$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: c/oM7Jg9EL2xHd+DyvVKQcKwUP79XW3zDY0W24PXH2A= Subject key identifier: 17:40:2F:7C:46:95:32:B4:22:B4:2E:CA:A0:55:3E:AC:2E:1E:86:73 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 1621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 160B Signing time: Tue 06 May 2025 16:47:59 +0000 Manifest this update: Tue 06 May 2025 16:47:59 +0000 Manifest next update: Tue 13 May 2025 16:47:59 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: i8PrllEq3tRo+jnExHBP2yTMc3wICobHsgWGYQCVrfQ=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5665 (0x1621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: May 6 16:47:59 2025 GMT Not After : May 13 16:47:59 2025 GMT Subject: CN=681a3d3f-07f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:6b:58:7c:c6:01:b6:b8:aa:ad:fe:dd:99: 7e:c0:bf:3a:c8:b3:94:7a:3d:dd:62:2a:4d:ad:b4: 8e:1e:9c:18:2e:02:da:f5:62:e4:af:6c:14:91:76: 2e:3a:f9:b7:a0:05:50:46:0c:3c:7e:38:66:db:3b: 27:40:ba:64:d8:80:2b:07:44:f4:ce:be:c1:b4:e7: 43:38:cd:fb:65:32:ff:aa:eb:6a:21:33:24:30:6d: f4:63:28:16:be:3c:26:82:33:ff:89:fd:51:8c:00: 70:90:04:61:38:79:31:a8:89:99:ba:f1:e5:ed:7e: ab:bd:55:03:36:04:76:ce:4f:d7:0f:67:61:72:da: 00:e0:39:59:7d:45:62:b4:76:9a:d2:88:a0:b4:e8: 6a:75:61:06:b0:0a:f6:38:a1:03:42:9b:a3:2b:0f: 70:55:5a:63:2c:c2:06:50:a9:c2:5f:c8:6c:5c:0f: ec:eb:57:64:1e:30:b8:29:b8:69:fc:3b:d0:5a:d7: fa:ac:c8:7b:83:ed:08:10:a4:4c:39:4b:ec:9e:39: 7a:d3:4f:d6:9a:f2:75:11:52:2f:d0:3a:af:49:66: 46:03:0a:68:1f:08:74:5f:13:3a:d4:f0:c2:08:33: e4:57:96:e2:b2:36:a5:4b:0f:0d:f8:c4:fe:f7:49: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:2F:7C:46:95:32:B4:22:B4:2E:CA:A0:55:3E:AC:2E:1E:86:73 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:64:3b:39:ec:5d:d5:d6:8c:df:32:74:ca:3e:05:11:35:45: 94:92:9c:78:1a:bb:84:55:b6:c7:7c:c2:1e:11:4a:c7:99:0a: 87:40:f7:74:b5:cd:2d:eb:af:1a:da:69:89:f8:87:2d:bf:ab: 19:c2:a6:c3:66:89:14:fb:a7:8e:c9:49:ac:35:7e:0f:ad:ec: 31:65:57:0a:e3:5e:cf:17:65:bc:2a:c9:b5:7b:92:fd:bd:30: e2:ed:a8:c5:54:84:74:17:41:d0:bb:87:47:05:84:62:ea:70: 8e:c6:68:fe:0b:5e:db:66:bf:d2:87:a4:e2:dc:23:d0:a1:39: 4a:7c:bc:59:d8:93:b2:0d:7b:50:34:fc:1e:14:f9:53:63:7f: 32:77:c8:d7:4b:1c:9f:11:72:83:25:4f:31:0e:89:73:11:24: cc:e3:51:8b:35:3a:07:1a:3b:dc:a9:f3:61:bc:80:5c:0a:7f: b8:20:f6:aa:f1:77:48:6c:2e:8d:96:39:6b:06:38:76:90:8c: 4b:7c:6f:c9:d2:d4:5c:92:f8:c4:f5:0b:e5:32:fb:c9:5a:3e: 90:33:95:d5:52:55:cd:78:1a:5b:89:6c:5e:cd:c0:0c:bc:9e: 18:3e:1c:f3:25:90:21:d6:dc:8b:df:3c:28:09:0b:fc:52:20: f0:e2:f7:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUwNTA2MTY0NzU5WhcNMjUwNTEzMTY0NzU5WjAYMRYwFAYD VQQDEw02ODFhM2QzZi0wN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCZrWHzGAba4qq3+3Zl+wL86yLOUej3dYipNrbSOHpwYLgLa9WLkr2wUkXYu Ovm3oAVQRgw8fjhm2zsnQLpk2IArB0T0zr7BtOdDOM37ZTL/qutqITMkMG30YygW vjwmgjP/if1RjABwkARhOHkxqImZuvHl7X6rvVUDNgR2zk/XD2dhctoA4DlZfUVi tHaa0oigtOhqdWEGsAr2OKEDQpujKw9wVVpjLMIGUKnCX8hsXA/s61dkHjC4Kbhp /DvQWtf6rMh7g+0IEKRMOUvsnjl600/WmvJ1EVIv0DqvSWZGAwpoHwh0XxM61PDC CDPkV5bisjalSw8N+MT+90mRhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdAL3xG lTK0IrQuyqBVPqwuHoZzMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCZDs57F3V1ozfMnTKPgURNUWUkpx4GruEVbbHfMIeEUrHmQqHQPd0 tc0t668a2mmJ+Ictv6sZwqbDZokU+6eOyUmsNX4PrewxZVcK417PF2W8Ksm1e5L9 vTDi7ajFVIR0F0HQu4dHBYRi6nCOxmj+C17bZr/Sh6Ti3CPQoTlKfLxZ2JOyDXtQ NPweFPlTY38yd8jXSxyfEXKDJU8xDolzESTM41GLNToHGjvcqfNhvIBcCn+4IPaq 8XdIbC6NljlrBjh2kIxLfG/J0tRckvjE9QvlMvvJWj6QM5XVUlXNeBpbiWxezcAM vJ4YPhzzJZAh1tyL3zwoCQv8UiDw4ve/ -----END CERTIFICATE-----Generated at Wed May 7 07:46:10 2025 by rpki-client