$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json) Hash identifier: x+2xq2wDe+7LtaJXKDfIy0GY2BST77OR+ZuuUGk8W8Q= Subject key identifier: C6:EB:3F:D4:22:43:9B:1A:CA:11:3B:D0:E0:2B:E6:D3:CE:2A:EA:99 Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Certificate serial: 346F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft Manifest number: 346F Signing time: Fri 18 Apr 2025 14:54:34 +0000 Manifest this update: Fri 18 Apr 2025 14:54:34 +0000 Manifest next update: Fri 25 Apr 2025 14:54:34 +0000 Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: 2c2cg/FGSn9IsDNZe1MJ/RbVDPqzig2S+VAnk2rdn1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 14:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13423 (0x346f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918429B, serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Validity Not Before: Apr 18 14:54:34 2025 GMT Not After : Apr 25 14:54:34 2025 GMT Subject: CN=680267aa-afac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:70:f1:d0:50:bd:ef:21:fb:1a:65:64:29: 2d:c1:c4:34:5b:e6:62:18:b7:a6:5e:af:e2:fb:84: eb:e5:d1:6e:b3:f8:ed:f9:ca:27:9c:9c:05:18:f7: 83:06:5d:55:c5:9f:81:ea:79:85:ec:03:af:8d:54: 8e:7f:66:31:93:24:e7:18:02:ad:19:6b:bf:3a:43: 8e:3e:94:3b:96:29:f9:3a:9c:27:75:e0:f9:6d:65: e9:f4:5e:41:4e:a1:45:41:61:22:7b:ab:93:d1:9c: a7:77:03:c6:13:92:26:83:e0:92:c2:9b:db:f3:a6: 38:0a:d1:38:a4:a5:3e:1f:98:b3:7f:db:4b:d2:f4: cd:ab:70:8e:82:a9:72:6e:0b:4d:12:d0:ec:81:a6: 25:f4:20:36:63:b6:14:36:e3:5f:7f:e0:cb:36:e0: 8f:5e:1f:52:94:fa:a6:4f:46:00:9c:e1:70:4e:2b: 47:94:8a:d1:fd:b7:7e:45:15:f8:50:c1:26:b9:40: cd:55:3e:33:3e:73:c1:a1:6f:67:24:f6:fd:1d:a3: 49:cc:19:5a:e5:ce:fe:63:18:a9:a9:4e:f4:e2:ad: 15:dd:e8:10:01:91:07:32:20:9d:59:c9:fd:27:d1: e4:08:99:e5:dc:04:ac:78:d7:b6:0a:85:b1:ab:46: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EB:3F:D4:22:43:9B:1A:CA:11:3B:D0:E0:2B:E6:D3:CE:2A:EA:99 X509v3 Authority Key Identifier: keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2e:85:b0:bf:b3:1b:43:04:10:69:6a:5a:85:3c:01:04:53: 40:69:63:c2:08:2f:eb:db:3b:8d:a6:5f:9a:e7:e8:e5:f2:00: df:25:07:fa:c9:5e:4c:c6:70:fe:9b:d2:10:a4:af:2d:a6:9a: 77:d9:e2:d9:51:fc:33:71:85:b7:7e:97:09:fd:a8:b6:e1:ce: 7a:92:8b:ca:19:90:79:a6:58:64:b2:48:56:d9:60:93:6a:97: b9:ab:dc:db:64:3c:d4:aa:6a:96:85:e9:a1:61:7a:e3:b5:a9: 88:e5:bc:6c:fc:71:27:88:f2:0a:b6:51:8a:6d:78:f1:d8:4a: 92:d3:04:46:e6:14:ed:46:b5:ba:e9:75:0c:5c:d0:4c:1f:3f: 6d:b5:10:b7:1b:34:ee:a8:2c:75:48:3b:b9:53:cf:e4:21:2e: ab:67:27:bb:2a:a7:9f:02:88:67:bf:b4:55:6e:4b:4c:15:f7: f0:41:34:ed:5a:11:55:c2:f9:f0:1e:08:ea:ef:73:43:c0:ba: 30:c0:ca:1c:91:ba:0b:d3:aa:be:96:9f:2a:b6:a6:83:2e:e9: a3:83:1a:9f:2b:3f:32:11:9c:e1:5b:97:f3:90:b9:07:36:04: b9:92:61:f9:23:a6:f0:cc:03:b5:11:9a:2d:f3:be:c7:df:0b: 38:7a:ab:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyOUIxMTAvBgNVBAUTKDZBREU0RTFDNEUxQzA5QkYxNERGQUE0QzNENjAwRjQx OEUxN0U3MkUwHhcNMjUwNDE4MTQ1NDM0WhcNMjUwNDI1MTQ1NDM0WjAYMRYwFAYD VQQDEw02ODAyNjdhYS1hZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsFw8dBQve8h+xplZCktwcQ0W+ZiGLemXq/i+4Tr5dFus/jt+connJwFGPeD Bl1VxZ+B6nmF7AOvjVSOf2YxkyTnGAKtGWu/OkOOPpQ7lin5OpwndeD5bWXp9F5B TqFFQWEie6uT0ZyndwPGE5Img+CSwpvb86Y4CtE4pKU+H5izf9tL0vTNq3COgqly bgtNEtDsgaYl9CA2Y7YUNuNff+DLNuCPXh9SlPqmT0YAnOFwTitHlIrR/bd+RRX4 UMEmuUDNVT4zPnPBoW9nJPb9HaNJzBla5c7+YxipqU704q0V3egQAZEHMiCdWcn9 J9HkCJnl3ASseNe2CoWxq0aMOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbrP9Qi Q5sayhE70OAr5tPOKuqZMB8GA1UdIwQYMBaAFGreThxOHAm/FN+qTD1gD0GOF+cu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI5Qi9CNjAwNjNBQzFE OTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0NiOFUzNnBNUFdBUFFZNFg1 eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NU9IRTRjQ2I4VTM2cE1QV0FQUVk0WDV5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI5Qi9CNjAwNjNBQzFEOTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0Ni OFUzNnBNUFdBUFFZNFg1eTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXLoWwv7MbQwQQaWpahTwBBFNAaWPCCC/r2zuNpl+a5+jl8gDfJQf6 yV5MxnD+m9IQpK8tppp32eLZUfwzcYW3fpcJ/ai24c56kovKGZB5plhkskhW2WCT ape5q9zbZDzUqmqWhemhYXrjtamI5bxs/HEniPIKtlGKbXjx2EqS0wRG5hTtRrW6 6XUMXNBMHz9ttRC3GzTuqCx1SDu5U8/kIS6rZye7KqefAohnv7RVbktMFffwQTTt WhFVwvnwHgjq73NDwLowwMockboL06q+lp8qtqaDLumjgxqfKz8yEZzhW5fzkLkH NgS5kmH5I6bwzAO1EZot877H3ws4equG -----END CERTIFICATE-----Generated at Sat Apr 19 00:51:24 2025 by rpki-client