$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: aeAS++r6W/u0GHby/r8xdue33E8jdXNzYQ6WZ8iz6uY= Subject key identifier: 40:9E:9D:AD:AF:93:3F:A6:EE:EF:FB:1E:DA:64:9C:08:99:67:3D:CA Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 0795 Signing time: Wed 02 Apr 2025 21:15:29 +0000 Manifest this update: Wed 02 Apr 2025 21:15:28 +0000 Manifest next update: Wed 09 Apr 2025 21:15:28 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: UE3PHnocC9VtjSPKbXhdTuHmDDnYLPiRpRU4qwzQPBM=) 2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=) 3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E Validity Not Before: Apr 2 21:15:28 2025 GMT Not After : Apr 9 21:15:28 2025 GMT Subject: CN=67eda8f1-480d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:2c:4d:a1:a9:4f:40:f7:8b:ec:04:0f:b1: 18:b8:21:fc:ff:48:95:b4:c1:73:12:fe:ed:3e:37: 0b:d7:33:f8:e7:fc:6c:b8:8d:99:46:85:97:28:91: 11:a3:88:4d:61:4f:2b:95:a4:fc:42:e8:4b:6f:38: 7c:46:cc:59:74:98:5d:ef:96:bc:27:4d:05:44:b5: a9:90:de:74:0c:ed:cf:ec:51:16:9a:40:c9:8b:a7: 60:7c:0d:9c:88:2a:c0:09:e9:13:f7:ac:e8:c9:23: a5:dd:00:1e:d2:f0:60:a4:ea:a4:df:00:ce:cc:da: dd:ba:b7:bf:1b:42:4f:14:13:3b:8f:73:a4:92:b4: 84:fc:76:68:94:30:ad:3f:93:ab:3d:1c:89:14:d6: 04:82:11:82:55:52:de:8b:28:60:62:bc:07:75:16: 39:c4:00:bb:1a:88:8b:58:5c:c2:7f:39:e7:81:1c: 0d:08:e7:a0:7d:ce:eb:10:c5:be:0e:3f:13:25:0d: da:8a:9b:df:04:86:96:f6:7a:46:68:a1:34:bb:e4: fd:98:ef:c5:65:ef:4b:9b:04:f2:d2:d0:dc:47:bc: f9:c1:54:53:d6:0d:cc:64:d1:f8:43:c4:b6:b6:48: 4d:e7:fa:c7:5f:91:77:e9:c5:92:10:7f:00:a6:e6: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9E:9D:AD:AF:93:3F:A6:EE:EF:FB:1E:DA:64:9C:08:99:67:3D:CA X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:eb:2c:b9:52:83:63:63:87:3b:5c:c1:dd:72:69:38:e2:d4: fc:a2:ae:52:9c:35:d8:b9:43:c5:d3:f7:72:56:0c:50:63:cd: a6:16:01:ec:c9:a4:f5:e0:99:ab:63:31:f2:9e:a5:1c:d8:84: 7e:43:b0:56:81:c8:1a:74:96:16:fe:54:50:22:b7:bc:58:32: 2c:46:8b:de:be:29:d0:f6:29:28:73:f1:d5:72:b2:b4:09:08: 90:5c:12:13:9f:1a:69:4c:0c:4d:84:27:d1:91:43:a8:3e:60: 3f:ea:dc:78:cd:2c:de:7a:e8:36:bf:32:c0:6e:cb:d2:d3:42: 3d:8f:da:fb:93:92:d1:f8:0d:85:15:05:b1:20:d2:c7:b0:78: 6c:79:87:cb:2a:88:61:a1:f4:76:cb:c6:93:a0:6d:f9:0e:b2: 9a:79:c8:e6:8e:56:2c:57:1b:35:07:99:4b:a9:03:9f:83:44: ac:b1:c7:48:86:e6:c3:1f:9d:09:c4:c7:71:f5:5f:6d:95:5b: 8c:9f:c7:1a:73:7f:70:de:f0:90:eb:51:66:6e:76:fd:19:a1: ab:98:11:96:ce:4a:1a:3f:d8:ae:67:b0:c4:cb:03:2d:06:dd: e9:96:2a:68:af:cf:3d:ee:04:c2:0d:70:5d:32:b4:35:da:f3: 8e:aa:25:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjUwNDAyMjExNTI4WhcNMjUwNDA5MjExNTI4WjAYMRYwFAYD VQQDEw02N2VkYThmMS00ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39EsTaGpT0D3i+wED7EYuCH8/0iVtMFzEv7tPjcL1zP45/xsuI2ZRoWXKJER o4hNYU8rlaT8QuhLbzh8RsxZdJhd75a8J00FRLWpkN50DO3P7FEWmkDJi6dgfA2c iCrACekT96zoySOl3QAe0vBgpOqk3wDOzNrdure/G0JPFBM7j3OkkrSE/HZolDCt P5OrPRyJFNYEghGCVVLeiyhgYrwHdRY5xAC7GoiLWFzCfznngRwNCOegfc7rEMW+ Dj8TJQ3aipvfBIaW9npGaKE0u+T9mO/FZe9LmwTy0tDcR7z5wVRT1g3MZNH4Q8S2 tkhN5/rHX5F36cWSEH8ApubSQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECena2v kz+m7u/7HtpknAiZZz3KMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy6yy5UoNjY4c7XMHdcmk44tT8oq5SnDXYuUPF0/dyVgxQY82mFgHs yaT14JmrYzHynqUc2IR+Q7BWgcgadJYW/lRQIre8WDIsRovevinQ9ikoc/HVcrK0 CQiQXBITnxppTAxNhCfRkUOoPmA/6tx4zSzeeug2vzLAbsvS00I9j9r7k5LR+A2F FQWxINLHsHhseYfLKohhofR2y8aToG35DrKaecjmjlYsVxs1B5lLqQOfg0SsscdI hubDH50JxMdx9V9tlVuMn8cac39w3vCQ61Fmbnb9GaGrmBGWzkoaP9iuZ7DEywMt Bt3plipor8897gTCDXBdMrQ12vOOqiXT -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:27 2025 by rpki-client