$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft File: at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json) Hash identifier: bHyz4E8mH5uy9/f9+hUPpR0yqri6kko0mKCjj0DPGb0= Subject key identifier: A4:19:88:73:0D:E8:08:C0:3A:4A:F1:D7:63:97:A1:51:A6:2E:3D:21 Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft Manifest number: 06EF Signing time: Wed 02 Apr 2025 21:59:18 +0000 Manifest this update: Wed 02 Apr 2025 21:59:17 +0000 Manifest next update: Wed 09 Apr 2025 21:59:17 +0000 Files and hashes: 1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: hhroayvLeNtUiaXlIEgatFU0pPRynXXb49MK6wJ5EbM=) 2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=) 3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C356 Validity Not Before: Apr 2 21:59:17 2025 GMT Not After : Apr 9 21:59:17 2025 GMT Subject: CN=67edb335-0bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:7d:8f:bc:01:0e:d0:54:20:2d:1f:3f:e4: c6:26:a7:8a:89:78:5b:ea:c9:f2:6d:8e:c9:9b:61: a6:00:81:cf:69:fb:2d:f1:04:4a:19:cf:e0:71:86: d1:95:29:6c:ee:26:7c:4d:1d:4f:ab:f7:75:4d:72: 46:6f:b2:2f:7f:12:15:7f:7c:58:6e:30:d4:9f:a8: 6a:fa:5b:ce:2a:b4:c8:fc:b7:7f:82:36:6b:16:d3: 46:5f:ac:1b:c8:43:14:7a:07:9e:d2:4f:42:d2:d5: c5:9a:56:b5:10:6a:94:71:e0:7d:5e:b0:e4:1d:df: 84:36:84:60:1f:3e:09:69:b3:38:dd:c7:06:13:60: dd:f9:e1:43:c7:6b:6a:05:fa:cd:0b:0c:d7:1b:98: cc:ab:b4:26:c8:0d:be:b1:81:9d:4b:f9:48:88:68: 68:4a:65:66:74:1f:17:8c:86:67:bf:00:8f:90:c9: 74:c6:83:84:f7:85:62:bf:65:14:5b:b3:c8:76:a1: 55:36:bb:37:d8:5a:4a:b4:fa:dd:a5:5d:30:5d:18: 74:17:3e:54:2a:2e:ac:e8:4e:7e:4d:1a:85:f0:bf: 43:1d:05:75:0f:4c:ec:25:98:af:5e:c2:90:13:5c: 34:90:4b:e4:06:b2:87:79:90:a2:45:67:b0:1d:2d: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:19:88:73:0D:E8:08:C0:3A:4A:F1:D7:63:97:A1:51:A6:2E:3D:21 X509v3 Authority Key Identifier: keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:7d:26:e3:ee:ab:ba:75:34:96:3b:9c:a2:76:e6:e2:37:47: 86:ec:f7:72:17:a3:eb:18:82:f1:97:b5:a3:b6:98:8c:09:33: e0:52:32:07:22:f3:17:a8:c5:a9:c1:07:6f:71:3a:de:d2:fd: 52:f1:50:f7:06:5d:e7:59:36:86:8e:a6:56:b2:78:16:6a:51: c1:1b:6f:c8:83:59:7f:8f:93:64:b7:f4:26:b4:42:e4:a5:10: 08:98:e3:ed:fa:57:65:42:e0:fb:68:73:68:89:94:81:51:0d: f1:74:73:c6:78:c4:f8:ea:5f:95:48:3b:e2:ca:a9:bb:fd:09: 2f:20:ff:5b:fb:7b:cb:a3:77:5a:5c:4d:c3:fe:04:b2:03:df: 05:88:6d:a2:39:39:ed:d2:65:0a:20:f9:24:d5:60:b0:24:55: cc:6c:8f:4a:00:16:6a:bc:f8:25:77:44:7c:60:89:ff:cb:23: b9:f1:d6:86:91:5e:fc:61:7b:a5:57:fa:fd:4a:44:56:68:6d: 74:1d:2a:35:15:7b:7c:6c:cf:3c:b1:2e:e7:8f:3b:47:09:73: 4e:6c:45:0b:c2:1f:1b:df:35:2d:aa:50:b3:f6:3f:26:fe:97: 63:2f:54:31:46:b7:c7:56:01:a6:cf:84:cd:db:a5:cd:35:24: 9f:60:5c:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz RkU4NzY4ODMwHhcNMjUwNDAyMjE1OTE3WhcNMjUwNDA5MjE1OTE3WjAYMRYwFAYD VQQDEw02N2VkYjMzNS0wYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyV9j7wBDtBUIC0fP+TGJqeKiXhb6snybY7Jm2GmAIHPafst8QRKGc/gcYbR lSls7iZ8TR1Pq/d1TXJGb7IvfxIVf3xYbjDUn6hq+lvOKrTI/Ld/gjZrFtNGX6wb yEMUegee0k9C0tXFmla1EGqUceB9XrDkHd+ENoRgHz4JabM43ccGE2Dd+eFDx2tq BfrNCwzXG5jMq7QmyA2+sYGdS/lIiGhoSmVmdB8XjIZnvwCPkMl0xoOE94Viv2UU W7PIdqFVNrs32FpKtPrdpV0wXRh0Fz5UKi6s6E5+TRqF8L9DHQV1D0zsJZivXsKQ E1w0kEvkBrKHeZCiRWewHS00OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQZiHMN 6AjAOkrx12OXoVGmLj0hMB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM1Ni82NzFCN0RBNjQwMUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhh LWhNenVRTll3R3NfNkhhSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYfSbj7qu6dTSWO5yidubiN0eG7PdyF6PrGILxl7WjtpiMCTPgUjIH IvMXqMWpwQdvcTre0v1S8VD3Bl3nWTaGjqZWsngWalHBG2/Ig1l/j5Nkt/QmtELk pRAImOPt+ldlQuD7aHNoiZSBUQ3xdHPGeMT46l+VSDviyqm7/QkvIP9b+3vLo3da XE3D/gSyA98FiG2iOTnt0mUKIPkk1WCwJFXMbI9KABZqvPgld0R8YIn/yyO58daG kV78YXulV/r9SkRWaG10HSo1FXt8bM88sS7njztHCXNObEULwh8b3zUtqlCz9j8m /pdjL1QxRrfHVgGmz4TN26XNNSSfYFwE -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:37 2025 by rpki-client