$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: Ub44kial7qYs2QKPHpw9gP9S+95Vp7GmE1fv2ctUbbg= Subject key identifier: 56:F3:8B:B6:BD:DB:39:18:10:C0:31:D0:76:DE:D8:6E:57:5F:84:F4 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0C18 Signing time: Wed 14 May 2025 18:47:42 +0000 Manifest this update: Wed 14 May 2025 18:47:41 +0000 Manifest next update: Wed 21 May 2025 18:47:41 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: JvCoyLtzJM3kykeTdzd7Ei22I8TxQVJ1pAyD6YP4dew=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: fNKHCrlloZaF6YEqwDlDZ6OwI4uUpNjeaTgxoFN7c8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: May 14 18:47:41 2025 GMT Not After : May 21 18:47:41 2025 GMT Subject: CN=6824e54e-51aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:be:93:2a:6a:4d:3e:71:f0:7c:06:02:92: ea:f7:04:73:db:5a:3d:96:56:07:28:df:bf:53:37: aa:66:22:1e:6d:2e:c7:8a:4c:cc:f7:8d:29:8d:d7: 03:c4:3e:e3:9f:9e:c0:c1:87:32:96:7e:bc:6c:dd: 2f:3d:62:cf:8f:aa:99:59:f3:87:05:6d:a5:bd:ca: 6c:fd:cd:f0:68:2f:fc:25:77:15:ec:fe:27:b5:26: 7d:22:bb:d0:dd:4e:c4:f1:5e:1d:eb:9a:24:2d:7f: b0:f9:13:0c:30:a2:53:62:c5:9f:f0:9a:ed:f7:74: 2e:84:fb:f5:19:3b:01:55:30:2b:e9:ba:90:1d:28: 0c:f0:36:2d:d3:2f:3e:d3:1c:3b:97:f7:1f:76:07: 0e:9d:06:56:fd:1e:1b:9e:05:6f:0b:c6:02:23:da: 56:16:22:3d:0b:0f:6a:2b:ed:83:89:6f:a3:e8:9c: ce:7c:e8:f4:fc:8f:82:ae:1f:e6:e3:4c:9b:d0:43: 69:a7:fc:54:6f:ba:0f:92:c3:a5:dc:3f:99:7c:3a: 5e:c2:3a:b2:8d:e1:87:3b:6b:e4:34:28:77:76:88: f0:b8:37:21:4b:70:e6:d2:73:6d:0a:de:39:4b:c2: 4d:5d:c8:5d:35:78:35:62:2c:31:84:b8:5c:11:9b: d2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F3:8B:B6:BD:DB:39:18:10:C0:31:D0:76:DE:D8:6E:57:5F:84:F4 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ab:6a:72:44:a5:d1:99:e0:7a:7f:f6:bf:44:ba:2c:57:d3: 22:0d:34:bf:97:47:6f:18:ee:05:18:3a:92:60:9a:82:3c:e5: 53:3c:b6:02:ed:c7:8a:cd:bd:fb:fb:b4:a1:c5:94:25:dd:11: e3:3c:11:cb:c4:4b:98:8a:37:f9:e0:c9:b9:c9:be:3a:49:00: be:cd:ca:6c:63:7f:02:b6:b2:cc:38:39:53:0c:1f:18:15:5c: 07:32:26:99:74:76:26:80:92:a9:77:0b:a8:4c:19:0a:cb:fb: 46:73:b8:40:7f:41:cd:e3:5f:0a:1f:47:d3:6b:03:dd:c9:45: 25:97:5e:45:85:40:08:c7:9e:e1:93:04:53:38:5a:b9:56:a0: 9d:13:1c:4f:e5:c5:39:f9:77:c0:f0:a6:08:ca:c6:9e:bc:b4: 34:3a:51:04:69:7f:e3:06:d2:84:82:1e:0b:8b:60:af:2f:88: 1b:ad:e6:29:21:7f:9c:bb:85:5f:85:12:18:31:c2:77:4e:97: 59:d3:00:5f:6a:db:ea:5f:90:6f:d8:c2:26:80:66:f5:28:98: 9e:7f:b5:ea:f6:18:16:04:8b:c2:6d:9f:98:ac:a7:8c:e0:b0: 55:58:88:84:6d:94:14:a3:a2:5b:c8:f8:e0:bb:1f:4a:0a:75: a4:e8:50:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjUwNTE0MTg0NzQxWhcNMjUwNTIxMTg0NzQxWjAYMRYwFAYD VQQDEw02ODI0ZTU0ZS01MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1S+kypqTT5x8HwGApLq9wRz21o9llYHKN+/UzeqZiIebS7HikzM940pjdcD xD7jn57AwYcyln68bN0vPWLPj6qZWfOHBW2lvcps/c3waC/8JXcV7P4ntSZ9IrvQ 3U7E8V4d65okLX+w+RMMMKJTYsWf8Jrt93QuhPv1GTsBVTAr6bqQHSgM8DYt0y8+ 0xw7l/cfdgcOnQZW/R4bngVvC8YCI9pWFiI9Cw9qK+2DiW+j6JzOfOj0/I+Crh/m 40yb0ENpp/xUb7oPksOl3D+ZfDpewjqyjeGHO2vkNCh3dojwuDchS3Dm0nNtCt45 S8JNXchdNXg1YiwxhLhcEZvSawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbzi7a9 2zkYEMAx0Hbe2G5XX4T0MB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQq2pyRKXRmeB6f/a/RLosV9MiDTS/l0dvGO4FGDqSYJqCPOVTPLYC 7ceKzb37+7ShxZQl3RHjPBHLxEuYijf54Mm5yb46SQC+zcpsY38CtrLMODlTDB8Y FVwHMiaZdHYmgJKpdwuoTBkKy/tGc7hAf0HN418KH0fTawPdyUUll15FhUAIx57h kwRTOFq5VqCdExxP5cU5+XfA8KYIysaevLQ0OlEEaX/jBtKEgh4Li2CvL4gbreYp IX+cu4VfhRIYMcJ3TpdZ0wBfatvqX5Bv2MImgGb1KJief7Xq9hgWBIvCbZ+YrKeM 4LBVWIiEbZQUo6JbyPjgux9KCnWk6FCA -----END CERTIFICATE-----Generated at Thu May 15 12:25:25 2025 by rpki-client