4:e9:76:98:1c:31:ec:b5:9f:ac:58:cd:f3: 81:74:4f:c1:bd:a6:c2:3f:c9:d7:d8:33:b1:81:40:e9:34:f8: a6:96:73:ed:e2:20:df:bd:c0:51:2c:34:a9:44:35:3f:fa:31: 3f:39:8b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUwNTA5MDMxNDAxWhcNMjUwNTE2MDMxNDAxWjAYMRYwFAYD VQQDEw02ODFkNzJmOS0xMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DUSTVzFN/fQXnSq6mSehWohEr2AYuktnaFSNhhCuvur8joAI1tH45khaZnq UGJ6cCeVLiazzjc3MEvS4ht0m2ZsmpsuSv91bJ1r9cQZbg7LIQpOR4JBITaqLMQL yljD96a6bAAPd8775QkYv54xxEiREGFcdmkQdi1mwYXWQgHvSvFa0eS01Thc2AQV ZWVNEHZ6Yu2uPUwOIHZD6TStxfhssTXSbJYgTxxUGrTWyq4pQcNOSLjol85bCCVG 4ikKUH2p5RWXkDKHvAMQSE7C5GaZSQ8GCOmqn06N1gDaYV4bjrNVE40sgBrSk+X0 SxZAB872/s9JevrQUqQPlRztHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiLijU9 cffK0CYzYpEcsabLXvUBMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBafu38jeehtl2mC9wmda7nNrFFPdDxEThiU9uJjKEXA2s8y9DRcLqx TY2uztEw6hV+OrHR0gWnH8MMN17CkGKk0z8zUvl3PIIpU9Q5JglhH1vaDHhP0NyV Cx9VX8B3+NTMnsMOhd8ynnDSEq/+p8E71xK42WzlMIws9pyxRul2wI/8VRIGgrnO +S9UPP9M8oCFchtKzgpgNvHwG+HyGEjfZQW3zLQUsJJC9R44SqcI6xcYkGZvqPtL 642iFBoTth1l1N1hgfyOhXEGb6TpdpgcMey1n6xYzfOBdE/BvabCP8nX2DOxgUDp NPimlnPt4iDfvcBRLDSpRDU/+jE/OYt1 -----END CERTIFICATE-----Generated at Sat May 10 15:06:32 2025 by rpki-client