$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: /YMwcZ/ti6UiBlZyyPVa21US3N+4kU2ffUCww/yQuB4= Subject key identifier: 29:DC:0B:F5:92:58:15:7A:11:4C:7F:DC:D4:5D:6D:05:FD:C8:D4:90 Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 72 Signing time: Thu 15 May 2025 06:13:10 +0000 Manifest this update: Thu 15 May 2025 06:13:10 +0000 Manifest next update: Thu 22 May 2025 06:13:10 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: OZKpbTeeDaFiswiXcuX26WsM2zc89e05y0nsWxJB5kM=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: ymXlk9RJfi9V2KzOznS96G8RXYI7jJ6rpj+phG/GZks=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: SX03ccnLTHDWWqP2dXM+ZAcRiPmXaj3vkOlikMISxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: May 15 06:13:10 2025 GMT Not After : May 22 06:13:10 2025 GMT Subject: CN=682585f6-df42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:78:89:b3:2a:59:7d:d1:2a:ca:c1:36:ad: 70:38:70:6c:9d:08:b7:2f:cf:db:da:ed:ea:ed:cd: a6:d7:64:75:34:e3:eb:6b:b8:56:ab:a3:59:85:de: be:33:57:2b:45:4f:95:28:0d:54:fe:58:35:8b:59: c9:66:af:49:43:5c:20:95:73:e6:af:ec:51:7d:c6: 29:30:38:fa:03:35:62:ac:cd:1d:3b:aa:bb:ae:9c: e9:4e:66:b5:ff:8b:c0:48:56:f9:ee:09:56:d6:49: d0:4c:df:d8:1c:2e:da:ac:2e:8b:59:55:8d:43:d8: cd:50:74:09:44:08:54:16:ce:bf:34:7f:60:86:1e: 33:39:40:4a:88:71:c5:bb:1d:b2:34:3b:2f:e9:ed: 7c:b2:9a:33:b8:e5:5b:db:2c:4e:10:03:9a:fb:08: 34:d5:31:17:34:16:4c:0e:d3:0a:04:10:a0:b1:a3: 1b:62:5b:03:3f:ee:6e:f3:78:70:f2:b1:6a:39:b2: 34:a7:b9:4f:44:de:26:7f:88:fc:78:f8:e4:a5:19: 1e:d2:04:ac:7f:da:12:d1:7f:88:d9:3d:a4:21:ae: 28:b5:59:37:bc:75:e0:14:2a:41:17:2f:6e:74:8a: eb:bd:f7:e3:87:86:14:fd:d5:dd:c0:39:52:25:e0: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DC:0B:F5:92:58:15:7A:11:4C:7F:DC:D4:5D:6D:05:FD:C8:D4:90 X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:00:75:e3:76:6a:cf:17:1c:7e:04:92:07:9f:9d:7e:cb:ee: 91:1b:74:be:a1:7a:63:c5:d7:53:77:2c:a7:8c:c4:16:93:2e: fc:2b:28:5c:23:72:65:05:63:5b:45:3c:5a:c3:5d:b0:47:e5: 36:35:fe:d1:c8:ad:cb:43:4b:3d:fd:ff:4a:4f:61:73:fc:69: 11:48:1a:55:28:3c:89:77:f3:b6:78:fa:4f:30:7d:bb:ce:06: cf:5c:a7:f2:37:93:97:9d:61:e8:2a:77:c2:b6:20:c4:06:be: ba:a5:38:78:a2:01:e7:60:8b:51:d9:da:71:f9:2c:17:68:42: cf:f2:d5:e7:eb:d2:b2:4e:45:40:d6:ba:46:57:70:ca:2c:b7: f6:c4:7b:ea:d5:32:34:d7:40:fc:c7:ac:20:e0:e8:cb:3e:e1: 0c:a1:18:f6:8c:c0:d1:14:9f:75:c5:8f:6f:a7:21:a3:ff:9a: 1b:59:64:8f:c9:32:12:96:8b:fe:f6:a9:5c:ad:7b:ba:27:37: 0f:48:35:ab:4d:d4:01:74:41:88:0a:0f:f9:fe:c9:26:36:f7: bf:91:51:52:20:f5:8a:14:7c:21:20:28:6b:16:ee:04:fb:a3: c5:56:5f:86:00:10:e7:8a:e1:77:97:ae:6f:29:6e:0c:28:bf: 93:8d:4d:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDc3ODExMC8GA1UEBRMoRERDNURCMzgxRkYxRUNDQTVCOTVBMjg1MTQ3OTJEQ0RC QTQ5MTgyQjAeFw0yNTA1MTUwNjEzMTBaFw0yNTA1MjIwNjEzMTBaMBgxFjAUBgNV BAMTDTY4MjU4NWY2LWRmNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrvniJsypZfdEqysE2rXA4cGydCLcvz9va7ertzabXZHU04+truFaro1mF3r4z VytFT5UoDVT+WDWLWclmr0lDXCCVc+av7FF9xikwOPoDNWKszR07qruunOlOZrX/ i8BIVvnuCVbWSdBM39gcLtqsLotZVY1D2M1QdAlECFQWzr80f2CGHjM5QEqIccW7 HbI0Oy/p7XyymjO45VvbLE4QA5r7CDTVMRc0FkwO0woEEKCxoxtiWwM/7m7zeHDy sWo5sjSnuU9E3iZ/iPx4+OSlGR7SBKx/2hLRf4jZPaQhrii1WTe8deAUKkEXL250 iuu99+OHhhT91d3AOVIl4Gd/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKdwL9ZJY FXoRTH/c1F1tBf3I1JAwHwYDVR0jBBgwFoAU3cXbOB/x7MpblaKFFHktzbpJGCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENzc4LzVCOEQ4NjY4OTBF MjExRUY5NzYxMkE0NkM0RjlBRTAyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2NYYk9CX3g3TXBibGFLRkZIa3R6YnBKR0NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE Nzc4LzVCOEQ4NjY4OTBFMjExRUY5NzYxMkE0NkM0RjlBRTAyLzNjWGJPQl94N01w YmxhS0ZGSGt0emJwSkdDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgAdeN2as8XHH4EkgefnX7L7pEbdL6hemPF11N3LKeMxBaTLvwrKFwj cmUFY1tFPFrDXbBH5TY1/tHIrctDSz39/0pPYXP8aRFIGlUoPIl387Z4+k8wfbvO Bs9cp/I3k5edYegqd8K2IMQGvrqlOHiiAedgi1HZ2nH5LBdoQs/y1efr0rJORUDW ukZXcMost/bEe+rVMjTXQPzHrCDg6Ms+4QyhGPaMwNEUn3XFj2+nIaP/mhtZZI/J MhKWi/72qVyte7onNw9INatN1AF0QYgKD/n+ySY297+RUVIg9YoUfCEgKGsW7gT7 o8VWX4YAEOeK4XeXrm8pbgwov5ONTUc= -----END CERTIFICATE-----Generated at Sat May 17 05:41:19 2025 by rpki-client