$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft File: at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json) Hash identifier: u6nqk2u+I1MidBa8KZ3/fTIJ3JxNHGTVueS8Q52O1f8= Subject key identifier: C4:7C:84:D7:05:7B:42:38:CF:D5:6A:EC:A2:38:66:C0:E5:D6:E3:CC Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Certificate serial: 0707 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft Manifest number: 06FA Signing time: Thu 24 Apr 2025 21:45:48 +0000 Manifest this update: Thu 24 Apr 2025 21:45:48 +0000 Manifest next update: Thu 01 May 2025 21:45:48 +0000 Files and hashes: 1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: PKAJsrb+ZQcdAVRPOgQbVwhEkJCUL4pCAs7OO4rVltA=) 2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=) 3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1799 (0x707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Validity Not Before: Apr 24 21:45:48 2025 GMT Not After : May 1 21:45:48 2025 GMT Subject: CN=680ab10c-ebce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:79:a9:12:7e:05:e2:91:e1:a4:f4:cd:2b: 38:2c:ce:93:e7:8f:15:02:90:c8:a3:a2:6a:55:99: 5c:8d:f5:1a:5a:0f:b6:bd:49:d1:da:b4:4a:79:66: aa:32:ed:41:ea:cf:46:86:e6:59:cc:ee:1b:f0:e5: 62:81:91:ac:d6:dc:c9:10:1a:a2:3a:9b:b4:38:64: b4:e5:1e:f1:3b:e4:21:53:66:ec:b0:3d:23:0b:16: c4:d2:18:f5:45:6d:3e:58:dc:46:6e:12:62:ae:8e: ac:4f:31:b8:ab:15:44:63:b7:2a:2c:58:36:5c:74: 8e:55:26:89:27:4c:53:26:4b:72:cd:1c:20:11:e1: bb:e2:3c:d0:4a:2e:77:b8:fd:26:40:45:e1:0e:bb: 34:70:6f:c8:c3:5b:2d:b4:9c:ec:dd:9c:a7:59:66: 64:bc:38:5e:bc:e9:ec:d2:ff:0a:38:4b:a4:e9:c7: 98:2a:19:b2:7a:d4:d0:96:48:34:ab:6d:66:d4:47: 06:49:8d:b5:1a:b1:4e:da:d6:95:3b:98:83:30:49: 95:f3:d6:25:c2:98:4d:e4:cd:16:46:c1:63:c9:06: 8f:8c:f7:e7:c2:33:bf:4b:4c:67:e7:62:8e:d7:33: 22:52:50:a6:05:6b:c0:ba:56:dd:e6:ce:01:d0:3a: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7C:84:D7:05:7B:42:38:CF:D5:6A:EC:A2:38:66:C0:E5:D6:E3:CC X509v3 Authority Key Identifier: keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:91:5b:c0:96:22:a6:ee:7a:cd:21:e7:1f:9b:07:41:0a:37: 7c:f1:ea:e6:8e:75:af:98:ef:c5:a1:c8:31:c9:2e:72:0e:2d: ea:01:a1:bb:fc:07:e1:22:fd:e3:3f:88:3c:7f:b0:9c:12:95: 7e:be:57:a4:a8:8d:5d:ac:a7:ee:22:95:34:60:56:e0:f5:39: 3d:2c:16:8e:8a:f1:7a:03:eb:b5:08:2e:f9:aa:ba:95:ea:6b: e7:b5:68:c6:de:64:87:fe:91:66:cb:a2:88:1c:2d:35:2e:b1: bb:dd:d0:70:48:0b:ab:f6:39:48:3a:c4:78:e2:27:5e:f7:a1: c9:45:00:cf:e6:55:58:41:43:77:19:38:ab:30:63:11:7b:97: d4:4e:77:b9:c7:93:af:73:c8:da:bd:60:d5:20:0e:90:23:62: c0:28:41:25:e2:fe:ce:c3:82:1c:8f:e6:bd:78:d7:0f:3a:1f: d4:36:4e:62:3e:88:95:98:9e:2d:63:48:4e:8b:09:41:09:f5: 39:41:78:03:da:af:30:d1:b6:fd:6d:60:50:4a:88:0a:99:d0: 2f:71:4c:de:3a:48:9e:b5:ff:20:49:87:ff:b7:5c:af:1d:36: b0:48:cc:36:e1:4c:a2:8b:f0:41:6f:20:9f:de:6d:13:33:fd: fb:6f:e7:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz RkU4NzY4ODMwHhcNMjUwNDI0MjE0NTQ4WhcNMjUwNTAxMjE0NTQ4WjAYMRYwFAYD VQQDEw02ODBhYjEwYy1lYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WV5qRJ+BeKR4aT0zSs4LM6T548VApDIo6JqVZlcjfUaWg+2vUnR2rRKeWaq Mu1B6s9GhuZZzO4b8OVigZGs1tzJEBqiOpu0OGS05R7xO+QhU2bssD0jCxbE0hj1 RW0+WNxGbhJiro6sTzG4qxVEY7cqLFg2XHSOVSaJJ0xTJktyzRwgEeG74jzQSi53 uP0mQEXhDrs0cG/Iw1sttJzs3ZynWWZkvDhevOns0v8KOEuk6ceYKhmyetTQlkg0 q21m1EcGSY21GrFO2taVO5iDMEmV89YlwphN5M0WRsFjyQaPjPfnwjO/S0xn52KO 1zMiUlCmBWvAulbd5s4B0DrdZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR8hNcF e0I4z9Vq7KI4ZsDl1uPMMB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM1Ni82NzFCN0RBNjQwMUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhh LWhNenVRTll3R3NfNkhhSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPkVvAliKm7nrNIecfmwdBCjd88ermjnWvmO/FocgxyS5yDi3qAaG7 /AfhIv3jP4g8f7CcEpV+vlekqI1drKfuIpU0YFbg9Tk9LBaOivF6A+u1CC75qrqV 6mvntWjG3mSH/pFmy6KIHC01LrG73dBwSAur9jlIOsR44ide96HJRQDP5lVYQUN3 GTirMGMRe5fUTne5x5Ovc8javWDVIA6QI2LAKEEl4v7Ow4Icj+a9eNcPOh/UNk5i PoiVmJ4tY0hOiwlBCfU5QXgD2q8w0bb9bWBQSogKmdAvcUzeOkietf8gSYf/t1yv HTawSMw24Uyii/BBbyCf3m0TM/37b+el -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:03 2025 by rpki-client