$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: RFn02AzBhRM5GSKhTfOtT7CeF695ZHNVlaitB/8yToI= Subject key identifier: EC:2D:09:F3:00:E7:8B:65:87:7E:43:A2:A7:2B:EA:2F:95:8A:38:DA Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 013A Signing time: Thu 17 Apr 2025 03:29:37 +0000 Manifest this update: Thu 17 Apr 2025 03:29:36 +0000 Manifest next update: Thu 24 Apr 2025 03:29:36 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: gxNTso4n4TS1o8/wFKUpRIc4TC/NjQfeIFthM2w+5FI=) 2: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KnSSA1Qq59sJxgKVj3jP8KkbnpUbCwhj2IXQBg8sTYM=) 3: 9442231871C311EEB4110C83C4F9AE02.roa (hash: cPScC0gg9JYSO4uN11odfRIjDwaRFAK9tItwdJFOomM=) 4: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: NLAG2+hX7/iP2bhjkSZBj6P2IECcGb9YySRKnQ4sPC0=) 5: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: wQut+szNL5vwSeq5waVGRK6ZNGbvz3meY2xD3T/hUuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 03:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: Apr 17 03:29:36 2025 GMT Not After : Apr 24 03:29:36 2025 GMT Subject: CN=680075a1-3601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:bc:ec:17:18:24:7d:6d:3a:d9:ec:55:06: d7:7e:01:8d:69:dc:86:0f:3d:9e:40:e4:d0:69:42: 7c:46:ce:bc:82:c9:27:7f:00:c4:ee:36:83:7c:84: b8:64:8c:01:dd:de:dc:6e:3f:32:2f:e3:a6:72:0c: cd:35:81:c9:1c:1e:91:87:ee:51:0c:13:f6:6e:8f: 19:df:e4:b8:42:7c:dd:4c:11:89:ba:be:8f:f1:c8: ac:24:25:9d:43:1b:31:d3:b6:16:7d:c9:6b:8c:c9: 64:dc:8d:ad:49:24:b3:17:38:0e:e2:39:a1:03:b9: 79:82:26:07:df:84:90:46:b6:59:4a:3f:97:0a:8d: 02:1e:1e:1a:e1:d7:f7:13:55:70:fb:e5:18:56:13: 7a:6d:b7:de:0b:9f:57:64:06:85:b5:8f:db:4f:2a: 10:38:d3:63:a8:5a:7b:43:36:c1:86:7c:63:41:07: ba:53:36:db:65:a5:e3:fd:8a:87:96:ef:7b:a4:a7: 1b:63:f8:07:7b:ae:5c:e6:29:3d:b9:ef:18:e1:94: 33:c5:0e:32:e9:a0:34:2e:91:77:24:de:34:6e:ab: 12:8c:93:1e:db:bb:44:c8:b5:89:77:ae:f2:3b:61: 3c:26:b1:92:50:f8:5c:1b:f3:06:20:d4:41:1b:65: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2D:09:F3:00:E7:8B:65:87:7E:43:A2:A7:2B:EA:2F:95:8A:38:DA X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f0:91:ce:22:de:d8:d2:74:dc:65:b7:ab:6a:45:cb:35:f3: 09:bf:43:28:77:68:03:98:61:bf:68:f5:96:b9:36:bc:e2:33: 93:28:c1:33:76:bb:2d:4a:15:57:09:62:43:99:70:8a:67:ac: c3:13:f3:5e:a7:87:07:c4:0d:15:1f:16:6d:fa:a4:d9:2f:d4: ec:45:df:db:51:ee:91:6d:cf:dd:88:2e:bc:58:11:01:e8:2b: 8b:c5:dc:43:75:82:0d:f2:89:ac:ce:f9:2b:c9:a1:e8:ad:77: 67:5b:9e:41:68:56:b8:51:a2:5d:2b:72:7f:84:99:84:5a:ad: ad:de:82:75:a2:26:03:60:30:65:df:ae:cb:f7:bb:42:b0:e4: ce:7b:13:1d:6c:ff:29:eb:9d:59:30:04:71:ef:d0:37:28:c2: db:86:55:62:9d:e6:0b:d3:50:ce:f5:f7:8c:8e:08:4e:af:3d: eb:63:03:ae:43:9b:85:a2:69:cc:ed:70:fc:28:28:67:d8:7b: 59:c3:d0:47:ae:74:0c:d5:93:5a:cc:8d:87:9e:01:9d:65:4b: 51:75:af:b4:34:66:f7:b7:39:0f:54:df:28:a9:11:2f:6e:20: 8b:d0:69:0c:42:a9:77:e4:92:21:2d:83:7c:2d:d3:af:cb:cb: 46:e9:d5:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjUwNDE3MDMyOTM2WhcNMjUwNDI0MDMyOTM2WjAYMRYwFAYD VQQDEw02ODAwNzVhMS0zNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyK87BcYJH1tOtnsVQbXfgGNadyGDz2eQOTQaUJ8Rs68gsknfwDE7jaDfIS4 ZIwB3d7cbj8yL+OmcgzNNYHJHB6Rh+5RDBP2bo8Z3+S4QnzdTBGJur6P8cisJCWd Qxsx07YWfclrjMlk3I2tSSSzFzgO4jmhA7l5giYH34SQRrZZSj+XCo0CHh4a4df3 E1Vw++UYVhN6bbfeC59XZAaFtY/bTyoQONNjqFp7QzbBhnxjQQe6UzbbZaXj/YqH lu97pKcbY/gHe65c5ik9ue8Y4ZQzxQ4y6aA0LpF3JN40bqsSjJMe27tEyLWJd67y O2E8JrGSUPhcG/MGINRBG2UbyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwtCfMA 54tlh35Doqcr6i+VijjaMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj8JHOIt7Y0nTcZberakXLNfMJv0Mod2gDmGG/aPWWuTa84jOTKMEz drstShVXCWJDmXCKZ6zDE/Nep4cHxA0VHxZt+qTZL9TsRd/bUe6Rbc/diC68WBEB 6CuLxdxDdYIN8omszvkryaHorXdnW55BaFa4UaJdK3J/hJmEWq2t3oJ1oiYDYDBl 367L97tCsOTOexMdbP8p651ZMARx79A3KMLbhlVineYL01DO9feMjghOrz3rYwOu Q5uFomnM7XD8KChn2HtZw9BHrnQM1ZNazI2HngGdZUtRda+0NGb3tzkPVN8oqREv biCL0GkMQql35JIhLYN8LdOvy8tG6dXs -----END CERTIFICATE-----Generated at Fri Apr 18 17:12:14 2025 by rpki-client