$ rpki-client -vvf rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft File: 0ATM-ubwekS9796TeAatucMyn_o.mft (raw, json) Hash identifier: h6Ni6j6egzoSyHq+xR26gNOFdPGR+F9t7FX80FnmCBM= Subject key identifier: 65:EA:8C:78:0B:1F:5E:62:95:9C:AD:7C:5D:29:0B:B3:9A:A4:0D:63 Authority key identifier: D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA Certificate issuer: /CN=A91E116E/serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA Certificate serial: 17C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft Manifest number: 17B6 Signing time: Sun 04 May 2025 16:28:51 +0000 Manifest this update: Sun 04 May 2025 16:28:50 +0000 Manifest next update: Sun 11 May 2025 16:28:50 +0000 Files and hashes: 1: 0ATM-ubwekS9796TeAatucMyn_o.crl (hash: WqaWxZ/6JAQesP74HOU+2o6S4k53LI9eH1NZ42trZ2U=) 2: A1021498C53311E7B0B0744BC4F9AE02.roa (hash: Ns6MCGMpSR+zeyD0qeQ8GuU0GoV9G94RijEmcRmZDOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6082 (0x17c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E116E, serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA Validity Not Before: May 4 16:28:50 2025 GMT Not After : May 11 16:28:50 2025 GMT Subject: CN=681795c3-b6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:dc:77:f7:9b:e1:c2:2e:6f:a9:6b:bc:00: d4:b2:a3:49:a0:ce:9a:72:38:8d:df:21:11:1a:71: a6:d0:30:c3:d4:82:31:38:3a:8a:71:aa:b8:c8:52: 49:84:14:8f:27:e3:e1:03:37:7f:15:35:61:9f:03: 3f:bc:e4:87:a7:18:52:d5:2c:dd:2d:83:39:8c:7c: 3a:87:ba:71:15:9f:c6:21:56:c0:39:b2:6c:c5:68: 12:9a:77:4d:07:af:ea:92:3e:f0:47:f5:d7:e2:a9: 0f:2d:40:55:01:50:13:3a:68:50:2e:e8:77:53:76: ad:ee:c4:7e:39:b7:23:4c:ef:89:d5:5f:74:cc:bd: d7:f5:8a:05:3b:ad:74:77:2d:c6:39:c5:47:bd:30: a5:ed:2e:a7:f5:ac:0e:3a:26:44:92:fc:02:d7:56: b2:c0:da:a3:fa:29:2e:ca:4a:aa:de:2e:df:24:21: 7b:4c:0e:6c:26:a8:e7:e3:3e:74:af:e5:9f:66:f8: d2:82:08:95:44:8b:3f:f0:90:7b:ea:41:91:5d:d5: 83:d7:bf:82:1b:92:d1:6b:d4:c7:e7:0c:a3:ec:86: e1:a5:30:bb:d5:d5:81:04:ce:4e:79:81:69:fc:84: 8b:c3:d0:08:19:9a:0d:f3:95:2b:dc:c5:12:4a:1c: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EA:8C:78:0B:1F:5E:62:95:9C:AD:7C:5D:29:0B:B3:9A:A4:0D:63 X509v3 Authority Key Identifier: keyid:D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e5:d7:1d:11:5d:ff:6f:67:11:51:48:32:d8:16:79:01:13: 05:ae:ca:e4:6a:20:b1:65:95:db:97:60:07:f2:dd:13:94:37: 85:b7:86:74:5e:c4:91:bb:29:00:7e:7a:df:09:7a:38:be:7b: a4:51:5f:18:39:38:7a:12:c1:b2:0d:6a:df:b8:5b:55:83:2f: f6:fb:d5:1b:65:66:45:e7:9f:63:ac:17:f2:4e:27:f8:89:ee: 6c:b8:da:83:83:4a:5b:85:38:de:e7:e1:84:eb:a7:e5:79:5b: 27:39:be:71:93:e3:99:b0:ac:06:5a:1b:78:b5:14:f7:05:dd: 3e:9a:a7:ef:0c:b2:72:2d:be:a8:cd:1b:f1:2b:28:b3:4c:cc: f5:d0:21:a0:cf:36:b2:ee:45:23:71:d8:e6:b1:d0:50:d6:53: 5f:cc:8e:ad:d0:9e:96:3a:af:75:f9:83:55:d4:ce:23:c3:e1: d2:55:21:9c:7d:fe:de:11:ed:5e:fb:68:7e:5f:c2:7c:4c:89: 70:1a:87:79:22:f2:45:66:d9:2d:56:d3:41:98:83:87:2c:8a: 8b:a6:ee:1b:4e:76:fe:a4:5b:c5:87:57:07:9d:75:83:6b:7f: 7f:92:e5:52:34:09:e2:b1:0c:27:8c:3e:e1:a3:fe:8e:10:18: bd:ff:f4:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNkUxMTAvBgNVBAUTKEQwMDRDQ0ZBRTZGMDdBNDRCREVGREU5Mzc4MDZBREI5 QzMzMjlGRkEwHhcNMjUwNTA0MTYyODUwWhcNMjUwNTExMTYyODUwWjAYMRYwFAYD VQQDEw02ODE3OTVjMy1iNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNrcd/eb4cIub6lrvADUsqNJoM6acjiN3yERGnGm0DDD1IIxODqKcaq4yFJJ hBSPJ+PhAzd/FTVhnwM/vOSHpxhS1SzdLYM5jHw6h7pxFZ/GIVbAObJsxWgSmndN B6/qkj7wR/XX4qkPLUBVAVATOmhQLuh3U3at7sR+ObcjTO+J1V90zL3X9YoFO610 dy3GOcVHvTCl7S6n9awOOiZEkvwC11aywNqj+ikuykqq3i7fJCF7TA5sJqjn4z50 r+WfZvjSggiVRIs/8JB76kGRXdWD17+CG5LRa9TH5wyj7IbhpTC71dWBBM5OeYFp /ISLw9AIGZoN85Ur3MUSShx/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXqjHgL H15ilZytfF0pC7OapA1jMB8GA1UdIwQYMBaAFNAEzPrm8HpEve/ek3gGrbnDMp/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE2RS83NDU2Qzc1QUM1 MzIxMUU3OTIxRTNFNDlDNEY5QUUwMi8wQVRNLXVid2VrUzk3OTZUZUFhdHVjTXlu X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBVE0tdWJ3ZWtTOTc5NlRlQWF0dWNNeW5fby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE2RS83NDU2Qzc1QUM1MzIxMUU3OTIxRTNFNDlDNEY5QUUwMi8wQVRNLXVid2Vr Uzk3OTZUZUFhdHVjTXluX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW5dcdEV3/b2cRUUgy2BZ5ARMFrsrkaiCxZZXbl2AH8t0TlDeFt4Z0 XsSRuykAfnrfCXo4vnukUV8YOTh6EsGyDWrfuFtVgy/2+9UbZWZF559jrBfyTif4 ie5suNqDg0pbhTje5+GE66fleVsnOb5xk+OZsKwGWht4tRT3Bd0+mqfvDLJyLb6o zRvxKyizTMz10CGgzzay7kUjcdjmsdBQ1lNfzI6t0J6WOq91+YNV1M4jw+HSVSGc ff7eEe1e+2h+X8J8TIlwGod5IvJFZtktVtNBmIOHLIqLpu4bTnb+pFvFh1cHnXWD a39/kuVSNAnisQwnjD7ho/6OEBi9//Sn -----END CERTIFICATE-----Generated at Mon May 5 03:25:52 2025 by rpki-client