$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft File: 10rBuKMzUkP8svmQW8UdvcsOI20.mft (raw, json) Hash identifier: ljRA1Kfb33rV/LRIL8lPmZA0a9f2dcVXgrglOLDVU4M= Subject key identifier: FD:DF:1D:A8:FC:CE:09:1F:97:9E:92:15:EC:6E:BA:17:C1:E5:90:F5 Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D Certificate issuer: /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Certificate serial: 0AB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft Manifest number: 0AA5 Signing time: Sun 06 Apr 2025 19:19:15 +0000 Manifest this update: Sun 06 Apr 2025 19:19:15 +0000 Manifest next update: Sun 13 Apr 2025 19:19:15 +0000 Files and hashes: 1: 10rBuKMzUkP8svmQW8UdvcsOI20.crl (hash: Shm5uots6ocL4qqxxMbA/QHJfXXs+rd6VpfM90m1cYw=) 2: 98DBD8B660D311EEA9C80344C4F9AE02.roa (hash: qobh4w9osO4ki3CXJVAypXeKLZL/LsHsyelYml99k+0=) 3: AF3CEA305ADB11EEA96AE979C4F9AE02.roa (hash: wxVKUqydm62Dk782SZrIhbwE5T75wUycQIm2l+eMW2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 19:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2742 (0xab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E726 Validity Not Before: Apr 6 19:19:15 2025 GMT Not After : Apr 13 19:19:15 2025 GMT Subject: CN=67f2d3b3-0932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:36:95:3a:d2:bd:05:74:6e:8d:8c:df:c4: e0:90:84:fb:9c:54:1f:15:b0:25:04:a6:96:c8:36: 42:82:ed:6a:c0:9a:90:84:e6:0d:66:80:f7:00:50: 81:84:46:bb:16:53:d7:02:9f:73:fe:3c:e3:22:6c: ec:fe:98:24:18:94:5b:7d:07:86:8e:df:30:04:63: 04:89:86:94:00:a9:b2:1b:ed:21:7b:29:a3:4b:44: c0:35:52:2b:79:60:1a:12:a8:9c:3d:35:48:05:b2: a4:f8:e9:db:c0:ef:66:64:72:fb:95:dd:ba:6e:46: 50:5d:43:33:e2:40:9f:36:bd:2f:85:37:f5:c5:2b: 8a:77:9f:33:5f:5d:07:69:60:14:84:37:b9:3a:97: 6e:cb:94:59:72:1e:a3:2f:5b:d0:d2:3e:e0:c2:cc: d1:99:cc:09:e7:56:72:46:c4:40:1a:55:ed:5a:6a: 0c:74:e1:86:5e:fb:7d:53:01:44:af:de:79:d1:f9: 36:a3:d4:30:fd:94:31:b4:6d:60:9a:aa:60:93:fe: fc:cd:82:9e:29:b8:0a:df:57:0c:26:31:cd:1b:c2: d2:21:25:c2:97:bf:68:c8:67:44:71:aa:f6:18:d6: b8:a0:20:d4:38:03:76:74:69:8d:0a:85:50:89:2b: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DF:1D:A8:FC:CE:09:1F:97:9E:92:15:EC:6E:BA:17:C1:E5:90:F5 X509v3 Authority Key Identifier: keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d9:e0:8b:5d:0b:b0:4f:d2:f5:62:4c:20:93:b4:c3:92:0f: e5:5c:66:9c:44:fb:90:70:32:27:72:13:bd:ab:ca:b6:39:00: 12:10:d3:5d:10:ff:ce:1c:9e:94:00:a0:8c:c5:99:23:c7:49: 34:fa:a1:2e:5b:8c:71:03:74:f0:8e:17:19:0d:58:67:65:1e: 84:42:6f:2c:c3:eb:3b:55:8c:80:a3:7f:f3:79:c1:13:04:7c: 1c:91:aa:1b:fa:bc:4a:9e:a0:f6:2a:41:66:34:ae:7c:44:52: b7:fc:4d:08:ee:c1:ed:82:af:72:1a:c0:df:a2:b7:af:55:be: 7e:de:85:b4:11:6c:b5:7f:fa:6d:fb:ef:7a:26:dc:57:84:cc: 42:c7:ab:4c:30:ba:ea:93:f9:7d:4d:45:70:11:b3:37:f6:96: 27:3b:ce:cb:df:ce:2f:37:f6:9a:ef:49:29:61:e7:81:96:4b: 1a:04:a8:04:d7:51:1f:db:fd:5c:0b:6c:44:ca:d6:15:98:0d: 1b:26:bf:93:93:35:41:2c:d6:f6:9e:b0:44:61:73:fd:fa:d4: 90:25:d6:78:ab:da:e2:c7:79:7a:94:df:bf:cf:f6:2f:e0:68: 1c:bb:ba:87:33:95:c0:82:6c:8f:8a:08:1f:f3:8f:a0:21:01: ee:34:bc:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3MjYxMTAvBgNVBAUTKEQ3NEFDMUI4QTMzMzUyNDNGQ0IyRjk5MDVCQzUxREJE Q0IwRTIzNkQwHhcNMjUwNDA2MTkxOTE1WhcNMjUwNDEzMTkxOTE1WjAYMRYwFAYD VQQDEw02N2YyZDNiMy0wOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP02lTrSvQV0bo2M38TgkIT7nFQfFbAlBKaWyDZCgu1qwJqQhOYNZoD3AFCB hEa7FlPXAp9z/jzjImzs/pgkGJRbfQeGjt8wBGMEiYaUAKmyG+0heymjS0TANVIr eWAaEqicPTVIBbKk+OnbwO9mZHL7ld26bkZQXUMz4kCfNr0vhTf1xSuKd58zX10H aWAUhDe5Opduy5RZch6jL1vQ0j7gwszRmcwJ51ZyRsRAGlXtWmoMdOGGXvt9UwFE r9550fk2o9Qw/ZQxtG1gmqpgk/78zYKeKbgK31cMJjHNG8LSISXCl79oyGdEcar2 GNa4oCDUOAN2dGmNCoVQiSvBCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3fHaj8 zgkfl56SFexuuhfB5ZD1MB8GA1UdIwQYMBaAFNdKwbijM1JD/LL5kFvFHb3LDiNt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTcyNi82REJGQTM4QTUy RDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVrUDhzdm1RVzhVZHZjc09J MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwckJ1S016VWtQOHN2bVFXOFVkdmNzT0kyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTcyNi82REJGQTM4QTUyRDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVr UDhzdm1RVzhVZHZjc09JMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB22eCLXQuwT9L1Ykwgk7TDkg/lXGacRPuQcDInchO9q8q2OQASENNd EP/OHJ6UAKCMxZkjx0k0+qEuW4xxA3TwjhcZDVhnZR6EQm8sw+s7VYyAo3/zecET BHwckaob+rxKnqD2KkFmNK58RFK3/E0I7sHtgq9yGsDforevVb5+3oW0EWy1f/pt ++96JtxXhMxCx6tMMLrqk/l9TUVwEbM39pYnO87L384vN/aa70kpYeeBlksaBKgE 11Ef2/1cC2xEytYVmA0bJr+TkzVBLNb2nrBEYXP9+tSQJdZ4q9rix3l6lN+/z/Yv 4Ggcu7qHM5XAgmyPiggf84+gIQHuNLwR -----END CERTIFICATE-----Generated at Tue Apr 8 14:59:39 2025 by rpki-client