$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: JaODb92SXQFVddp5sHojaDwaoEI3HaM5k67GS0DLjHM= Subject key identifier: FB:77:92:DD:83:22:7F:19:BA:BB:E6:F0:78:FB:5C:0D:76:10:0B:8C Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 34B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 348F Signing time: Tue 08 Apr 2025 14:39:41 +0000 Manifest this update: Tue 08 Apr 2025 14:39:40 +0000 Manifest next update: Tue 15 Apr 2025 14:39:40 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: JmChzbBm/eW2ql+5I1F/Db6uQdpO63IZDlz4hIOBdm0=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: wvEIUxvlUFTH2qcHsopuAxq+KjN4ylNQUioBhK93yXg=) 3: 4A08F422F43211EBA188C86AC4F9AE02.roa (hash: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 14:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13495 (0x34b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834 Validity Not Before: Apr 8 14:39:40 2025 GMT Not After : Apr 15 14:39:40 2025 GMT Subject: CN=67f5352c-8c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:84:fd:a8:51:b8:fd:dd:e8:e7:25:2d:1d: 2e:93:9c:e0:f2:6b:b1:31:6f:1e:b4:ac:de:ff:be: 05:84:f4:2d:80:fc:d5:7a:36:af:e7:29:23:2a:66: 9e:8b:2b:9b:d8:37:aa:09:39:d3:c1:64:ac:40:5a: 39:04:d6:9d:a3:33:f9:fc:14:66:42:d7:44:48:76: 0b:6e:44:b7:d5:7f:a3:37:34:89:f8:c6:83:15:93: d3:03:09:35:99:6f:2b:f0:8e:af:7f:6a:dd:bf:22: cb:9d:e7:05:df:2f:d9:06:6b:71:1d:99:7a:15:23: aa:6a:36:a3:5e:c9:ca:56:40:25:2f:96:14:03:7b: 19:0c:03:f3:00:bc:8b:37:82:f6:62:2a:c5:57:66: 01:da:98:56:db:3e:31:ac:a2:b1:e5:c8:bc:1a:ef: 39:b9:d3:d8:82:7e:6c:f0:b1:24:91:97:a5:cc:5b: 98:1a:3a:c6:40:1e:b5:40:72:bc:31:12:b2:f2:f7: 7b:f9:5a:13:22:fd:08:fb:1e:b4:d1:7b:fb:e0:3e: 41:c1:d2:49:a7:1f:46:4d:69:1e:f5:90:05:24:60: e3:56:50:87:6f:eb:ad:15:3a:05:e6:03:78:f5:46: e6:31:63:99:d4:a1:0b:20:f2:43:66:e6:56:07:91: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:77:92:DD:83:22:7F:19:BA:BB:E6:F0:78:FB:5C:0D:76:10:0B:8C X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:97:f3:25:fe:9d:59:5e:1a:1c:0a:18:36:34:e7:a2:0f:16: 19:62:cb:33:7e:46:bd:a3:c6:ff:8e:b5:ad:9c:8a:27:86:b1: 5d:89:36:51:8d:dc:90:bc:b6:59:73:2a:b3:2f:a2:a9:f0:47: 02:4e:d2:4a:7d:7a:f6:56:af:9f:6c:ba:7a:2a:fe:2a:3c:ad: a1:df:d1:92:3b:7d:49:91:0d:59:cc:65:0f:9e:1f:49:5f:17: e8:c1:10:7d:06:b1:f2:e4:b5:b6:91:79:5f:51:63:3d:57:86: b4:83:71:10:3e:6e:3f:f2:37:23:e8:33:85:97:44:ed:4a:dc: 4c:1f:8e:d3:d5:35:d1:4e:7e:76:79:94:0b:15:7b:e6:30:42: ce:f5:eb:51:de:7b:d9:2c:ff:02:d5:18:9e:98:57:ce:6d:a7: 32:8f:8d:8b:d9:62:0a:94:9b:92:e1:20:d7:1b:9f:1a:f9:c5: b3:c2:eb:35:83:b7:e3:16:61:51:84:e2:6c:0f:52:c7:c7:ed: f5:d8:2c:1c:9f:51:be:7a:b0:c3:16:58:4b:02:9b:a0:33:00: 4a:61:b5:29:84:80:a2:bd:63:1b:06:34:1d:fa:3e:96:0a:a0: bf:eb:29:63:9e:d3:aa:bc:fa:ff:b9:5e:82:ec:bc:11:31:b0: c5:90:22:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUwNDA4MTQzOTQwWhcNMjUwNDE1MTQzOTQwWjAYMRYwFAYD VQQDEw02N2Y1MzUyYy04Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO6E/ahRuP3d6OclLR0uk5zg8muxMW8etKze/74FhPQtgPzVejav5ykjKmae iyub2DeqCTnTwWSsQFo5BNadozP5/BRmQtdESHYLbkS31X+jNzSJ+MaDFZPTAwk1 mW8r8I6vf2rdvyLLnecF3y/ZBmtxHZl6FSOqajajXsnKVkAlL5YUA3sZDAPzALyL N4L2YirFV2YB2phW2z4xrKKx5ci8Gu85udPYgn5s8LEkkZelzFuYGjrGQB61QHK8 MRKy8vd7+VoTIv0I+x600Xv74D5BwdJJpx9GTWke9ZAFJGDjVlCHb+utFToF5gN4 9UbmMWOZ1KELIPJDZuZWB5GQ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt3kt2D In8Zurvm8Hj7XA12EAuMMB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbl/Ml/p1ZXhocChg2NOeiDxYZYsszfka9o8b/jrWtnIonhrFdiTZR jdyQvLZZcyqzL6Kp8EcCTtJKfXr2Vq+fbLp6Kv4qPK2h39GSO31JkQ1ZzGUPnh9J XxfowRB9BrHy5LW2kXlfUWM9V4a0g3EQPm4/8jcj6DOFl0TtStxMH47T1TXRTn52 eZQLFXvmMELO9etR3nvZLP8C1RiemFfObacyj42L2WIKlJuS4SDXG58a+cWzwus1 g7fjFmFRhOJsD1LHx+312Cwcn1G+erDDFlhLApugMwBKYbUphICivWMbBjQd+j6W CqC/6yljntOqvPr/uV6C7LwRMbDFkCJY -----END CERTIFICATE-----Generated at Tue Apr 8 18:59:40 2025 by rpki-client