$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: gV4pHXEsbrRkUfA0mvr9zERJGlX6Gw35geC1TcUXsI8= Subject key identifier: 41:7D:D5:D4:D2:8E:0D:C1:0D:4A:B5:3B:1C:49:F3:B2:DD:40:6A:BE Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 1171 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 1167 Signing time: Wed 14 May 2025 14:46:48 +0000 Manifest this update: Wed 14 May 2025 14:46:48 +0000 Manifest next update: Wed 21 May 2025 14:46:48 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: f4lC2SBVW//RN9yOD0ykeo81eCDtRQu4EGPiQulOHs8=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: XN60w0eRqVpxeIfX7b6c8hnme3sk6Z9ebx38NO7BFYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4465 (0x1171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: May 14 14:46:48 2025 GMT Not After : May 21 14:46:48 2025 GMT Subject: CN=6824acd8-1c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:f8:93:da:00:cf:f7:55:ef:17:0b:5b:a4: cf:45:90:86:9b:d3:43:63:fc:b9:e9:65:55:14:1c: 75:a0:59:04:b5:f3:76:1d:5a:e4:b7:87:d5:58:16: 94:77:ce:94:33:7e:f5:0d:e3:01:3c:db:e2:e5:97: a7:cd:99:8a:dd:21:d9:8c:27:01:1f:e3:ac:53:40: 2c:dd:ad:a4:75:56:74:bc:b1:03:17:ca:cf:f1:f0: 58:b2:4d:84:bc:91:f8:e5:5e:f5:b1:99:4f:e8:d8: a2:93:9d:96:d3:a8:4c:85:63:c2:83:cc:8a:79:31: 0b:7f:de:28:09:f1:09:65:dd:d1:70:1d:c3:ba:58: 9f:71:ac:23:d1:e9:58:e8:a9:85:71:fb:f1:7c:db: 2b:1c:c4:4e:e2:5c:3f:61:2d:92:db:eb:ea:b0:b4: e6:b1:64:fa:3e:bb:11:d9:ac:8a:44:95:ef:17:da: 4a:55:f1:a2:f6:d8:32:e8:81:27:1c:b2:e6:c9:47: 57:56:45:0f:3b:f1:43:8a:67:e7:7e:3c:df:f6:8f: 21:b7:39:6e:2e:4c:d6:e4:bb:dd:bc:3a:77:8c:5a: dd:5c:8b:a8:ad:15:d8:5b:14:db:b6:29:bf:05:0d: b2:8b:b2:36:42:15:74:fc:c9:55:6d:71:75:de:f9: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:D5:D4:D2:8E:0D:C1:0D:4A:B5:3B:1C:49:F3:B2:DD:40:6A:BE X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8e:ca:95:74:03:41:ed:98:d5:b2:ec:82:09:c6:6c:87:b4: de:ed:4a:44:c2:da:c6:1e:4d:46:c3:3b:7b:2f:06:4d:95:b6: c7:37:e6:a1:db:41:1a:cb:92:ac:56:33:a4:dd:67:6d:6c:ea: 9e:bd:b9:55:0c:4e:89:a2:e2:a8:ae:64:a4:14:57:8d:44:13: b3:34:f2:2f:83:70:65:58:eb:23:ce:7e:55:2d:26:16:d4:6f: bd:ad:d1:b7:d2:76:99:9c:fb:37:59:ef:1d:71:ae:f3:7b:ad: 5f:ae:b1:62:7e:fa:cd:c5:12:70:3b:59:f1:5b:6a:00:54:c6: 78:02:8b:99:99:61:e8:98:1a:c7:22:8e:fc:f1:1b:98:2f:44: 81:e4:91:c9:8e:20:f8:12:db:db:c9:95:21:06:c0:d1:29:c8: 65:4e:c4:e5:9a:cc:b0:71:61:f8:4a:9b:9e:52:05:60:96:be: f3:3d:84:21:50:2b:43:bf:8a:9f:55:a4:e3:e7:3b:fb:22:dd: 48:9d:7e:33:cb:8d:38:a0:d0:24:ed:16:62:00:54:2f:f6:1b: b0:6e:9c:b6:18:42:89:34:58:bd:07:08:9c:43:70:b2:09:f1: 33:4d:9d:70:f3:81:2b:8a:74:55:0f:5c:b2:e7:e4:aa:b1:0f: 05:f9:8f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUwNTE0MTQ0NjQ4WhcNMjUwNTIxMTQ0NjQ4WjAYMRYwFAYD VQQDEw02ODI0YWNkOC0xYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+H4k9oAz/dV7xcLW6TPRZCGm9NDY/y56WVVFBx1oFkEtfN2HVrkt4fVWBaU d86UM371DeMBPNvi5ZenzZmK3SHZjCcBH+OsU0As3a2kdVZ0vLEDF8rP8fBYsk2E vJH45V71sZlP6Niik52W06hMhWPCg8yKeTELf94oCfEJZd3RcB3Dulifcawj0elY 6KmFcfvxfNsrHMRO4lw/YS2S2+vqsLTmsWT6PrsR2ayKRJXvF9pKVfGi9tgy6IEn HLLmyUdXVkUPO/FDimfnfjzf9o8htzluLkzW5LvdvDp3jFrdXIuorRXYWxTbtim/ BQ2yi7I2QhV0/MlVbXF13vl1vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF91dTS jg3BDUq1OxxJ87LdQGq+MB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFjsqVdANB7ZjVsuyCCcZsh7Te7UpEwtrGHk1Gwzt7LwZNlbbHN+ah 20Eay5KsVjOk3WdtbOqevblVDE6JouKormSkFFeNRBOzNPIvg3BlWOsjzn5VLSYW 1G+9rdG30naZnPs3We8dca7ze61frrFifvrNxRJwO1nxW2oAVMZ4AouZmWHomBrH Io788RuYL0SB5JHJjiD4EtvbyZUhBsDRKchlTsTlmsywcWH4SpueUgVglr7zPYQh UCtDv4qfVaTj5zv7It1InX4zy404oNAk7RZiAFQv9huwbpy2GEKJNFi9BwicQ3Cy CfEzTZ1w84ErinRVD1yy5+SqsQ8F+Y/w -----END CERTIFICATE-----Generated at Thu May 15 21:48:07 2025 by rpki-client