$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft File: rSHioIh9gBBYg2nxR4WWAoR3zb4.mft (raw, json) Hash identifier: RLUQBcMwu42RFRwWPGWyzzp+dea/6fFMEahWqw+sDiw= Subject key identifier: C1:B0:6A:F5:B3:05:42:58:0B:CA:E9:4A:12:41:DE:CC:A8:4A:01:31 Authority key identifier: AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE Certificate issuer: /CN=A913344F/serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Certificate serial: 10AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft Manifest number: 10A4 Signing time: Thu 24 Apr 2025 17:19:58 +0000 Manifest this update: Thu 24 Apr 2025 17:19:57 +0000 Manifest next update: Thu 01 May 2025 17:19:57 +0000 Files and hashes: 1: rSHioIh9gBBYg2nxR4WWAoR3zb4.crl (hash: X0cfZX18UPl8CG/L3OCgLKSa8Ix1BaaDsU8X+KJ5ftc=) 2: 2CDBC1B0251111E997B74770C4F9AE02.roa (hash: /+y+JZvdgDvleCapwUXYIThVyUcKdFkPONIIfNbMybY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4267 (0x10ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Validity Not Before: Apr 24 17:19:57 2025 GMT Not After : May 1 17:19:57 2025 GMT Subject: CN=680a72be-7742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:50:bd:b1:54:61:f4:6d:c5:e7:1a:db:be:39: 3b:04:76:30:6b:3c:a2:95:7f:55:60:8c:30:bc:33: 54:fd:e1:a7:66:9f:e5:8c:1c:9e:d2:48:d1:53:b6: 4e:48:f1:9f:24:c0:fb:62:11:fd:bb:75:7c:51:a4: a1:7c:e8:02:7e:a2:db:d8:f3:15:81:2a:09:5e:e6: 6b:e7:12:dd:23:34:88:4f:9d:72:1b:01:a2:a7:5c: 3b:bd:fa:1a:94:06:fb:c8:c7:1a:4e:c7:b0:c0:29: d8:1d:90:cd:37:bb:e5:09:39:d2:40:d6:4a:fb:d0: 22:b2:28:73:30:b8:9d:ce:df:73:9a:38:fc:a6:21: 4a:c9:e3:80:8b:01:d1:f5:92:ce:90:fc:cb:56:e3: b4:70:19:21:6c:8c:00:73:a8:05:8f:9e:6a:07:49: 70:de:f8:49:2e:af:d9:d6:6e:65:f3:8d:63:53:10: 6c:08:18:4e:13:0b:ce:7d:ca:f7:ec:db:a6:d5:85: d4:60:8d:46:b9:b7:4d:68:1f:6d:c2:c8:43:b1:b9: b6:eb:97:86:a6:8a:4b:4d:58:75:74:a2:ea:82:7f: 22:1a:b5:29:75:1b:33:00:af:a7:7b:a6:8d:01:09: 85:52:1e:25:67:4f:b0:56:c8:a7:cf:09:e2:7b:9a: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B0:6A:F5:B3:05:42:58:0B:CA:E9:4A:12:41:DE:CC:A8:4A:01:31 X509v3 Authority Key Identifier: keyid:AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c4:17:19:2a:cb:6b:ce:26:ce:fb:3b:12:2e:4f:62:3c:05: 69:91:b1:61:66:df:1a:f0:7b:07:ab:b0:11:19:fa:aa:c6:f4: aa:3e:ec:fe:61:e5:76:8d:06:01:1f:a3:16:39:f5:7c:1b:16: 3f:a8:92:2d:b2:d9:a7:9a:23:52:4e:18:4f:65:02:5a:2b:13: b7:49:8d:19:6f:dd:99:42:33:3c:a3:22:4a:d0:71:8c:e8:af: 6e:7f:eb:5c:e1:c1:57:b0:44:54:2e:66:26:4e:38:7e:0e:82: c0:d3:1d:6a:a7:c8:3a:46:17:03:4f:21:b7:fa:82:89:03:d1: 68:de:01:8c:51:78:d3:90:44:a7:e5:df:ff:e7:32:be:b4:40: ad:a3:71:cc:c8:cb:a7:ec:e7:c5:95:57:0a:d0:db:fe:7c:22: 1e:68:64:ab:b3:3c:db:be:cb:7e:c3:40:9f:2d:55:2c:8b:a1: b2:1b:75:f2:dc:5c:58:86:bc:a7:9c:a5:ed:8c:8e:ec:b8:36: 33:b7:58:cd:37:6a:59:ef:4d:76:58:98:6a:0f:38:14:bd:93: f3:ba:2e:85:4d:93:61:83:5f:db:da:d5:b0:d1:ce:99:c2:d0: ef:be:54:2e:88:b1:7c:94:98:3f:28:03:e7:17:04:d3:b5:be: f9:66:ba:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKEFEMjFFMkEwODg3RDgwMTA1ODgzNjlGMTQ3ODU5NjAy ODQ3N0NEQkUwHhcNMjUwNDI0MTcxOTU3WhcNMjUwNTAxMTcxOTU3WjAYMRYwFAYD VQQDEw02ODBhNzJiZS03NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lC9sVRh9G3F5xrbvjk7BHYwazyilX9VYIwwvDNU/eGnZp/ljBye0kjRU7ZO SPGfJMD7YhH9u3V8UaShfOgCfqLb2PMVgSoJXuZr5xLdIzSIT51yGwGip1w7vfoa lAb7yMcaTsewwCnYHZDNN7vlCTnSQNZK+9AisihzMLidzt9zmjj8piFKyeOAiwHR 9ZLOkPzLVuO0cBkhbIwAc6gFj55qB0lw3vhJLq/Z1m5l841jUxBsCBhOEwvOfcr3 7Num1YXUYI1GubdNaB9twshDsbm265eGpopLTVh1dKLqgn8iGrUpdRszAK+ne6aN AQmFUh4lZ0+wVsinzwnie5qxxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGwavWz BUJYC8rpShJB3syoSgExMB8GA1UdIwQYMBaAFK0h4qCIfYAQWINp8UeFlgKEd82+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri85NEZGQkFBMDI1 MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdCQllnMm54UjRXV0FvUjN6 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSGlvSWg5Z0JCWWcybnhSNFdXQW9SM3piNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri85NEZGQkFBMDI1MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdC QllnMm54UjRXV0FvUjN6YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIxBcZKstrzibO+zsSLk9iPAVpkbFhZt8a8HsHq7ARGfqqxvSqPuz+ YeV2jQYBH6MWOfV8GxY/qJItstmnmiNSThhPZQJaKxO3SY0Zb92ZQjM8oyJK0HGM 6K9uf+tc4cFXsERULmYmTjh+DoLA0x1qp8g6RhcDTyG3+oKJA9Fo3gGMUXjTkESn 5d//5zK+tECto3HMyMun7OfFlVcK0Nv+fCIeaGSrszzbvst+w0CfLVUsi6GyG3Xy 3FxYhrynnKXtjI7suDYzt1jNN2pZ7012WJhqDzgUvZPzui6FTZNhg1/b2tWw0c6Z wtDvvlQuiLF8lJg/KAPnFwTTtb75Zrok -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:14 2025 by rpki-client