$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: dhFGzJUq1Q8cpTh1qNKZkdWEiEkf5JE/YWSOzyux7qE= Subject key identifier: E1:8F:B2:47:11:5A:BB:1D:7B:8D:24:35:3C:86:21:B0:AA:29:30:51 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B36 Signing time: Mon 12 May 2025 19:01:08 +0000 Manifest this update: Mon 12 May 2025 19:01:07 +0000 Manifest next update: Mon 19 May 2025 19:01:07 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: ilwJVRkoxODLjbdIOkLU4yQwxvLossIu+igW10wrjv4=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: May 12 19:01:07 2025 GMT Not After : May 19 19:01:07 2025 GMT Subject: CN=68224574-8b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:7c:70:22:eb:01:00:8f:0a:bc:6c:37:c3: 29:1b:4c:1f:33:40:78:f6:a7:c5:3c:d1:19:f4:8e: 5a:3e:2a:13:6f:a8:b5:6a:b7:96:27:96:b8:08:45: f7:75:11:aa:6e:ca:4e:5c:55:92:09:c5:ce:c6:50: 62:90:e3:ad:17:9e:a4:28:9c:eb:5b:f0:4d:48:b6: ea:82:d7:0e:01:cd:72:09:7f:93:07:c6:8b:3a:fb: 65:8c:ed:85:cd:44:bd:be:8c:3a:5a:c0:ac:76:d3: bb:6f:df:95:05:13:bf:b9:4e:a7:91:00:55:a6:3c: 4d:53:67:0d:85:0e:d7:49:6d:f8:41:c9:af:4d:47: 11:d5:45:8f:6e:be:65:e2:14:33:26:7f:53:c0:c2: e7:7a:6e:15:66:08:5f:f6:25:9b:19:e5:ee:5a:58: 3d:1d:68:e0:a1:a9:31:99:59:2c:a2:2b:1f:2f:73: 64:f6:46:1b:3d:45:34:ac:44:85:68:cc:7a:80:22: 3a:6f:c9:ce:2a:47:1f:bd:72:a6:09:97:71:c7:51: c0:9d:b3:8c:2f:a2:f7:fb:d1:0b:29:6e:e0:1c:0a: 6f:95:d9:0b:c5:88:48:4f:df:5b:b8:d7:7b:6d:af: f1:77:0a:7f:21:c8:1a:ae:99:10:6c:0c:08:6e:87: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8F:B2:47:11:5A:BB:1D:7B:8D:24:35:3C:86:21:B0:AA:29:30:51 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6d:e2:a6:26:f9:83:56:cb:13:ac:0f:a5:54:69:52:58:c4: b1:4f:a1:e4:ed:47:81:c4:70:12:2c:1a:5b:4f:12:59:1e:4e: 7a:36:fb:f8:e6:0d:3a:5d:42:f2:1b:28:79:b9:70:a8:6e:85: 8b:ad:c3:bb:a3:8b:84:4b:b7:6b:3c:8d:41:f1:64:9e:15:bf: 26:58:94:f8:23:43:fe:12:6b:45:9b:72:e4:74:14:1c:da:2f: 91:b9:79:90:85:cd:5a:7f:92:70:95:21:e3:9b:16:bb:17:f3: 7a:4b:9b:ae:b5:33:2e:fb:17:78:d3:f7:78:52:db:b9:fe:72: 1b:2f:8d:79:4d:7a:bf:45:b0:41:4d:55:9a:e3:e5:bc:7d:96: 89:4f:8d:7d:63:99:46:12:bf:45:e1:b7:fb:0b:bb:34:5a:2e: c9:03:7e:28:95:1f:72:1e:62:c6:ad:9f:3c:b3:cf:6d:6e:62: e2:3a:ac:b4:40:4e:b5:80:91:0a:1f:c2:60:ca:86:46:b1:fe: 26:7c:7f:07:4f:33:7b:aa:5f:0c:8f:35:04:e4:c6:f8:05:d6: 53:e4:22:f3:47:4d:10:31:f1:45:bc:5b:19:a3:4f:ea:f9:a7: 63:40:d9:22:e9:e9:36:b7:f2:1a:79:bd:55:81:b0:95:13:e1: 6e:1b:47:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUwNTEyMTkwMTA3WhcNMjUwNTE5MTkwMTA3WjAYMRYwFAYD VQQDEw02ODIyNDU3NC04YjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIp8cCLrAQCPCrxsN8MpG0wfM0B49qfFPNEZ9I5aPioTb6i1areWJ5a4CEX3 dRGqbspOXFWSCcXOxlBikOOtF56kKJzrW/BNSLbqgtcOAc1yCX+TB8aLOvtljO2F zUS9vow6WsCsdtO7b9+VBRO/uU6nkQBVpjxNU2cNhQ7XSW34QcmvTUcR1UWPbr5l 4hQzJn9TwMLnem4VZghf9iWbGeXuWlg9HWjgoakxmVksoisfL3Nk9kYbPUU0rESF aMx6gCI6b8nOKkcfvXKmCZdxx1HAnbOML6L3+9ELKW7gHApvldkLxYhIT99buNd7 ba/xdwp/IcgarpkQbAwIboc0ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGPskcR Wrsde40kNTyGIbCqKTBRMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVbeKmJvmDVssTrA+lVGlSWMSxT6Hk7UeBxHASLBpbTxJZHk56Nvv4 5g06XULyGyh5uXCoboWLrcO7o4uES7drPI1B8WSeFb8mWJT4I0P+EmtFm3LkdBQc 2i+RuXmQhc1af5JwlSHjmxa7F/N6S5uutTMu+xd40/d4Utu5/nIbL415TXq/RbBB TVWa4+W8fZaJT419Y5lGEr9F4bf7C7s0Wi7JA34olR9yHmLGrZ88s89tbmLiOqy0 QE61gJEKH8JgyoZGsf4mfH8HTzN7ql8MjzUE5Mb4BdZT5CLzR00QMfFFvFsZo0/q +adjQNki6ek2t/Iaeb1VgbCVE+FuG0eR -----END CERTIFICATE-----Generated at Wed May 14 10:35:18 2025 by rpki-client