$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: CDQGqEcWHAzBr6qa14HIgdcA0gNexPlpu8JFbXHhTiQ= Subject key identifier: 88:E0:35:ED:5A:37:63:BE:A1:FF:6F:AA:DA:C1:57:BB:57:47:84:F6 Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: AC Signing time: Fri 11 Apr 2025 05:18:15 +0000 Manifest this update: Fri 11 Apr 2025 05:18:14 +0000 Manifest next update: Fri 18 Apr 2025 05:18:14 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: D7YTcqCpwgbBG8Fdnr5mm7lxSMiuq/2BZLPOf6Od4OI=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: wwGZpT48wP330+bWP5HvFyf3d6u+Sna23wh8+O18ssw=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: kAoCwtSL8DYNhEnCxiYeyq+03pY+E8NsD8+lYLcvbO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: Apr 11 05:18:14 2025 GMT Not After : Apr 18 05:18:14 2025 GMT Subject: CN=67f8a616-1ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:71:ee:95:b5:4b:e3:97:14:83:8e:28:c4:27: 20:74:b3:b9:cb:e4:88:c4:58:8c:0d:cf:dd:2a:e8: 31:75:d9:2b:19:76:ab:4e:d0:ea:b3:f2:09:5e:84: cd:39:18:e3:18:05:bb:a0:5d:87:11:09:50:ef:26: cf:d3:99:08:fc:01:ea:e1:98:3c:cb:45:1f:6b:e8: 83:40:f4:74:19:21:bf:f2:86:73:65:28:f2:37:a6: 23:b9:c5:bf:63:34:9a:e4:f7:31:71:47:08:71:5b: 21:fb:45:be:b9:2c:47:dc:c7:74:2e:67:d7:e0:16: ca:bd:f9:ef:50:16:fc:b5:52:84:23:18:6b:69:15: ce:62:64:97:0d:35:9f:fd:7d:6f:cb:c9:2f:88:39: ea:6d:92:69:69:13:11:02:b9:bf:6f:73:74:7d:a2: 8f:55:a4:91:b5:d9:a9:f9:cf:09:c9:9a:f2:e4:a7: be:8c:41:86:52:6b:ac:89:ca:d7:25:91:5d:67:a9: e5:39:b7:8e:9b:92:41:76:1a:96:b3:9f:2c:5e:66: 81:69:3d:e0:4b:65:40:3d:df:f0:f3:56:dd:52:92: ea:40:5c:83:1f:d6:b9:c9:6b:8b:48:6b:ec:d1:78: bb:c3:97:37:7a:38:51:c6:d8:57:28:49:7f:f0:d8: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E0:35:ED:5A:37:63:BE:A1:FF:6F:AA:DA:C1:57:BB:57:47:84:F6 X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:85:6e:a1:e0:c8:96:79:54:f4:e8:fd:be:8c:3b:9f:5d:e3: ed:c1:7e:0b:32:f9:0c:85:ae:11:77:d4:ac:41:56:f4:3b:fb: fd:eb:9c:bb:a2:22:96:0c:3a:79:ba:c7:be:43:20:d8:f2:e3: a6:ad:02:ad:3b:54:a1:08:ba:17:e8:59:c1:d3:e5:f4:30:38: b2:f2:8c:d1:30:7b:79:58:84:30:91:00:70:33:c8:b4:7b:d5: 06:2c:0f:5c:78:f1:81:1d:d2:61:c4:43:c7:ed:d9:fe:2a:81: 1d:ce:dd:6a:fc:05:0c:f7:80:d8:4d:c1:9c:e9:25:51:c4:d2: 10:fe:4c:cc:f3:df:a6:cb:ac:a4:87:0b:85:6b:ee:c7:00:a5: 3d:2e:b6:d4:5e:76:27:a1:b7:56:79:a8:06:44:b5:42:81:34: 25:a1:dd:32:04:1f:3a:7a:3c:7a:83:82:39:91:ab:96:10:9b: bc:9f:29:6a:b7:7b:3c:73:5e:30:27:3a:4c:bd:1e:ab:63:ee: 6c:b1:84:e1:61:08:2e:b2:43:b9:cc:6c:98:d5:3c:8b:9c:d4: b4:8f:e1:e5:c1:ae:65:e4:19:db:67:9a:d2:80:7a:de:92:f4: bf:b5:1e:5a:63:ee:0b:9e:fc:b8:bb:21:e5:48:76:d0:0b:dd: 7f:f5:9c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI2RkIxMTAvBgNVBAUTKEFEMjM0RTNGMUVCQkFEQUQwMTlGRTA5QUZGRjcwRTgw NzVBRkRFMTcwHhcNMjUwNDExMDUxODE0WhcNMjUwNDE4MDUxODE0WjAYMRYwFAYD VQQDEw02N2Y4YTYxNi0xZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XHulbVL45cUg44oxCcgdLO5y+SIxFiMDc/dKugxddkrGXarTtDqs/IJXoTN ORjjGAW7oF2HEQlQ7ybP05kI/AHq4Zg8y0Ufa+iDQPR0GSG/8oZzZSjyN6YjucW/ YzSa5PcxcUcIcVsh+0W+uSxH3Md0LmfX4BbKvfnvUBb8tVKEIxhraRXOYmSXDTWf /X1vy8kviDnqbZJpaRMRArm/b3N0faKPVaSRtdmp+c8JyZry5Ke+jEGGUmusicrX JZFdZ6nlObeOm5JBdhqWs58sXmaBaT3gS2VAPd/w81bdUpLqQFyDH9a5yWuLSGvs 0Xi7w5c3ejhRxthXKEl/8NgwTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjgNe1a N2O+of9vqtrBV7tXR4T2MB8GA1UdIwQYMBaAFK0jTj8eu62tAZ/gmv/3DoB1r94X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjZGQi9EOUNDOUVERTEx RjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3JhMEJuLUNhX19jT2dIV3Yz aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjZGQi9EOUNDOUVERTExRjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3Jh MEJuLUNhX19jT2dIV3YzaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPhW6h4MiWeVT06P2+jDufXePtwX4LMvkMha4Rd9SsQVb0O/v965y7 oiKWDDp5use+QyDY8uOmrQKtO1ShCLoX6FnB0+X0MDiy8ozRMHt5WIQwkQBwM8i0 e9UGLA9cePGBHdJhxEPH7dn+KoEdzt1q/AUM94DYTcGc6SVRxNIQ/kzM89+my6yk hwuFa+7HAKU9LrbUXnYnobdWeagGRLVCgTQlod0yBB86ejx6g4I5kauWEJu8nylq t3s8c14wJzpMvR6rY+5ssYThYQguskO5zGyY1TyLnNS0j+Hlwa5l5BnbZ5rSgHre kvS/tR5aY+4Lnvy4uyHlSHbQC91/9Zyl -----END CERTIFICATE-----Generated at Sat Apr 12 17:33:49 2025 by rpki-client