$ rpki-client -vvf rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft File: a4h-elixD-3igEteKeziwpnCf6E.mft (raw, json) Hash identifier: PAi7NUvqZoasqQ9nshNeOGU1ID+EehYJlzalAVZKk/Y= Subject key identifier: 6B:B7:D3:FC:E9:82:FE:E6:67:98:CD:6A:C5:BE:E9:A0:40:AA:12:4D Authority key identifier: 6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1 Certificate issuer: /CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft Manifest number: 0151 Signing time: Sat 31 May 2025 03:49:19 +0000 Manifest this update: Sat 31 May 2025 03:49:18 +0000 Manifest next update: Sat 07 Jun 2025 03:49:18 +0000 Files and hashes: 1: a4h-elixD-3igEteKeziwpnCf6E.crl (hash: e1O0k5GX8Doln1MLMrzATdZRNqeurArFtUeqLV95M/Y=) 2: 26D3EB963B1211EE8ED76E25C4F9AE02.roa (hash: qv3tAt9BON7buTRTVhuMsm15F4b64BUNH1NHpvJGTQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CBB2, serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1 Validity Not Before: May 31 03:49:18 2025 GMT Not After : Jun 7 03:49:18 2025 GMT Subject: CN=683a7c3e-3232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:d9:f5:e3:d0:ab:7e:1e:b2:d9:d0:f3:fd: da:59:b0:18:4f:d7:aa:7d:10:09:f1:46:45:78:9a: e0:d4:d0:23:25:b3:8a:d5:42:cf:e6:29:9f:f0:1a: 11:70:a5:e2:4c:16:df:cf:93:97:81:7d:69:1f:4a: 8b:d1:85:6b:44:cf:5a:d6:b9:a7:57:86:98:13:98: 4e:fa:2c:5a:e3:f6:eb:35:89:20:01:3f:09:14:c0: 7e:2a:10:37:e9:3b:66:58:92:99:11:e5:df:ea:08: be:37:83:4b:91:58:eb:5d:38:f3:42:f2:7c:aa:ae: 29:4c:82:80:a7:3c:85:41:52:40:e6:eb:6c:65:da: 41:fc:94:2a:89:ae:f1:7b:8e:16:db:09:29:97:c4: 87:85:32:65:9c:35:0b:0d:4c:ee:fb:5a:96:02:5c: dd:82:0b:94:a6:6f:fb:03:65:9e:c7:0f:a5:fa:57: b0:84:3c:77:c5:96:a5:a8:89:7b:f0:ac:2a:27:b0: 3f:76:cc:47:9f:71:94:bd:85:e5:99:71:57:54:40: dc:85:12:5d:51:d8:b0:a4:83:ac:1c:99:c3:5c:5b: 42:a2:c3:e3:c2:d2:b6:d8:91:2f:1a:3d:74:45:ca: 5b:56:a4:cf:17:16:14:ff:e6:2f:d9:03:fa:22:71: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B7:D3:FC:E9:82:FE:E6:67:98:CD:6A:C5:BE:E9:A0:40:AA:12:4D X509v3 Authority Key Identifier: keyid:6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ae:8b:04:38:b0:b8:dd:71:7a:87:ed:59:b2:e6:6f:1c:85: b5:aa:6f:a6:ec:46:55:3b:5e:ef:72:b4:c2:21:ca:81:2e:60: ef:0b:c8:26:32:ea:35:61:c7:43:f4:8a:ff:60:3f:65:19:5c: ea:9e:92:e8:a9:dd:28:49:e9:45:30:65:b2:b7:d5:7e:81:5e: ca:86:2a:51:19:33:2e:5c:d3:cc:a1:be:89:27:0a:74:19:19: 9f:41:ce:84:01:92:11:c0:4d:13:ca:ea:fd:df:27:6c:83:d4: f9:f4:f6:f8:c9:55:60:c2:41:6f:78:67:98:50:fc:55:1a:5d: 2d:8a:75:ba:65:4a:77:d5:2d:81:ac:fc:40:1c:41:98:54:d4: 0e:ec:84:75:77:a9:8c:28:62:ec:9e:ed:e6:cc:76:f6:c5:00: ec:91:97:17:f3:3b:14:cb:f3:51:fb:7e:23:95:fe:e3:cc:45: 00:91:29:59:38:88:a1:e1:42:0f:da:3f:ef:ad:e9:ee:6c:8b: b0:4a:03:03:82:ed:f8:eb:5e:0d:ae:9c:d9:36:dc:69:f0:75: 49:6d:67:58:dc:db:87:e4:61:fb:48:75:9c:5b:4a:43:e7:4a: 86:e9:fc:52:61:64:8a:c1:83:d1:b0:d3:c1:43:ae:01:39:d1: 59:c5:ee:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCQjIxMTAvBgNVBAUTKDZCODg3RTdBNThCMTBGRURFMjgwNEI1RTI5RUNFMkMy OTlDMjdGQTEwHhcNMjUwNTMxMDM0OTE4WhcNMjUwNjA3MDM0OTE4WjAYMRYwFAYD VQQDEw02ODNhN2MzZS0zMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBDZ9ePQq34estnQ8/3aWbAYT9eqfRAJ8UZFeJrg1NAjJbOK1ULP5imf8BoR cKXiTBbfz5OXgX1pH0qL0YVrRM9a1rmnV4aYE5hO+ixa4/brNYkgAT8JFMB+KhA3 6TtmWJKZEeXf6gi+N4NLkVjrXTjzQvJ8qq4pTIKApzyFQVJA5utsZdpB/JQqia7x e44W2wkpl8SHhTJlnDULDUzu+1qWAlzdgguUpm/7A2Wexw+l+lewhDx3xZalqIl7 8KwqJ7A/dsxHn3GUvYXlmXFXVEDchRJdUdiwpIOsHJnDXFtCosPjwtK22JEvGj10 RcpbVqTPFxYU/+Yv2QP6InHuKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGu30/zp gv7mZ5jNasW+6aBAqhJNMB8GA1UdIwQYMBaAFGuIfnpYsQ/t4oBLXins4sKZwn+h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0JCMi9CNDAzMjIzMDNC MTExMUVFOTYxOUJCODBDNEY5QUUwMi9hNGgtZWxpeEQtM2lnRXRlS2V6aXdwbkNm NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0aC1lbGl4RC0zaWdFdGVLZXppd3BuQ2Y2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0JCMi9CNDAzMjIzMDNCMTExMUVFOTYxOUJCODBDNEY5QUUwMi9hNGgtZWxpeEQt M2lnRXRlS2V6aXdwbkNmNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCArosEOLC43XF6h+1ZsuZvHIW1qm+m7EZVO17vcrTCIcqBLmDvC8gm Muo1YcdD9Ir/YD9lGVzqnpLoqd0oSelFMGWyt9V+gV7KhipRGTMuXNPMob6JJwp0 GRmfQc6EAZIRwE0Tyur93ydsg9T59Pb4yVVgwkFveGeYUPxVGl0tinW6ZUp31S2B rPxAHEGYVNQO7IR1d6mMKGLsnu3mzHb2xQDskZcX8zsUy/NR+34jlf7jzEUAkSlZ OIih4UIP2j/vrenubIuwSgMDgu34614NrpzZNtxp8HVJbWdY3NuH5GH7SHWcW0pD 50qG6fxSYWSKwYPRsNPBQ64BOdFZxe43 -----END CERTIFICATE-----Generated at Sat May 31 17:17:32 2025 by rpki-client