$ rpki-client -vvf rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft File: a4h-elixD-3igEteKeziwpnCf6E.mft (raw, json) Hash identifier: g3LI+Jwxrxy0I2U1VZQaJseueI5u2OcMe9wCyXPiFfg= Subject key identifier: 8B:CE:CD:C6:6F:EE:E4:CC:EC:EA:73:82:E2:B3:B1:F3:55:2D:86:76 Authority key identifier: 6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1 Certificate issuer: /CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft Manifest number: 0143 Signing time: Thu 01 May 2025 03:18:07 +0000 Manifest this update: Thu 01 May 2025 03:18:07 +0000 Manifest next update: Thu 08 May 2025 03:18:07 +0000 Files and hashes: 1: a4h-elixD-3igEteKeziwpnCf6E.crl (hash: DQfSoVgab/lXipYajtM/udSo2qDpz4mGD/Q66HYCgbU=) 2: 26D3EB963B1211EE8ED76E25C4F9AE02.roa (hash: qv3tAt9BON7buTRTVhuMsm15F4b64BUNH1NHpvJGTQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 03:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CBB2, serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1 Validity Not Before: May 1 03:18:07 2025 GMT Not After : May 8 03:18:07 2025 GMT Subject: CN=6812e7ef-7136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:74:de:19:f2:93:e7:62:68:6d:46:ed:cc:a9: b2:da:d0:b3:24:bf:87:f9:09:d4:42:59:64:06:c3: 5d:90:63:87:67:22:5a:6f:c9:a5:e6:c7:2f:e2:71: 9e:09:51:4d:61:f9:08:e9:5e:12:59:6e:7c:13:2b: 87:1b:0e:8e:fb:e5:0a:d9:ef:d6:ea:21:5f:60:ae: f8:b6:88:82:d7:be:d9:f4:f5:00:c3:ff:12:5a:ec: c2:a5:24:bd:5a:4b:cc:f2:74:1a:a9:53:01:1b:95: 54:53:bc:85:3d:6b:d6:9b:a3:80:92:ea:93:a1:b3: f5:eb:bd:07:c2:16:b5:7b:71:d1:19:be:49:47:00: 74:c2:b0:1e:25:7c:97:6e:fe:a8:01:24:4f:8f:c6: 23:5f:5d:4e:a9:7c:1c:85:d2:5c:34:9c:78:68:c3: 07:62:8b:74:a0:69:ce:3f:f4:48:8e:34:8b:a1:80: 30:e9:08:9d:c0:de:61:17:cf:74:33:c8:60:23:84: 0d:dc:3f:b4:7c:ce:42:3c:19:87:9b:1d:db:a5:80: b8:bc:57:a9:b4:95:c1:51:fb:6f:a8:60:a1:c3:7d: 57:b9:67:17:a2:63:33:1f:92:66:b9:6f:4a:6b:58: a5:0e:12:3b:7b:66:9f:da:25:14:19:51:c5:cd:fc: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CE:CD:C6:6F:EE:E4:CC:EC:EA:73:82:E2:B3:B1:F3:55:2D:86:76 X509v3 Authority Key Identifier: keyid:6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e8:28:1c:0d:d8:42:2a:05:bd:7c:7c:8c:dc:c6:72:0c:93: f0:a7:fb:ec:17:92:b5:55:c9:b1:c7:7c:ad:ee:3e:19:b8:5f: 02:38:43:54:9e:8f:09:12:0e:62:9b:9c:fc:4e:ad:a5:69:39: 4b:7a:0d:c4:6a:48:f9:e5:0c:46:e2:4f:aa:d5:ce:be:3e:31: b9:67:bc:6c:f5:41:09:e6:e5:e6:bb:90:20:47:be:97:36:d4: 0a:d6:17:88:96:7e:ac:2c:65:87:3e:72:5c:86:a0:d6:d1:9c: a2:28:b4:70:85:2d:1d:c6:25:57:0d:51:5d:8e:8d:3a:c4:51: d5:b5:b1:74:bf:a6:05:97:6a:7b:71:3b:db:70:5f:95:a6:d3: ee:bc:ef:52:29:d1:20:86:29:81:4f:d6:3b:35:eb:df:22:09: 0e:ac:0b:1e:0c:aa:d7:6d:4e:25:69:61:e9:cd:37:1d:42:a7: 43:8f:ee:42:00:74:9a:b5:b6:00:11:0e:03:45:89:6c:6f:7c: 98:23:76:87:a9:d1:4b:f1:23:27:08:fb:e3:59:20:c4:65:e1: e1:5e:9f:9b:fa:8b:e5:62:74:33:60:ef:75:e5:dd:34:92:57: 22:16:4f:9d:62:e0:bf:28:e6:22:5d:ac:ba:db:e3:d7:84:54: 0b:24:29:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCQjIxMTAvBgNVBAUTKDZCODg3RTdBNThCMTBGRURFMjgwNEI1RTI5RUNFMkMy OTlDMjdGQTEwHhcNMjUwNTAxMDMxODA3WhcNMjUwNTA4MDMxODA3WjAYMRYwFAYD VQQDEw02ODEyZTdlZi03MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XTeGfKT52JobUbtzKmy2tCzJL+H+QnUQllkBsNdkGOHZyJab8ml5scv4nGe CVFNYfkI6V4SWW58EyuHGw6O++UK2e/W6iFfYK74toiC177Z9PUAw/8SWuzCpSS9 WkvM8nQaqVMBG5VUU7yFPWvWm6OAkuqTobP1670Hwha1e3HRGb5JRwB0wrAeJXyX bv6oASRPj8YjX11OqXwchdJcNJx4aMMHYot0oGnOP/RIjjSLoYAw6QidwN5hF890 M8hgI4QN3D+0fM5CPBmHmx3bpYC4vFeptJXBUftvqGChw31XuWcXomMzH5JmuW9K a1ilDhI7e2af2iUUGVHFzfx4+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvOzcZv 7uTM7OpzguKzsfNVLYZ2MB8GA1UdIwQYMBaAFGuIfnpYsQ/t4oBLXins4sKZwn+h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0JCMi9CNDAzMjIzMDNC MTExMUVFOTYxOUJCODBDNEY5QUUwMi9hNGgtZWxpeEQtM2lnRXRlS2V6aXdwbkNm NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0aC1lbGl4RC0zaWdFdGVLZXppd3BuQ2Y2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0JCMi9CNDAzMjIzMDNCMTExMUVFOTYxOUJCODBDNEY5QUUwMi9hNGgtZWxpeEQt M2lnRXRlS2V6aXdwbkNmNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo6CgcDdhCKgW9fHyM3MZyDJPwp/vsF5K1Vcmxx3yt7j4ZuF8COENU no8JEg5im5z8Tq2laTlLeg3Eakj55QxG4k+q1c6+PjG5Z7xs9UEJ5uXmu5AgR76X NtQK1heIln6sLGWHPnJchqDW0ZyiKLRwhS0dxiVXDVFdjo06xFHVtbF0v6YFl2p7 cTvbcF+VptPuvO9SKdEghimBT9Y7NevfIgkOrAseDKrXbU4laWHpzTcdQqdDj+5C AHSatbYAEQ4DRYlsb3yYI3aHqdFL8SMnCPvjWSDEZeHhXp+b+ovlYnQzYO915d00 klciFk+dYuC/KOYiXay62+PXhFQLJCk0 -----END CERTIFICATE-----Generated at Sat May 3 00:00:27 2025 by rpki-client