$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: WwmyfW2qF63Sr/1LiJJin+eRk5MzoWohVohoTKxCYYE= Subject key identifier: 6A:75:FD:CF:09:1C:39:84:E9:1C:86:78:A4:C6:B7:0B:FD:84:2F:55 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0C09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0C00 Signing time: Fri 28 Mar 2025 18:52:19 +0000 Manifest this update: Fri 28 Mar 2025 18:52:19 +0000 Manifest next update: Fri 04 Apr 2025 18:52:19 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: z9ewX2/ov9r5hAkOQEPNq23J4yUwe4C4VmoM15S2ueI=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: fNKHCrlloZaF6YEqwDlDZ6OwI4uUpNjeaTgxoFN7c8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 18:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE Validity Not Before: Mar 28 18:52:19 2025 GMT Not After : Apr 4 18:52:19 2025 GMT Subject: CN=67e6efe3-3d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:8f:37:bc:72:11:83:f7:f3:89:33:85:ef: 13:0c:d4:cf:2f:35:b2:cd:01:f6:a7:23:3d:b5:10: 2e:8c:06:3f:38:6c:c6:76:f8:24:90:43:8d:a9:8a: d4:a3:f4:71:80:21:20:dd:84:02:16:7a:0a:e8:2b: 92:3a:52:98:61:2d:ee:b0:b3:aa:b1:a8:23:36:87: da:89:36:36:c0:fc:0d:f2:2b:51:ac:d0:08:b8:81: 1e:ad:8c:4c:8c:3e:5d:ef:bc:8d:c7:09:77:36:49: 70:86:e9:e6:5e:ea:90:ff:7a:e2:a7:c9:12:74:a2: 97:b0:23:dd:af:07:5b:e5:97:0d:ae:91:e3:f0:af: 86:a6:7a:55:7e:72:06:fe:8c:a6:28:5e:10:41:6d: 2d:ce:4b:6c:4b:ed:5c:2c:69:17:c2:2c:78:b8:b5: c3:29:5e:c9:7c:ac:a7:b1:32:8b:34:8c:86:59:dc: 53:80:e8:fd:b1:cd:e0:73:74:84:fe:a3:7d:4e:c3: c0:d7:99:df:d4:af:c4:bd:07:5a:7e:e1:ad:7e:32: 62:bf:bd:dc:48:ef:0c:82:f4:82:5d:03:ad:83:40: 6d:91:3d:f8:bb:3f:a2:1d:f9:94:fa:b9:fb:00:34: 9e:c7:53:bc:c1:12:9d:9d:64:0d:ba:ae:f4:5a:2e: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:75:FD:CF:09:1C:39:84:E9:1C:86:78:A4:C6:B7:0B:FD:84:2F:55 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:19:f7:dd:26:32:b7:68:98:92:53:79:2c:3b:ba:be:6f:b7: a5:bc:49:ed:b2:5c:e3:13:fb:07:43:61:61:23:98:d5:52:8a: 32:32:8e:5c:a0:06:09:ff:3e:2b:0b:c6:08:88:8e:a7:33:56: 31:f2:d5:e7:b8:6e:9a:b6:cf:3a:12:9d:1d:97:4d:b2:2e:6b: 13:ff:ee:c5:91:0a:57:d4:e8:65:b9:0f:9d:44:1e:23:7c:09: 6b:ff:20:39:18:56:94:43:67:2e:32:53:63:e7:aa:80:a2:fd: dc:e7:aa:17:d3:39:4d:17:18:bc:fd:60:ba:a7:89:c6:e4:27: 9c:df:3f:39:87:71:dd:e5:a2:92:ba:0a:e8:9d:c8:72:1f:a1: ce:6f:c2:10:a9:f2:da:d4:45:67:04:b5:28:62:1e:c0:13:31: 2b:77:93:7b:0c:1e:0c:1a:c2:16:4b:e8:1a:e9:7e:1e:d9:b4: 32:01:2f:8d:87:64:94:fa:dd:58:40:16:e8:b0:ab:a4:a4:5c: bb:72:29:1e:a8:5b:ed:5f:fc:cf:c1:c0:a7:c3:15:5e:bb:04: 86:d4:14:8f:e0:6a:21:88:ce:c5:aa:c3:fe:ae:98:c7:e6:4d: 0f:7f:02:93:48:59:58:90:6f:43:f2:64:6d:a3:21:d4:08:7d: ee:5f:c7:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjUwMzI4MTg1MjE5WhcNMjUwNDA0MTg1MjE5WjAYMRYwFAYD VQQDEw02N2U2ZWZlMy0zZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn56PN7xyEYP384kzhe8TDNTPLzWyzQH2pyM9tRAujAY/OGzGdvgkkEONqYrU o/RxgCEg3YQCFnoK6CuSOlKYYS3usLOqsagjNofaiTY2wPwN8itRrNAIuIEerYxM jD5d77yNxwl3NklwhunmXuqQ/3rip8kSdKKXsCPdrwdb5ZcNrpHj8K+GpnpVfnIG /oymKF4QQW0tzktsS+1cLGkXwix4uLXDKV7JfKynsTKLNIyGWdxTgOj9sc3gc3SE /qN9TsPA15nf1K/EvQdafuGtfjJiv73cSO8MgvSCXQOtg0BtkT34uz+iHfmU+rn7 ADSex1O8wRKdnWQNuq70Wi4j6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGp1/c8J HDmE6RyGeKTGtwv9hC9VMB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQGffdJjK3aJiSU3ksO7q+b7elvEntslzjE/sHQ2FhI5jVUooyMo5c oAYJ/z4rC8YIiI6nM1Yx8tXnuG6ats86Ep0dl02yLmsT/+7FkQpX1OhluQ+dRB4j fAlr/yA5GFaUQ2cuMlNj56qAov3c56oX0zlNFxi8/WC6p4nG5Cec3z85h3Hd5aKS ugronchyH6HOb8IQqfLa1EVnBLUoYh7AEzErd5N7DB4MGsIWS+ga6X4e2bQyAS+N h2SU+t1YQBbosKukpFy7cikeqFvtX/zPwcCnwxVeuwSG1BSP4GohiM7FqsP+rpjH 5k0PfwKTSFlYkG9D8mRtoyHUCH3uX8cu -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:37 2025 by rpki-client