$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: rgLUs4GD5ZBLS+WadCpVgbMfFtVeT4fKcHZ6bhN0Hy4= Subject key identifier: DD:75:90:99:A7:AA:DD:B9:2C:8D:38:77:01:A7:21:C9:F8:A8:C9:80 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 1080 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 190B Signing time: Mon 12 May 2025 17:17:41 +0000 Manifest this update: Mon 12 May 2025 17:17:40 +0000 Manifest next update: Mon 19 May 2025 17:17:40 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: EqOyTfMXwZFyJ1IvhscdjoKsQGd+q7BIKmzBH1zOzNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4224 (0x1080) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: May 12 17:17:40 2025 GMT Not After : May 19 17:17:40 2025 GMT Subject: CN=68222d35-8d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:e7:b5:9a:9c:1e:59:4c:5e:b4:ab:2b:48: 39:83:3d:48:48:e9:04:24:26:e1:f9:26:5c:5e:eb: 34:78:e1:a8:db:5d:ef:b5:d5:9d:2f:55:c0:be:1c: 8b:c6:95:ab:0c:ee:06:b8:89:b6:12:b6:e8:e6:45: 95:ef:8e:ba:a6:c7:ef:cf:72:84:95:ef:ab:50:b4: 6e:c8:64:ac:6e:5a:5e:02:7f:5b:d4:82:4b:1e:63: 81:3c:bc:41:3d:26:82:73:18:d9:12:0a:ad:bb:65: 67:31:7b:c1:cd:4f:b3:ba:e0:85:76:17:0b:6d:a8: 3f:20:0f:5b:d0:0e:55:74:d2:6e:c5:d4:e6:a6:29: c3:fa:51:62:4c:8a:74:37:cf:3e:1c:76:f9:9a:de: a5:4b:7d:de:3b:fb:66:54:aa:f1:4b:7e:c9:2a:25: 02:4d:30:6a:fb:91:9f:5e:ad:3d:18:4c:7a:e7:55: 92:15:7b:35:3e:09:1e:3b:17:b2:7d:78:6d:30:d4: c7:aa:8d:18:ba:1f:ab:98:62:28:58:5e:95:b0:d2: 44:59:30:a1:67:a9:89:ba:1e:ba:f7:0e:f9:68:6d: e6:b5:25:0f:d1:89:df:b4:df:6b:ee:c5:a8:e6:73: 5d:a8:3c:d7:e7:c7:bb:65:cd:84:dc:85:d1:0e:62: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:75:90:99:A7:AA:DD:B9:2C:8D:38:77:01:A7:21:C9:F8:A8:C9:80 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0a:e5:48:6b:78:ff:bb:c5:c8:9d:20:66:e4:6c:2e:e2:cc: ed:85:8c:13:e8:d6:7e:52:51:fb:c2:83:82:c2:65:c1:6d:bf: 8f:e6:75:13:16:38:32:40:d5:ea:eb:6e:51:6c:c5:ee:6e:fa: 42:40:8c:07:37:fd:68:08:8a:81:d8:d2:85:b3:23:d9:1c:10: 87:82:a9:13:4f:82:85:db:ae:8b:34:d7:c2:60:9c:35:3f:c3: ef:a4:3e:95:e1:6b:53:4c:3d:8e:6a:a1:3b:a1:68:45:7d:2e: 39:3b:c4:2e:9e:ad:24:d9:26:72:9e:39:40:32:52:14:33:58: b2:4a:68:f9:40:d2:5a:c1:1c:44:ee:d0:ba:ca:03:a2:91:12: ed:56:35:cd:5f:cc:6c:fd:00:04:5d:40:5d:50:b0:f9:79:c9: 7c:cd:5e:04:b7:da:8b:32:48:16:9c:70:cd:72:48:e0:f0:9c: cf:76:35:1c:38:65:a2:89:6f:f6:8e:a0:2f:d9:7e:1f:d6:ec: 9d:de:f9:7b:df:5e:b5:28:b1:d8:af:b6:70:bd:4f:fb:8c:48: 13:2b:5b:be:50:06:3a:fc:de:07:49:5f:78:d4:64:6b:88:51: 61:60:c1:a9:ed:ac:e5:71:ea:fa:bd:1a:20:a5:3c:cd:1a:9e: b0:31:8e:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjUwNTEyMTcxNzQwWhcNMjUwNTE5MTcxNzQwWjAYMRYwFAYD VQQDEw02ODIyMmQzNS04ZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC3ntZqcHllMXrSrK0g5gz1ISOkEJCbh+SZcXus0eOGo213vtdWdL1XAvhyL xpWrDO4GuIm2Erbo5kWV7466psfvz3KEle+rULRuyGSsblpeAn9b1IJLHmOBPLxB PSaCcxjZEgqtu2VnMXvBzU+zuuCFdhcLbag/IA9b0A5VdNJuxdTmpinD+lFiTIp0 N88+HHb5mt6lS33eO/tmVKrxS37JKiUCTTBq+5GfXq09GEx651WSFXs1PgkeOxey fXhtMNTHqo0Yuh+rmGIoWF6VsNJEWTChZ6mJuh669w75aG3mtSUP0YnftN9r7sWo 5nNdqDzX58e7Zc2E3IXRDmJy0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN11kJmn qt25LI04dwGnIcn4qMmAMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPCuVIa3j/u8XInSBm5Gwu4szthYwT6NZ+UlH7woOCwmXBbb+P5nUT FjgyQNXq625RbMXubvpCQIwHN/1oCIqB2NKFsyPZHBCHgqkTT4KF266LNNfCYJw1 P8PvpD6V4WtTTD2OaqE7oWhFfS45O8Qunq0k2SZynjlAMlIUM1iySmj5QNJawRxE 7tC6ygOikRLtVjXNX8xs/QAEXUBdULD5ecl8zV4Et9qLMkgWnHDNckjg8JzPdjUc OGWiiW/2jqAv2X4f1uyd3vl73161KLHYr7ZwvU/7jEgTK1u+UAY6/N4HSV941GRr iFFhYMGp7azlcer6vRogpTzNGp6wMY5s -----END CERTIFICATE-----Generated at Wed May 14 03:15:25 2025 by rpki-client