$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: qTv8XMIYXJOvIyWihSCVtJj2hSHeXnAoFfSxiNgW4+s= Subject key identifier: 5C:E0:A0:AF:1E:68:26:A8:97:FC:20:9F:36:03:77:B6:8C:E0:09:10 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0C21 Signing time: Fri 30 May 2025 18:49:52 +0000 Manifest this update: Fri 30 May 2025 18:49:51 +0000 Manifest next update: Fri 06 Jun 2025 18:49:51 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: HoYfyBm6pAOsA/sg48vjkfn4zRIjMQIgFS9ME7ajuYM=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: pTtLtXiP6+lMZs1IbS5QyauPkH+CLmMvProexjSKJSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: May 30 18:49:51 2025 GMT Not After : Jun 6 18:49:51 2025 GMT Subject: CN=6839fdd0-e03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:9e:38:d8:6f:7e:10:34:59:fa:3f:e5:09: db:04:9e:9f:4b:36:dd:09:b4:81:f9:0a:31:5f:fc: e7:70:07:55:38:72:fc:b4:ac:ca:26:59:e7:6c:74: c9:f5:4c:66:a2:b6:a8:2c:90:97:8d:1a:9c:96:ee: 1a:05:cb:af:53:90:a4:4d:1d:6c:f4:32:8b:c2:d0: fd:55:c0:ca:89:95:1f:fe:b5:96:bb:af:6c:a2:11: 3a:75:25:aa:0d:80:a4:e5:2d:1e:da:9d:25:6d:70: ee:87:9f:25:ec:35:c8:46:0c:96:39:bf:be:c8:90: 29:32:cc:30:79:80:59:0a:33:ad:28:26:49:f6:b6: da:c3:76:ac:49:86:c0:1d:94:7b:c3:d3:ed:3b:a7: 9a:4c:05:a6:0e:09:ea:3c:e6:b1:20:62:62:31:89: f3:1e:8e:f8:56:de:4b:83:b3:09:52:3d:79:1c:6a: 1c:11:36:5a:c8:85:41:2b:9a:b0:75:7c:29:49:36: 0e:0b:66:c3:cf:ac:8e:c5:ce:fa:6e:eb:f1:c8:4c: 5b:81:ee:8f:e4:58:ac:5e:4e:fe:8c:5f:9a:f9:65: 1e:c6:4e:86:02:c1:74:b8:39:ea:0f:50:be:d0:2d: a8:c6:60:59:7f:a1:f1:a5:0b:6e:cb:03:39:b6:50: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E0:A0:AF:1E:68:26:A8:97:FC:20:9F:36:03:77:B6:8C:E0:09:10 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9b:78:a4:aa:90:fd:a6:df:fb:93:95:86:f5:48:f5:84:c1: 8f:a9:34:d6:06:88:76:f5:18:66:08:dc:10:5e:7e:fe:2b:df: 9e:2d:28:d9:e1:a1:79:7d:fb:42:d5:6b:a3:18:6f:46:e7:e9: ff:0b:16:21:7a:a9:da:ec:3a:f3:75:81:76:f8:df:10:56:4c: bf:0b:53:fd:de:18:80:dd:4e:40:66:6e:f7:d2:5a:a1:2d:9b: ff:7e:4a:92:50:72:8d:3d:fd:66:21:5d:2e:4b:0c:5f:0a:d3: e3:4f:36:c8:90:5a:82:cb:6e:3a:d9:9f:b7:bb:fe:16:fb:e6: 36:4b:5e:b3:f4:16:2a:58:a0:39:cd:21:62:50:d2:63:da:ec: 94:75:2e:36:19:dd:ce:9b:65:32:c3:58:e2:f7:17:0f:a9:cb: f8:d6:72:0e:61:69:1e:87:8d:fe:3d:6f:7f:85:b3:0d:13:aa: b0:fe:26:ce:c7:ea:6f:57:74:cd:0c:a9:a5:9e:cf:86:73:09: 9c:40:ff:c4:85:f6:89:35:03:7a:31:5b:12:40:69:9f:07:1f: ed:2d:29:dd:c7:00:53:e7:fc:1a:1e:cb:dc:3c:91:1b:50:2c: ad:7b:dc:e8:d0:2e:94:90:49:8f:aa:02:3e:df:cc:55:9c:3f: 2a:b9:d0:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjUwNTMwMTg0OTUxWhcNMjUwNjA2MTg0OTUxWjAYMRYwFAYD VQQDEw02ODM5ZmRkMC1lMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoKeONhvfhA0Wfo/5QnbBJ6fSzbdCbSB+QoxX/zncAdVOHL8tKzKJlnnbHTJ 9UxmoraoLJCXjRqclu4aBcuvU5CkTR1s9DKLwtD9VcDKiZUf/rWWu69sohE6dSWq DYCk5S0e2p0lbXDuh58l7DXIRgyWOb++yJApMswweYBZCjOtKCZJ9rbaw3asSYbA HZR7w9PtO6eaTAWmDgnqPOaxIGJiMYnzHo74Vt5Lg7MJUj15HGocETZayIVBK5qw dXwpSTYOC2bDz6yOxc76buvxyExbge6P5FisXk7+jF+a+WUexk6GAsF0uDnqD1C+ 0C2oxmBZf6HxpQtuywM5tlAeFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzgoK8e aCaol/wgnzYDd7aM4AkQMB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnm3ikqpD9pt/7k5WG9Uj1hMGPqTTWBoh29RhmCNwQXn7+K9+eLSjZ 4aF5fftC1WujGG9G5+n/CxYheqna7DrzdYF2+N8QVky/C1P93hiA3U5AZm730lqh LZv/fkqSUHKNPf1mIV0uSwxfCtPjTzbIkFqCy2462Z+3u/4W++Y2S16z9BYqWKA5 zSFiUNJj2uyUdS42Gd3Om2Uyw1ji9xcPqcv41nIOYWkeh43+PW9/hbMNE6qw/ibO x+pvV3TNDKmlns+GcwmcQP/EhfaJNQN6MVsSQGmfBx/tLSndxwBT5/waHsvcPJEb UCyte9zo0C6UkEmPqgI+38xVnD8qudCz -----END CERTIFICATE-----Generated at Sat May 31 17:36:07 2025 by rpki-client