$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: XxGHlxzhSz/uo7/BAb2In3HBRTM0bhwU0RSE2dAaKDg= Subject key identifier: 54:36:0E:C3:FD:1E:20:B5:98:A1:A7:0A:73:D6:11:BC:19:E4:D1:0B Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 1162 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 1158 Signing time: Mon 14 Apr 2025 14:47:34 +0000 Manifest this update: Mon 14 Apr 2025 14:47:34 +0000 Manifest next update: Mon 21 Apr 2025 14:47:34 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: KSnhNfJqzgSaoamdq9ZP2A97bNA5dtYi+S305+sz/MQ=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: XN60w0eRqVpxeIfX7b6c8hnme3sk6Z9ebx38NO7BFYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 14:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4450 (0x1162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Apr 14 14:47:34 2025 GMT Not After : Apr 21 14:47:34 2025 GMT Subject: CN=67fd2006-34ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:70:79:63:a8:9e:5d:98:c5:eb:3a:21:df: 96:4a:89:17:23:69:bb:69:63:ec:6b:4e:77:10:bb: b4:a4:b9:d4:a3:a8:b4:bc:30:5b:0c:3e:29:f2:0c: b5:4f:0b:bf:3a:1a:c4:5f:e7:ec:ad:f4:58:07:32: 90:f5:2e:0e:e3:cf:86:e1:8a:53:47:5c:08:ac:4b: 28:e9:5f:e6:7f:a0:89:d5:9d:cb:1b:2d:1f:75:1b: 9b:84:b0:f4:a0:5d:ab:9d:c2:dd:43:e7:f5:a3:b1: a7:4f:e3:41:9c:c9:9f:71:d7:44:ce:83:2c:98:57: 9b:26:40:07:b0:54:ee:c2:b3:bd:f5:39:f4:17:47: bb:a8:2a:fe:f5:1e:fd:ef:d5:6e:0f:a3:a5:e8:a6: 3e:8b:30:33:8b:cc:a9:24:ce:8f:e2:a5:d8:a0:0f: 91:f0:4a:79:0a:c8:db:f0:6f:de:fa:6b:c7:86:7a: 04:84:b4:50:aa:c0:43:b9:77:0d:be:2d:79:6a:28: 4a:1e:41:da:2a:f9:b8:3b:ea:4b:60:ca:f4:9f:fa: ad:b5:60:20:65:c1:cb:de:63:19:d5:44:9d:88:83: d7:88:90:90:e8:e5:27:64:18:7d:59:e3:63:99:49: eb:37:17:48:bc:4c:84:8b:60:9c:4c:a7:b0:12:39: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:36:0E:C3:FD:1E:20:B5:98:A1:A7:0A:73:D6:11:BC:19:E4:D1:0B X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:30:79:97:64:78:e7:34:4d:6d:56:26:c4:ab:3f:b1:2c:62: e3:ea:4f:34:50:f4:c4:ce:43:b1:f1:ec:32:de:0d:85:3e:f3: 0e:22:11:1c:7c:3f:fd:b3:13:77:9f:28:0f:f7:0b:3a:7d:27: e9:1e:89:f8:55:6e:a0:53:42:8a:70:ea:67:4f:f2:d3:e1:9a: b3:e1:a0:a4:98:f2:37:95:53:ac:64:bc:cb:8a:4e:dd:60:31: 6b:26:9a:cd:c9:07:5e:b6:90:07:e7:68:27:58:77:69:db:f5: 9f:ff:25:7c:84:c8:1f:86:24:d5:cf:e1:a9:6d:d1:1b:da:e5: 1e:72:ca:48:36:77:13:e4:7d:d2:47:e6:7b:38:aa:f6:06:36: 16:8b:3b:3a:01:48:e3:f9:99:7b:5c:4c:9b:8a:e2:79:7a:f7: 9c:77:29:c3:c0:ed:cf:4a:28:74:e9:17:49:69:fb:f6:33:46: 9c:5f:f1:9a:84:0e:62:0e:2d:aa:6f:1a:9d:5e:af:7d:5f:44: 4f:28:f5:26:39:e9:41:bb:04:5a:bc:ba:c2:db:45:ad:c0:3c: e9:61:14:cb:f3:4e:1c:a7:09:e2:b2:e7:c7:c0:0b:1e:83:2f: ff:eb:7e:c0:70:56:8d:98:b8:d4:39:65:cc:6d:c5:35:25:5d: d6:4e:00:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUwNDE0MTQ0NzM0WhcNMjUwNDIxMTQ0NzM0WjAYMRYwFAYD VQQDEw02N2ZkMjAwNi0zNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx49weWOonl2Yxes6Id+WSokXI2m7aWPsa053ELu0pLnUo6i0vDBbDD4p8gy1 Twu/OhrEX+fsrfRYBzKQ9S4O48+G4YpTR1wIrEso6V/mf6CJ1Z3LGy0fdRubhLD0 oF2rncLdQ+f1o7GnT+NBnMmfcddEzoMsmFebJkAHsFTuwrO99Tn0F0e7qCr+9R79 79VuD6Ol6KY+izAzi8ypJM6P4qXYoA+R8Ep5Csjb8G/e+mvHhnoEhLRQqsBDuXcN vi15aihKHkHaKvm4O+pLYMr0n/qttWAgZcHL3mMZ1USdiIPXiJCQ6OUnZBh9WeNj mUnrNxdIvEyEi2CcTKewEjn9SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ2DsP9 HiC1mKGnCnPWEbwZ5NELMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhMHmXZHjnNE1tVibEqz+xLGLj6k80UPTEzkOx8ewy3g2FPvMOIhEc fD/9sxN3nygP9ws6fSfpHon4VW6gU0KKcOpnT/LT4Zqz4aCkmPI3lVOsZLzLik7d YDFrJprNyQdetpAH52gnWHdp2/Wf/yV8hMgfhiTVz+GpbdEb2uUecspINncT5H3S R+Z7OKr2BjYWizs6AUjj+Zl7XEybiuJ5evecdynDwO3PSih06RdJafv2M0acX/Ga hA5iDi2qbxqdXq99X0RPKPUmOelBuwRavLrC20WtwDzpYRTL804cpwnisufHwAse gy//637AcFaNmLjUOWXMbcU1JV3WTgD/ -----END CERTIFICATE-----Generated at Tue Apr 15 16:33:53 2025 by rpki-client