$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: 6eiwmA59KBIw7CBqnEvSfRISeGhYTUzVgIahLC3zUW0= Subject key identifier: EF:A1:9C:25:84:74:19:1E:8C:84:1F:AF:FD:2C:82:BC:49:31:BB:54 Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 1168 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 115E Signing time: Sat 26 Apr 2025 14:46:03 +0000 Manifest this update: Sat 26 Apr 2025 14:46:03 +0000 Manifest next update: Sat 03 May 2025 14:46:03 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: ibRtnHK3brizgHQcmY+eyU5H8GOKf8HViRANO9Q7JRY=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: XN60w0eRqVpxeIfX7b6c8hnme3sk6Z9ebx38NO7BFYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4456 (0x1168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Apr 26 14:46:03 2025 GMT Not After : May 3 14:46:03 2025 GMT Subject: CN=680cf1ab-c4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:1d:bf:01:49:3b:f4:85:06:12:e6:7e:88: 4d:28:9e:f6:40:71:67:41:d3:ca:20:73:27:ef:18: 2d:95:3a:df:65:df:34:92:41:f2:7f:b4:1f:f5:b9: 5b:09:c3:60:53:58:46:af:29:cf:25:8e:bd:63:7e: 49:9e:d8:3a:ae:62:c2:16:3b:53:74:59:02:4a:04: 3f:7b:4f:0a:fe:2f:eb:0d:1e:c5:5f:b5:72:4a:e5: 92:79:0d:64:33:ac:93:73:60:f7:7b:78:c1:50:b1: aa:fa:67:45:7e:db:da:03:9f:6d:ff:4c:08:e1:a5: 8a:8e:7c:04:bd:aa:2d:52:04:f3:31:54:50:53:dd: 03:2a:83:f9:d3:f9:26:f3:66:ae:f3:1e:c6:4e:88: 72:3b:bc:2a:06:79:90:0a:0b:c1:b7:4c:70:b6:f0: 77:7b:a5:46:55:6a:7d:ba:f5:2a:6d:16:8f:9b:f6: 6c:15:54:24:77:3d:ff:b5:da:f2:35:a4:79:ea:7c: 63:6b:31:62:2c:97:8a:50:4d:5d:65:ee:5b:04:b1: d7:49:37:8c:7f:bc:2d:45:c3:bb:a3:ad:70:8f:0a: 98:3f:c9:98:8d:3e:69:97:e0:82:1c:ff:54:65:f1: a1:84:d5:bc:04:3b:12:4c:a5:78:e7:ae:6a:e2:e9: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A1:9C:25:84:74:19:1E:8C:84:1F:AF:FD:2C:82:BC:49:31:BB:54 X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:8b:09:f4:41:55:3a:55:6e:00:eb:7b:ee:1c:7d:a3:13:47: f3:d6:be:4a:be:1a:e1:a5:4b:47:cd:27:a5:7a:75:8a:76:fe: df:b8:3b:34:34:fb:30:bd:d8:75:f4:c9:f3:44:9c:a1:dc:fd: 17:e3:82:e3:95:78:b3:f3:97:04:6f:f0:4c:36:c5:d2:57:fa: 4c:14:b9:a2:aa:b3:c2:85:37:08:9d:fb:4f:c3:bc:68:91:57: b3:9a:ce:9f:90:36:e4:f8:01:da:7c:ab:9f:9a:ad:46:0d:a4: 2a:71:30:63:75:f7:fd:8e:37:dc:cb:5a:91:75:16:46:51:4c: b7:c3:39:3b:20:8c:73:cd:14:17:a3:cf:c9:75:77:b9:f6:91: a3:1d:af:af:91:e1:89:c9:4a:97:07:e7:24:ab:2e:d0:db:5d: 2a:ae:3f:0a:f5:4e:56:54:b1:68:65:6e:df:ca:03:92:ba:ec: c7:b7:a2:13:29:eb:97:50:ff:36:71:51:c8:97:4a:7e:a6:a9: f1:a0:ff:80:34:d4:dc:db:74:30:3b:ed:20:18:a0:ba:28:03: 1c:90:a0:64:5c:4b:a5:e6:39:d3:20:8a:50:fb:ed:b8:e9:70: e1:34:d7:17:60:a2:76:07:59:73:fa:78:2e:84:7e:59:0e:6d: d1:d9:79:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUwNDI2MTQ0NjAzWhcNMjUwNTAzMTQ0NjAzWjAYMRYwFAYD VQQDEw02ODBjZjFhYi1jNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkIdvwFJO/SFBhLmfohNKJ72QHFnQdPKIHMn7xgtlTrfZd80kkHyf7Qf9blb CcNgU1hGrynPJY69Y35Jntg6rmLCFjtTdFkCSgQ/e08K/i/rDR7FX7VySuWSeQ1k M6yTc2D3e3jBULGq+mdFftvaA59t/0wI4aWKjnwEvaotUgTzMVRQU90DKoP50/km 82au8x7GTohyO7wqBnmQCgvBt0xwtvB3e6VGVWp9uvUqbRaPm/ZsFVQkdz3/tdry NaR56nxjazFiLJeKUE1dZe5bBLHXSTeMf7wtRcO7o61wjwqYP8mYjT5pl+CCHP9U ZfGhhNW8BDsSTKV4565q4unVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+hnCWE dBkejIQfr/0sgrxJMbtUMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAiwn0QVU6VW4A63vuHH2jE0fz1r5KvhrhpUtHzSelenWKdv7fuDs0 NPswvdh19MnzRJyh3P0X44LjlXiz85cEb/BMNsXSV/pMFLmiqrPChTcInftPw7xo kVezms6fkDbk+AHafKufmq1GDaQqcTBjdff9jjfcy1qRdRZGUUy3wzk7IIxzzRQX o8/JdXe59pGjHa+vkeGJyUqXB+ckqy7Q210qrj8K9U5WVLFoZW7fygOSuuzHt6IT KeuXUP82cVHIl0p+pqnxoP+ANNTc23QwO+0gGKC6KAMckKBkXEul5jnTIIpQ++24 6XDhNNcXYKJ2B1lz+nguhH5ZDm3R2Xln -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:44 2025 by rpki-client