$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: y+1Z+rm9gItpaHEbB3xiyVFESu8TmUVeWQHJAS2lBME= Subject key identifier: D3:6D:BB:CA:8C:25:E4:77:1C:59:C8:C3:FE:C0:96:42:2B:6B:78:C0 Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: C4 Signing time: Sat 31 May 2025 05:23:20 +0000 Manifest this update: Sat 31 May 2025 05:23:19 +0000 Manifest next update: Sat 07 Jun 2025 05:23:19 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: h9uDQTqyfIUEOqnOW89oW23/fEQz22TXEQAJ/2GdHks=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: wwGZpT48wP330+bWP5HvFyf3d6u+Sna23wh8+O18ssw=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: kAoCwtSL8DYNhEnCxiYeyq+03pY+E8NsD8+lYLcvbO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: May 31 05:23:19 2025 GMT Not After : Jun 7 05:23:19 2025 GMT Subject: CN=683a9248-6587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:1b:7e:67:c9:08:75:e8:3e:e3:d9:46:0f: b6:c8:b8:2c:00:b2:4d:c6:4d:d8:a6:68:0c:16:04: 74:51:4b:1c:4b:66:cc:0c:ae:7f:00:ba:e6:9f:a9: 73:20:ea:70:82:52:1b:b7:99:8c:b7:e2:e9:86:fc: 7d:ad:c5:b2:3e:04:42:b7:8f:64:3f:01:c3:5f:b7: 8d:44:40:81:9d:c4:e0:ab:f9:88:3c:5a:1b:25:4f: b2:a3:b4:e7:99:ff:6e:bd:94:a9:a8:62:eb:db:e2: cf:48:85:76:2d:25:c2:34:ed:8d:7e:08:26:cf:69: 4d:53:df:ac:d3:44:a4:aa:48:82:ff:79:b5:6e:78: 3c:bf:04:e9:d0:00:0b:e4:0e:ad:bc:7a:6d:54:78: fa:cc:c7:e8:d7:3a:8f:8e:a0:5b:49:84:4f:37:9e: 20:80:01:c3:1b:2c:61:dd:43:8d:03:d6:b9:9d:b7: fa:6c:e1:1a:71:20:44:1a:c6:4d:8c:4b:08:c2:92: 3b:49:60:53:54:6c:7f:8f:b1:5b:0a:7a:53:71:0e: 42:54:22:0d:18:b9:15:21:ca:dc:dd:7b:58:e6:80: ea:b1:28:a3:15:71:b0:dd:6c:b8:fc:b8:93:3e:a6: 51:3a:29:05:15:b6:85:dc:5d:4e:c3:2b:9c:62:24: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6D:BB:CA:8C:25:E4:77:1C:59:C8:C3:FE:C0:96:42:2B:6B:78:C0 X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:82:23:65:b2:38:70:71:fe:f7:4c:f9:85:53:82:30:bc:bf: eb:1f:41:69:ab:85:18:43:27:72:d3:81:29:7c:49:1a:20:e2: 09:04:3b:4b:a4:29:06:bd:f7:e0:41:9a:d6:31:a1:3f:e1:b4: be:ea:ca:a1:03:65:f9:73:dc:f0:a2:04:a0:65:ca:c0:50:6b: cf:4e:7f:a1:8c:73:b8:98:71:47:20:7d:00:06:dc:e4:f2:0a: 67:31:b2:d1:ec:89:00:3a:3b:d3:70:d9:a4:6d:df:ac:e4:dd: c2:4e:e3:c9:63:d2:db:62:9a:af:31:50:aa:6d:00:81:90:d1: c2:8b:60:bc:ba:1f:2b:3b:21:66:74:2f:96:e1:ce:c9:3b:3d: dc:0a:57:25:1c:80:72:17:da:e4:f8:fd:10:d8:5d:b3:ba:d7: 07:8f:a3:6f:7a:e1:87:a4:00:58:e0:48:bb:07:6c:04:54:64: cf:27:fe:a9:5c:f3:dc:b0:c5:0d:9e:58:72:8e:d5:ac:0e:d9: 9f:08:96:cd:02:b6:61:43:0b:72:2b:b5:1e:0a:1a:ef:e7:25: ef:d2:e6:71:43:45:80:bb:4f:21:d6:79:d5:0c:12:57:21:8c: 4d:94:4e:c0:e5:98:f7:aa:aa:25:2b:6c:0a:df:9a:b9:31:dc: 88:25:8d:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI2RkIxMTAvBgNVBAUTKEFEMjM0RTNGMUVCQkFEQUQwMTlGRTA5QUZGRjcwRTgw NzVBRkRFMTcwHhcNMjUwNTMxMDUyMzE5WhcNMjUwNjA3MDUyMzE5WjAYMRYwFAYD VQQDEw02ODNhOTI0OC02NTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6kbfmfJCHXoPuPZRg+2yLgsALJNxk3YpmgMFgR0UUscS2bMDK5/ALrmn6lz IOpwglIbt5mMt+Lphvx9rcWyPgRCt49kPwHDX7eNRECBncTgq/mIPFobJU+yo7Tn mf9uvZSpqGLr2+LPSIV2LSXCNO2Nfggmz2lNU9+s00SkqkiC/3m1bng8vwTp0AAL 5A6tvHptVHj6zMfo1zqPjqBbSYRPN54ggAHDGyxh3UONA9a5nbf6bOEacSBEGsZN jEsIwpI7SWBTVGx/j7FbCnpTcQ5CVCINGLkVIcrc3XtY5oDqsSijFXGw3Wy4/LiT PqZROikFFbaF3F1OwyucYiRJ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNtu8qM JeR3HFnIw/7AlkIra3jAMB8GA1UdIwQYMBaAFK0jTj8eu62tAZ/gmv/3DoB1r94X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjZGQi9EOUNDOUVERTEx RjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3JhMEJuLUNhX19jT2dIV3Yz aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjZGQi9EOUNDOUVERTExRjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3Jh MEJuLUNhX19jT2dIV3YzaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALgiNlsjhwcf73TPmFU4IwvL/rH0Fpq4UYQydy04EpfEkaIOIJBDtL pCkGvffgQZrWMaE/4bS+6sqhA2X5c9zwogSgZcrAUGvPTn+hjHO4mHFHIH0ABtzk 8gpnMbLR7IkAOjvTcNmkbd+s5N3CTuPJY9LbYpqvMVCqbQCBkNHCi2C8uh8rOyFm dC+W4c7JOz3cClclHIByF9rk+P0Q2F2zutcHj6NveuGHpABY4Ei7B2wEVGTPJ/6p XPPcsMUNnlhyjtWsDtmfCJbNArZhQwtyK7UeChrv5yXv0uZxQ0WAu08h1nnVDBJX IYxNlE7A5Zj3qqolK2wK35q5MdyIJY2i -----END CERTIFICATE-----Generated at Sat May 31 16:35:49 2025 by rpki-client