$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: Abw61DXSkxSdu+nUG+TLugyv3pT/sPZYQ1MZKz1G8wI= Subject key identifier: 7C:13:58:BF:8C:F9:45:55:B3:FA:74:5D:6E:C0:17:FA:93:8E:0E:3E Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 0149 Signing time: Sun 11 May 2025 03:18:43 +0000 Manifest this update: Sun 11 May 2025 03:18:42 +0000 Manifest next update: Sun 18 May 2025 03:18:42 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: ybc0VIEONEQCcivJi/o/1nzUwgCURnxm0kFUK6aRxqg=) 2: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: H1nmQizGEmHz5b1T7forLlMV8zzneRcv/1eW8nb3RPQ=) 3: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KnSSA1Qq59sJxgKVj3jP8KkbnpUbCwhj2IXQBg8sTYM=) 4: 9442231871C311EEB4110C83C4F9AE02.roa (hash: cPScC0gg9JYSO4uN11odfRIjDwaRFAK9tItwdJFOomM=) 5: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: NLAG2+hX7/iP2bhjkSZBj6P2IECcGb9YySRKnQ4sPC0=) 6: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: wQut+szNL5vwSeq5waVGRK6ZNGbvz3meY2xD3T/hUuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: May 11 03:18:42 2025 GMT Not After : May 18 03:18:42 2025 GMT Subject: CN=68201712-97ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:81:5b:f3:27:f9:e9:b5:5e:29:47:87:f6: 87:98:e1:4a:e2:e4:c4:76:b4:23:74:e0:d8:33:53: ba:3a:cf:dc:e4:3a:a5:e7:c2:92:60:b1:89:ac:15: 87:82:87:21:1f:ff:13:db:e0:4c:89:0b:7e:59:e1: d8:4b:94:7c:b2:b7:81:6f:56:56:67:53:b8:40:15: ea:ec:fe:fd:97:a9:b0:d4:d6:f7:ea:3c:ca:16:53: 00:fa:ae:45:3d:db:8d:8c:84:5e:e0:7f:d0:42:9e: 20:bc:0f:2f:d1:ef:21:c5:d3:ab:00:b8:ad:4c:f7: 63:08:13:ba:08:f2:f4:bd:e9:74:6b:26:bb:74:e8: ed:28:7c:ae:7d:57:94:ef:6f:33:98:1e:26:25:58: 06:95:93:1c:1c:34:53:28:02:4c:81:b4:b7:f7:67: c1:5d:ae:0c:46:0c:3b:10:57:1c:80:f6:43:3c:19: 91:69:8d:28:85:11:ab:f8:54:91:77:1d:62:e8:fa: 20:fb:bf:15:a4:3c:2c:87:6f:2b:64:f7:06:35:6a: 6d:71:6e:25:65:04:82:22:f4:46:0d:aa:36:e9:d9: 4e:75:07:25:79:84:be:1b:11:20:62:97:5a:4c:e1: dd:a7:60:75:f3:66:9e:8e:01:34:90:e4:8b:01:e3: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:13:58:BF:8C:F9:45:55:B3:FA:74:5D:6E:C0:17:FA:93:8E:0E:3E X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b5:4d:93:c5:0c:0b:5d:7b:35:9c:b2:37:33:da:65:24:44: bc:c6:bf:c2:d9:83:df:14:33:7b:dc:c3:d6:5c:75:6b:b9:98: 31:39:42:7f:5e:8e:d5:22:68:99:74:ff:69:5e:2f:34:32:db: db:7c:67:d7:81:3c:2d:37:95:e7:67:9e:fe:42:f5:40:94:e3: c8:0d:a9:35:b7:7e:f3:10:88:56:5a:e4:4c:8a:20:1f:ad:e0: 56:6f:c3:94:a5:b5:1c:c1:27:53:1e:92:4b:2b:3e:5a:33:05: 20:14:ba:5f:b5:02:56:ac:27:30:a6:18:d3:e6:1b:0a:57:56: cc:39:15:db:16:89:b9:d9:b6:13:51:b4:21:e9:91:27:d0:33: 5d:be:21:b3:90:d1:35:2e:0f:4f:5d:90:48:54:91:c9:cd:b4: fc:43:5c:d5:5b:ac:b7:40:72:06:da:52:fa:85:e4:a1:0a:29: 55:1a:21:b5:cf:89:01:87:06:2f:aa:6a:ce:e0:ac:b0:29:72: 34:54:0d:58:c9:84:e1:7d:45:0c:d9:bc:c3:c9:44:fd:34:4b: c4:3e:3c:a6:ae:6c:10:cc:c6:e7:32:1e:bd:b0:23:80:df:73: dd:77:d9:01:0c:6b:1f:74:12:44:3b:31:fb:1e:d0:e9:fd:c8: a6:dd:44:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjUwNTExMDMxODQyWhcNMjUwNTE4MDMxODQyWjAYMRYwFAYD VQQDEw02ODIwMTcxMi05N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40yBW/Mn+em1XilHh/aHmOFK4uTEdrQjdODYM1O6Os/c5Dql58KSYLGJrBWH gochH/8T2+BMiQt+WeHYS5R8sreBb1ZWZ1O4QBXq7P79l6mw1Nb36jzKFlMA+q5F PduNjIRe4H/QQp4gvA8v0e8hxdOrALitTPdjCBO6CPL0vel0aya7dOjtKHyufVeU 728zmB4mJVgGlZMcHDRTKAJMgbS392fBXa4MRgw7EFccgPZDPBmRaY0ohRGr+FSR dx1i6Pog+78VpDwsh28rZPcGNWptcW4lZQSCIvRGDao26dlOdQcleYS+GxEgYpda TOHdp2B182aejgE0kOSLAeNziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwTWL+M +UVVs/p0XW7AF/qTjg4+MB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAStU2TxQwLXXs1nLI3M9plJES8xr/C2YPfFDN73MPWXHVruZgxOUJ/ Xo7VImiZdP9pXi80MtvbfGfXgTwtN5XnZ57+QvVAlOPIDak1t37zEIhWWuRMiiAf reBWb8OUpbUcwSdTHpJLKz5aMwUgFLpftQJWrCcwphjT5hsKV1bMORXbFom52bYT UbQh6ZEn0DNdviGzkNE1Lg9PXZBIVJHJzbT8Q1zVW6y3QHIG2lL6heShCilVGiG1 z4kBhwYvqmrO4KywKXI0VA1YyYThfUUM2bzDyUT9NEvEPjymrmwQzMbnMh69sCOA 33Pdd9kBDGsfdBJEOzH7HtDp/cim3UTw -----END CERTIFICATE-----Generated at Sun May 11 15:31:05 2025 by rpki-client