$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: NTD1BDzwqwm5J6/QX6tH/B4FcL+7GhFnM7wFQJcSWyg= Subject key identifier: 57:68:8A:EA:18:5B:39:8F:4B:45:40:F1:A4:AA:92:F1:62:1D:B3:99 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0C28 Signing time: Thu 12 Jun 2025 18:28:07 +0000 Manifest this update: Thu 12 Jun 2025 18:28:06 +0000 Manifest next update: Thu 19 Jun 2025 18:28:06 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: y4sE4+s+v86UtlmSzZaWE8DIRYfvNS5LRHaohF2JWX0=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: pTtLtXiP6+lMZs1IbS5QyauPkH+CLmMvProexjSKJSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: Jun 12 18:28:06 2025 GMT Not After : Jun 19 18:28:06 2025 GMT Subject: CN=684b1c37-7c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:3e:60:22:db:2d:a0:27:9a:1a:e0:25:1a: 88:60:7d:81:35:46:e5:6b:a5:b2:5b:a8:3a:f6:7c: e4:22:0a:6f:a9:39:0d:45:52:e5:b1:05:2c:e5:f3: a4:f8:b2:6c:cd:9c:9a:60:6c:1b:48:3c:84:9a:e3: 17:28:f7:f5:b7:35:2d:69:27:00:83:3f:70:05:f1: 1f:62:f5:c4:ec:b2:4f:68:8d:7e:2f:3c:2d:f2:60: ee:3f:87:36:ec:1b:3b:da:57:d8:fc:08:c3:26:8d: e1:c8:39:c9:6d:c5:9c:55:eb:80:cf:85:35:2d:e5: 26:81:cd:90:a6:e0:5f:61:9e:c3:db:2e:fb:4f:15: 05:2c:d1:5c:f8:57:af:05:4f:95:13:7e:38:c3:46: 87:51:dd:77:6a:f3:ad:f8:df:0b:25:08:88:9a:a4: b7:a0:79:be:fc:ea:17:35:10:05:2e:bb:4e:aa:07: 56:e3:85:21:58:2f:f3:c6:03:a1:9b:de:7e:d7:86: 48:ef:72:1f:0e:e7:ef:31:d3:8d:81:ed:ca:11:a1: 6e:fb:5d:b9:3f:4b:5f:d9:a2:82:f2:56:e9:39:48: c0:0e:15:cc:9d:05:ec:1e:88:24:07:09:d6:e7:76: 3d:8c:57:eb:96:ec:a0:e0:b1:38:bc:16:66:1d:9f: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:68:8A:EA:18:5B:39:8F:4B:45:40:F1:A4:AA:92:F1:62:1D:B3:99 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a5:7b:6d:9c:b0:f9:c1:73:7a:f1:38:db:50:e0:74:4d:ef: 73:b4:81:fb:06:95:f9:38:7e:36:b1:5f:7e:db:0f:de:7a:a8: 53:e5:d8:7b:d5:f5:56:88:31:48:72:e8:dd:5d:18:de:1e:65: b8:99:ea:9d:58:72:39:92:be:ea:e0:a9:9e:f4:29:a3:b9:54: 8d:8c:56:f8:da:d5:d2:c5:ab:17:a9:62:b6:c8:f1:eb:1c:0f: c2:79:43:1b:8d:2e:f2:a3:c8:ba:9f:46:d6:d9:08:e0:41:0c: 1f:87:e9:78:72:21:a0:fc:c1:b8:45:42:fb:9f:d5:1f:5e:a8: b9:83:ce:f8:a7:b7:f6:8c:bc:86:0c:ca:54:fa:e6:8e:01:19: 77:6d:fa:3c:f1:32:70:d4:66:cb:2c:0c:86:35:60:8b:75:2d: f2:fd:b2:5f:ba:71:86:2a:0b:f3:f0:d4:f7:9e:8e:fa:21:72: 3c:1d:e5:28:eb:ba:f7:94:8e:95:84:6f:f3:32:87:25:34:39: e4:a1:fd:70:a2:fc:0c:2a:55:56:66:b5:00:24:28:ab:c4:ca: 22:66:db:1c:06:40:d7:f3:61:dd:49:10:88:4e:b8:08:01:41: fa:3d:4a:96:fd:4d:6b:b2:8a:dd:2f:3f:3e:25:cd:e8:fe:4a: 53:0a:36:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjUwNjEyMTgyODA2WhcNMjUwNjE5MTgyODA2WjAYMRYwFAYD VQQDEw02ODRiMWMzNy03YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbo+YCLbLaAnmhrgJRqIYH2BNUbla6WyW6g69nzkIgpvqTkNRVLlsQUs5fOk +LJszZyaYGwbSDyEmuMXKPf1tzUtaScAgz9wBfEfYvXE7LJPaI1+Lzwt8mDuP4c2 7Bs72lfY/AjDJo3hyDnJbcWcVeuAz4U1LeUmgc2QpuBfYZ7D2y77TxUFLNFc+Fev BU+VE344w0aHUd13avOt+N8LJQiImqS3oHm+/OoXNRAFLrtOqgdW44UhWC/zxgOh m95+14ZI73IfDufvMdONge3KEaFu+125P0tf2aKC8lbpOUjADhXMnQXsHogkBwnW 53Y9jFfrluyg4LE4vBZmHZ/wMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdoiuoY WzmPS0VA8aSqkvFiHbOZMB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJpXttnLD5wXN68TjbUOB0Te9ztIH7BpX5OH42sV9+2w/eeqhT5dh7 1fVWiDFIcujdXRjeHmW4meqdWHI5kr7q4Kme9CmjuVSNjFb42tXSxasXqWK2yPHr HA/CeUMbjS7yo8i6n0bW2QjgQQwfh+l4ciGg/MG4RUL7n9UfXqi5g874p7f2jLyG DMpU+uaOARl3bfo88TJw1GbLLAyGNWCLdS3y/bJfunGGKgvz8NT3no76IXI8HeUo 67r3lI6VhG/zMoclNDnkof1wovwMKlVWZrUAJCirxMoiZtscBkDX82HdSRCITrgI AUH6PUqW/U1rsordLz8+Jc3o/kpTCjZN -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:57 2025 by rpki-client