$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: B6CvfvjNv/9qIX/+cxs5kDNcRdlsbaIvvGENn2MPzGc= Subject key identifier: 41:A6:9E:18:01:3B:BD:D5:B2:1D:37:6F:E7:52:6B:E1:08:79:D2:C5 Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 07A8 Signing time: Sat 10 May 2025 20:53:06 +0000 Manifest this update: Sat 10 May 2025 20:53:05 +0000 Manifest next update: Sat 17 May 2025 20:53:05 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: 65K8V6B5R8fXdjkFOyGoO9Yq4cTliEyzFMzLEvc/dwQ=) 2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=) 3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: May 10 20:53:05 2025 GMT Not After : May 17 20:53:05 2025 GMT Subject: CN=681fbcb2-3768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d7:cd:1c:69:d2:55:54:f4:05:48:a8:77:58: 78:a0:b2:92:5f:fe:ab:d4:b0:fa:df:be:01:98:64: a1:9c:42:4e:09:79:aa:a0:24:18:59:d7:01:2a:78: cf:4c:60:5f:c4:c2:35:f4:56:3c:c9:de:82:a2:9f: 75:de:9c:e2:b4:95:37:50:1f:2d:a5:42:a6:c5:23: 67:b4:b4:a7:76:e6:53:4e:3b:27:ac:e0:54:c9:85: 3c:8f:b2:2e:6a:3a:99:10:ef:ad:08:2e:b1:c1:4d: b9:31:5f:0e:4a:06:96:b7:ce:81:68:04:f4:a9:55: ca:47:31:16:58:5a:a0:fa:cf:9d:8b:a8:56:b7:d1: 4b:10:93:a5:a6:51:a3:8d:03:da:e7:25:57:8e:43: 47:3f:a7:93:8c:c9:13:3f:f9:98:21:bf:a3:1d:65: ec:3c:25:d4:07:53:69:7f:67:00:31:78:44:52:9b: 0e:34:af:7a:5f:1a:55:86:9f:5a:ee:fc:36:b9:30: c3:9c:88:5f:90:0b:83:fa:c6:be:3e:9a:dd:c4:1e: a8:aa:68:1a:81:d0:4c:e6:62:c3:40:ea:26:a2:32: aa:c6:2e:d3:ef:a2:03:61:76:8a:7e:d4:fb:e3:f5: 71:3f:b8:f8:61:5a:a3:cd:a2:b4:4e:d3:94:d1:7f: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A6:9E:18:01:3B:BD:D5:B2:1D:37:6F:E7:52:6B:E1:08:79:D2:C5 X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:6f:9a:70:4b:bc:3c:2d:fa:8d:a8:e4:ff:91:53:a4:5f:6b: 06:a1:73:e2:1f:25:80:80:d5:8e:fe:a6:b8:2c:f5:fb:d4:c9: 86:bb:98:56:c4:af:53:dd:23:e2:ab:09:55:2c:83:0d:39:94: ea:27:7c:45:b7:5d:f8:95:46:fe:42:3b:83:14:8d:38:58:c0: 03:56:5d:ca:b3:0f:a2:97:fe:98:d0:97:3d:95:e9:3c:d2:41: a2:56:97:45:0d:3a:bf:cf:56:a5:ab:05:4c:f0:b8:97:82:5d: 77:f3:8c:e3:e9:a9:3f:40:db:fa:25:50:14:81:9b:25:60:de: cb:78:2f:0e:85:5b:7e:c8:a0:80:78:5d:a4:2b:71:b3:b4:72: b4:a0:f9:53:99:61:b3:72:e9:7d:b7:f9:62:03:d0:40:a9:64: c9:c7:b2:cd:90:14:8f:a5:dc:57:e3:d9:73:63:18:22:26:ef: 19:7b:db:90:a6:b6:e8:1e:ef:35:c7:fd:bf:42:cd:3a:5c:c1: 13:24:64:c1:75:85:71:97:3a:cc:1c:2c:3b:2a:ff:15:23:ac: 06:cf:78:04:90:d8:31:01:b2:5a:67:08:b7:51:62:b9:05:f1: 17:81:53:fd:e2:c2:f0:b1:e3:b3:f9:0a:78:ce:da:b9:0f:c9: 62:88:a4:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjUwNTEwMjA1MzA1WhcNMjUwNTE3MjA1MzA1WjAYMRYwFAYD VQQDEw02ODFmYmNiMi0zNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NfNHGnSVVT0BUiod1h4oLKSX/6r1LD6374BmGShnEJOCXmqoCQYWdcBKnjP TGBfxMI19FY8yd6Cop913pzitJU3UB8tpUKmxSNntLSnduZTTjsnrOBUyYU8j7Iu ajqZEO+tCC6xwU25MV8OSgaWt86BaAT0qVXKRzEWWFqg+s+di6hWt9FLEJOlplGj jQPa5yVXjkNHP6eTjMkTP/mYIb+jHWXsPCXUB1Npf2cAMXhEUpsONK96XxpVhp9a 7vw2uTDDnIhfkAuD+sa+PprdxB6oqmgagdBM5mLDQOomojKqxi7T76IDYXaKftT7 4/VxP7j4YVqjzaK0TtOU0X94TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGmnhgB O73Vsh03b+dSa+EIedLFMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2b5pwS7w8LfqNqOT/kVOkX2sGoXPiHyWAgNWO/qa4LPX71MmGu5hW xK9T3SPiqwlVLIMNOZTqJ3xFt134lUb+QjuDFI04WMADVl3Ksw+il/6Y0Jc9lek8 0kGiVpdFDTq/z1alqwVM8LiXgl1384zj6ak/QNv6JVAUgZslYN7LeC8OhVt+yKCA eF2kK3GztHK0oPlTmWGzcul9t/liA9BAqWTJx7LNkBSPpdxX49lzYxgiJu8Ze9uQ prboHu81x/2/Qs06XMETJGTBdYVxlzrMHCw7Kv8VI6wGz3gEkNgxAbJaZwi3UWK5 BfEXgVP94sLwseOz+Qp4ztq5D8liiKQx -----END CERTIFICATE-----Generated at Mon May 12 12:49:40 2025 by rpki-client