$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft File: atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json) Hash identifier: baWSJU6/iEB15aEov4Thmwt9TtlVCdH77wLPycfr50U= Subject key identifier: AF:F6:BC:8F:05:0C:BB:65:DD:D4:FB:F7:40:75:1C:BD:20:EA:EC:F4 Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D Certificate issuer: /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft Manifest number: F9 Signing time: Tue 13 May 2025 04:27:50 +0000 Manifest this update: Tue 13 May 2025 04:27:50 +0000 Manifest next update: Tue 20 May 2025 04:27:50 +0000 Files and hashes: 1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: 4dfiCbOyt4KBIkYRrMtVoVFXqJg8zFdFmzwVpgFjQCM=) 2: 0A3010E62EFE11F0B225630AC4F9AE02.roa (hash: Af8BS6KT3li312AVztaCVl5k6/uiLmXKHcCTK0Vi4Lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Validity Not Before: May 13 04:27:50 2025 GMT Not After : May 20 04:27:50 2025 GMT Subject: CN=6822ca46-56c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a5:a6:21:bd:9b:1b:18:3e:4e:8b:a3:8c:7e: e7:e6:85:60:72:0e:ae:fe:3c:9a:8e:ee:d2:0b:50: b8:76:ce:aa:49:5b:a2:19:41:1c:ef:fb:bf:4a:bc: 35:52:bf:b8:f9:c0:12:29:65:66:01:22:e4:4c:fe: 76:b5:2b:b0:64:cc:cc:fc:8b:44:7d:2f:b9:66:4c: ca:25:9c:b5:40:74:f7:af:33:78:54:c2:40:12:49: 6e:71:a4:47:af:4f:d4:b3:49:a7:d5:a9:12:fa:83: d9:ce:1d:ef:86:15:88:42:fc:bf:8d:c6:95:2c:2d: 53:73:8d:ad:67:ae:54:92:5a:5c:06:2e:fa:04:d7: 38:04:3f:eb:d8:bb:ee:d5:bd:36:03:f5:c5:fc:2c: 4e:40:59:1f:79:1d:6e:96:65:f7:c1:10:6b:23:51: 62:c4:90:b2:d1:3b:f6:32:07:17:9c:a8:7f:d8:e9: 8c:79:1a:8c:7a:1b:70:36:0b:f3:b1:0e:7d:5b:ef: a2:de:5f:4d:35:27:54:44:ad:39:80:e9:40:d6:61: be:96:8b:3b:55:f4:62:79:f6:c5:8b:d7:91:b7:1b: 70:7c:d3:36:e4:01:40:ff:da:48:fe:34:8f:16:33: ff:3f:1a:32:4c:69:9d:9f:44:e9:93:4a:7d:72:46: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F6:BC:8F:05:0C:BB:65:DD:D4:FB:F7:40:75:1C:BD:20:EA:EC:F4 X509v3 Authority Key Identifier: keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:97:ce:7e:50:23:7b:16:9d:f9:c2:18:30:38:24:be:43:4f: 67:27:ab:87:d7:e3:05:32:96:5b:5a:ef:99:7a:78:aa:c9:c8: 9e:b4:91:bc:3a:a6:53:4c:0c:ff:b4:ee:3e:bb:06:ef:06:21: 4f:00:1b:ea:91:27:46:0c:85:26:c7:d4:e8:c9:83:98:af:f9: 45:be:d5:a6:96:9d:cb:81:99:4b:cf:29:b3:6e:04:c8:b6:e0: 6f:36:fb:76:0e:12:4a:1e:95:b7:bd:6d:c0:68:eb:8a:83:4b: 21:fc:f5:c7:3f:ce:06:0e:51:de:98:49:de:c1:c7:c3:62:69: 99:a0:33:48:87:e3:87:69:f4:44:12:05:19:49:49:20:c3:00: fa:dc:6c:01:bf:2b:64:48:0c:f5:d7:49:23:d0:5e:f1:0d:4e: 61:f4:f4:ea:91:3b:a7:ac:d5:d4:6d:01:58:a9:cd:31:6f:ea: 65:d6:20:ab:de:64:16:89:dc:b6:d4:0f:0e:a3:8c:69:9d:cd: 70:b1:df:c5:b2:ad:3a:ed:00:20:30:3d:4d:60:f9:8b:71:23: 82:3a:30:bb:7d:f3:f3:97:94:9c:91:6a:47:3b:e6:80:37:8d: 86:4c:91:a6:b6:a3:f1:d0:9c:1c:ef:27:85:5f:e7:a0:d6:1f: ab:46:87:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4RkMxMTAvBgNVBAUTKDZBREFGQkEyOTk2ODMwQzUxRDY4MUMzMjEyRDA0QjVD NzI0QzEzMUQwHhcNMjUwNTEzMDQyNzUwWhcNMjUwNTIwMDQyNzUwWjAYMRYwFAYD VQQDEw02ODIyY2E0Ni01NmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qWmIb2bGxg+ToujjH7n5oVgcg6u/jyaju7SC1C4ds6qSVuiGUEc7/u/Srw1 Ur+4+cASKWVmASLkTP52tSuwZMzM/ItEfS+5ZkzKJZy1QHT3rzN4VMJAEklucaRH r0/Us0mn1akS+oPZzh3vhhWIQvy/jcaVLC1Tc42tZ65UklpcBi76BNc4BD/r2Lvu 1b02A/XF/CxOQFkfeR1ulmX3wRBrI1FixJCy0Tv2MgcXnKh/2OmMeRqMehtwNgvz sQ59W++i3l9NNSdURK05gOlA1mG+los7VfRiefbFi9eRtxtwfNM25AFA/9pI/jSP FjP/PxoyTGmdn0Tpk0p9ckZcbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/2vI8F DLtl3dT790B1HL0g6uz0MB8GA1UdIwQYMBaAFGra+6KZaDDFHWgcMhLQS1xyTBMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhGQy9GNzM5QTRGOEJE MTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01NVWRhQnd5RXRCTFhISk1F eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0cjdvcGxvTU1VZGFCd3lFdEJMWEhKTUV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhGQy9GNzM5QTRGOEJEMTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01N VWRhQnd5RXRCTFhISk1FeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASl85+UCN7Fp35whgwOCS+Q09nJ6uH1+MFMpZbWu+ZeniqycietJG8 OqZTTAz/tO4+uwbvBiFPABvqkSdGDIUmx9ToyYOYr/lFvtWmlp3LgZlLzymzbgTI tuBvNvt2DhJKHpW3vW3AaOuKg0sh/PXHP84GDlHemEnewcfDYmmZoDNIh+OHafRE EgUZSUkgwwD63GwBvytkSAz110kj0F7xDU5h9PTqkTunrNXUbQFYqc0xb+pl1iCr 3mQWidy21A8Oo4xpnc1wsd/Fsq067QAgMD1NYPmLcSOCOjC7ffPzl5SckWpHO+aA N42GTJGmtqPx0Jwc7yeFX+eg1h+rRocP -----END CERTIFICATE-----Generated at Wed May 14 11:37:11 2025 by rpki-client