$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: 75Xzfd43AVLcScMlYR5mH0uEqcY3GzakkTZgqyHP7yI= Subject key identifier: 8D:96:6F:6B:26:AA:37:55:E5:3D:3E:84:FC:E0:A5:7F:94:39:C1:D7 Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 07B1 Signing time: Fri 30 May 2025 21:25:41 +0000 Manifest this update: Fri 30 May 2025 21:25:41 +0000 Manifest next update: Fri 06 Jun 2025 21:25:41 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: h9OGMLcVbsmUcdma5AuZkhQC9Dh8ftmhyISUgyCRcjc=) 2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=) 3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: May 30 21:25:41 2025 GMT Not After : Jun 6 21:25:41 2025 GMT Subject: CN=683a2255-2b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:ad:73:32:7f:b4:1d:87:a7:31:dd:67:78: 57:ea:2e:9c:c8:c7:cd:6a:33:70:fb:79:d3:23:63: 67:74:77:86:4a:a6:54:0d:0a:04:20:59:ca:11:e6: 73:c0:60:00:f9:9a:37:e6:7a:fa:ef:da:42:1b:b8: 12:fc:43:d4:37:c2:ae:13:36:c2:75:2c:00:5e:ca: 5e:1d:ff:d5:19:e3:0e:30:ca:e1:64:b0:97:48:8d: d1:6a:5f:eb:8d:ca:58:a9:01:77:68:fa:c2:6f:df: 1b:b9:9a:95:8f:8a:24:24:1f:bd:a3:ce:43:b4:0e: 5c:ad:a6:57:24:0c:fd:41:d8:12:3a:c2:be:f7:dd: 64:c3:cd:6e:45:f4:a3:e8:fe:2e:3f:09:c7:e1:39: 75:1b:bc:dd:c8:97:6b:30:25:04:01:cc:c0:e1:87: 88:ab:36:37:71:8b:6b:47:2b:ba:a8:7c:7e:62:68: 50:81:9a:94:41:03:3d:21:52:d5:54:eb:94:16:7e: 2a:61:ec:41:8e:4f:fe:23:b1:6e:32:73:4a:13:1a: fa:22:81:97:d3:c8:3d:3c:a7:c3:06:b9:a1:2e:4e: 73:52:4c:bf:7e:c0:94:94:fe:f1:5b:a7:97:19:9a: 67:ea:02:94:ac:21:30:81:14:98:19:84:e1:44:e9: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:6F:6B:26:AA:37:55:E5:3D:3E:84:FC:E0:A5:7F:94:39:C1:D7 X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ec:aa:88:35:c0:88:55:5c:9b:01:0c:fe:0a:ee:df:83:ba: 7f:9b:86:e8:af:a1:e7:4b:05:47:72:61:87:19:e0:1c:c5:36: 1c:71:f7:27:9a:3c:4a:af:27:11:e3:29:6d:69:8f:2d:20:9f: 87:49:d0:b9:c6:ff:06:05:90:71:b0:23:72:5a:ac:fe:35:d9: 23:23:d8:67:3c:c5:92:d8:40:8c:d4:7b:56:3b:fc:6a:cb:5b: 17:e6:2f:6c:6c:8a:00:56:d0:70:6b:6a:b9:02:69:69:e9:fc: c3:26:51:c7:d4:d5:b7:d5:b9:b4:70:df:94:3c:b5:b1:df:ab: 20:df:ef:3a:7b:6c:61:0f:53:92:d8:0d:41:06:71:ea:b8:3e: d6:82:e9:17:21:af:c6:e1:46:06:ff:35:9d:47:c0:74:ee:47: ca:75:a9:aa:45:f7:3b:b5:eb:da:29:d8:1b:f8:cb:94:7d:7e: 32:f5:7a:6a:df:6a:76:4e:31:1e:ef:8a:35:88:58:c9:07:5a: 1a:db:68:a7:11:30:d9:0e:82:0b:2d:3c:50:cf:8e:64:71:dd: b2:9e:6a:c5:ae:d5:4f:f7:86:ce:07:9a:c8:1c:07:7a:e0:81: 7f:47:b6:49:7b:1f:b5:ee:05:45:1b:10:fe:83:62:d1:df:e6: 14:84:8d:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjUwNTMwMjEyNTQxWhcNMjUwNjA2MjEyNTQxWjAYMRYwFAYD VQQDEw02ODNhMjI1NS0yYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSytczJ/tB2HpzHdZ3hX6i6cyMfNajNw+3nTI2NndHeGSqZUDQoEIFnKEeZz wGAA+Zo35nr679pCG7gS/EPUN8KuEzbCdSwAXspeHf/VGeMOMMrhZLCXSI3Ral/r jcpYqQF3aPrCb98buZqVj4okJB+9o85DtA5craZXJAz9QdgSOsK+991kw81uRfSj 6P4uPwnH4Tl1G7zdyJdrMCUEAczA4YeIqzY3cYtrRyu6qHx+YmhQgZqUQQM9IVLV VOuUFn4qYexBjk/+I7FuMnNKExr6IoGX08g9PKfDBrmhLk5zUky/fsCUlP7xW6eX GZpn6gKUrCEwgRSYGYThROn1swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2Wb2sm qjdV5T0+hPzgpX+UOcHXMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC67KqINcCIVVybAQz+Cu7fg7p/m4bor6HnSwVHcmGHGeAcxTYccfcn mjxKrycR4yltaY8tIJ+HSdC5xv8GBZBxsCNyWqz+NdkjI9hnPMWS2ECM1HtWO/xq y1sX5i9sbIoAVtBwa2q5Amlp6fzDJlHH1NW31bm0cN+UPLWx36sg3+86e2xhD1OS 2A1BBnHquD7WgukXIa/G4UYG/zWdR8B07kfKdamqRfc7tevaKdgb+MuUfX4y9Xpq 32p2TjEe74o1iFjJB1oa22inETDZDoILLTxQz45kcd2ynmrFrtVP94bOB5rIHAd6 4IF/R7ZJex+17gVFGxD+g2LR3+YUhI0Q -----END CERTIFICATE-----Generated at Sat May 31 16:55:06 2025 by rpki-client