$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: HvH75q8TR+inz0MT3FH7SvD4iASy1mKSip0VAzWCMEQ= Subject key identifier: 47:44:76:9B:82:63:46:98:7E:94:B9:CD:84:83:93:4F:95:26:98:9F Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: B3 Signing time: Fri 25 Apr 2025 05:01:27 +0000 Manifest this update: Fri 25 Apr 2025 05:01:26 +0000 Manifest next update: Fri 02 May 2025 05:01:26 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: cGexrPdQLaY1FrSgkdQK3e/dXTe6v2zrkwWg+Y1wiKE=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: wwGZpT48wP330+bWP5HvFyf3d6u+Sna23wh8+O18ssw=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: kAoCwtSL8DYNhEnCxiYeyq+03pY+E8NsD8+lYLcvbO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: Apr 25 05:01:26 2025 GMT Not After : May 2 05:01:26 2025 GMT Subject: CN=680b1726-cdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:74:a1:be:65:79:43:ae:9b:ef:5e:fb:e6: 5c:70:c4:07:7a:7a:a1:65:3d:eb:05:e7:2c:49:1b: 2c:97:30:74:4e:dc:30:77:54:7e:7c:b7:92:94:44: 8e:20:c1:d2:75:63:c7:95:de:4c:46:00:35:03:6b: 9e:79:7f:51:71:8c:eb:a1:83:ea:4f:4e:08:74:9e: a8:d3:c6:c3:23:cf:a5:05:60:3b:03:3f:39:e1:78: 1d:a8:77:38:d6:2b:01:e7:f1:23:e9:12:aa:05:04: 10:3f:ff:89:3f:8d:9a:c3:0d:67:b1:b7:a8:0f:4f: 98:22:b2:f6:ec:5d:55:5a:bc:97:57:6d:ea:c3:e4: 2a:c8:f6:91:c3:84:00:43:7b:e6:97:82:58:3a:b0: dd:f0:3a:ff:d1:9a:37:99:48:46:83:45:68:2e:e1: f3:4b:25:5f:03:e5:07:ba:a3:b1:34:0f:72:a6:96: 45:90:44:38:33:15:0b:fd:14:8e:59:79:39:ab:4f: ba:8d:92:6d:2d:08:e2:2c:09:19:ec:7d:e5:34:34: e2:56:30:9f:74:2e:a0:3b:27:cc:1d:e2:d5:ee:cb: 70:07:c2:06:7a:26:dc:1b:9a:10:a8:ca:a6:55:5b: 4d:e9:20:88:52:6d:2d:a7:3c:32:fc:4c:35:6e:5c: f3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:44:76:9B:82:63:46:98:7E:94:B9:CD:84:83:93:4F:95:26:98:9F X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ed:db:29:69:76:52:de:ba:c8:2b:6b:1d:76:d5:15:63:47: dd:66:67:83:c0:dd:50:bc:f3:d8:d7:f6:84:f5:b6:56:5e:b2: 58:81:8d:1c:90:70:66:25:a9:5c:05:75:45:f7:07:96:52:8f: 7a:18:81:17:27:59:d5:33:59:79:a3:e2:7d:60:41:c6:32:a3: b9:eb:11:af:52:32:42:af:79:df:48:db:c9:9d:b2:44:ba:e6: 3b:2f:dd:0a:ff:25:59:3b:d6:f4:8b:69:d0:ce:f8:1a:23:79: 3a:b4:24:ba:64:64:79:46:3b:87:82:1e:16:e4:6a:69:62:dd: 0b:c7:38:07:05:ae:f8:e2:ab:14:2f:b0:ce:81:23:de:69:d7: 3a:01:66:80:62:85:03:55:3e:51:4d:9e:34:a3:ab:ab:1c:01: b4:f2:9c:05:ef:d0:29:00:b6:99:0a:ff:43:d3:45:1e:7c:9a: 66:3d:29:44:ae:1f:57:4d:94:27:0a:20:4d:75:97:dd:17:79: b7:2c:e8:f8:ce:cb:59:61:3f:da:5a:70:cb:ef:17:d3:fb:29: 04:be:12:08:f9:97:53:4a:7e:b6:46:7f:d4:36:b8:db:d0:0e: 0e:01:4e:65:52:02:f5:d2:e8:93:4d:36:c8:c5:2e:28:8c:a6: 13:83:f4:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI2RkIxMTAvBgNVBAUTKEFEMjM0RTNGMUVCQkFEQUQwMTlGRTA5QUZGRjcwRTgw NzVBRkRFMTcwHhcNMjUwNDI1MDUwMTI2WhcNMjUwNTAyMDUwMTI2WjAYMRYwFAYD VQQDEw02ODBiMTcyNi1jZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Cp0ob5leUOum+9e++ZccMQHenqhZT3rBecsSRsslzB0Ttwwd1R+fLeSlESO IMHSdWPHld5MRgA1A2ueeX9RcYzroYPqT04IdJ6o08bDI8+lBWA7Az854XgdqHc4 1isB5/Ej6RKqBQQQP/+JP42aww1nsbeoD0+YIrL27F1VWryXV23qw+QqyPaRw4QA Q3vml4JYOrDd8Dr/0Zo3mUhGg0VoLuHzSyVfA+UHuqOxNA9yppZFkEQ4MxUL/RSO WXk5q0+6jZJtLQjiLAkZ7H3lNDTiVjCfdC6gOyfMHeLV7stwB8IGeibcG5oQqMqm VVtN6SCIUm0tpzwy/Ew1blzzSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdEdpuC Y0aYfpS5zYSDk0+VJpifMB8GA1UdIwQYMBaAFK0jTj8eu62tAZ/gmv/3DoB1r94X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjZGQi9EOUNDOUVERTEx RjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3JhMEJuLUNhX19jT2dIV3Yz aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjZGQi9EOUNDOUVERTExRjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3Jh MEJuLUNhX19jT2dIV3YzaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL7dspaXZS3rrIK2sddtUVY0fdZmeDwN1QvPPY1/aE9bZWXrJYgY0c kHBmJalcBXVF9weWUo96GIEXJ1nVM1l5o+J9YEHGMqO56xGvUjJCr3nfSNvJnbJE uuY7L90K/yVZO9b0i2nQzvgaI3k6tCS6ZGR5RjuHgh4W5GppYt0LxzgHBa744qsU L7DOgSPeadc6AWaAYoUDVT5RTZ40o6urHAG08pwF79ApALaZCv9D00UefJpmPSlE rh9XTZQnCiBNdZfdF3m3LOj4zstZYT/aWnDL7xfT+ykEvhII+ZdTSn62Rn/UNrjb 0A4OAU5lUgL10uiTTTbIxS4ojKYTg/S5 -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:36 2025 by rpki-client