$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft File: atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json) Hash identifier: bZYZn1kMMme5cImCMV0J7zBoVKm4Sap9qr8rO8gys2Y= Subject key identifier: 67:F5:79:E6:23:7C:89:E2:83:BE:06:18:22:C6:79:14:18:59:E2:D2 Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D Certificate issuer: /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft Manifest number: EE Signing time: Fri 25 Apr 2025 04:26:12 +0000 Manifest this update: Fri 25 Apr 2025 04:26:12 +0000 Manifest next update: Fri 02 May 2025 04:26:12 +0000 Files and hashes: 1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: t0r4g2qCfbuFXBl3pes92RH1ICP+AboVzOmg8TZVtGA=) 2: 8EE39CBEBD1B11EE9256E851C4F9AE02.roa (hash: jRdYoSLqX1McavAvcMe6uOX0PZVOdCEP8k8+NHeutBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Validity Not Before: Apr 25 04:26:12 2025 GMT Not After : May 2 04:26:12 2025 GMT Subject: CN=680b0ee4-b8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4a:01:f3:e0:6d:bd:67:d7:f2:0c:1d:1c:69: 3e:5a:5d:1e:89:4d:10:20:3c:d3:3c:b9:a4:80:b9: 0c:ca:9a:15:ea:10:a4:d0:b6:ee:ce:65:e5:7d:37: 44:63:4d:20:2a:52:75:ec:b2:81:c9:13:ca:59:5b: b3:17:0e:4d:40:2e:61:54:d4:0c:9e:0e:48:47:32: 68:9d:43:29:7d:c3:b0:52:42:37:bf:3b:79:a4:d4: 3a:aa:13:e8:63:d1:2e:7f:fc:3c:22:4c:8a:94:d9: fe:96:30:2e:65:48:e8:5b:53:43:74:ab:43:99:b6: fd:6d:a0:5a:1f:e0:3e:0c:64:f6:df:e9:50:64:41: 6d:3e:b1:e9:7b:48:6e:b9:e7:2b:00:49:a1:75:d0: e6:7b:cd:99:7b:29:91:2a:ba:aa:d4:b3:20:5a:63: e9:86:1e:f5:21:be:3d:4d:ae:fd:8d:46:af:31:ac: 13:66:6f:e0:f3:33:07:50:2f:b7:9b:78:bd:7d:14: cf:4c:c3:50:61:a5:e3:08:4f:d2:4d:e4:ca:b1:7f: d7:f7:fa:96:9a:24:f5:33:41:bd:cc:8e:60:ec:32: 2f:77:2a:2a:13:1c:7c:ac:da:51:83:33:83:1c:3f: 35:6a:05:aa:f2:7c:cd:9d:4c:c2:91:0a:39:0c:09: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F5:79:E6:23:7C:89:E2:83:BE:06:18:22:C6:79:14:18:59:E2:D2 X509v3 Authority Key Identifier: keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c3:4f:b3:b3:68:e0:19:29:77:47:06:dc:ba:47:37:fd:b1: d8:da:cc:e4:5d:45:ae:df:c8:7b:2b:9c:79:77:06:6d:22:f3: 83:64:90:30:06:77:88:da:3d:3a:6b:67:2c:ea:db:b2:af:0a: 45:97:37:36:10:a8:5a:60:e1:f1:48:36:b4:e7:a0:00:cb:a5: cc:8d:1e:b8:f4:26:9b:4f:3d:f9:c2:79:cb:1f:fe:82:24:26: 0f:45:9f:41:dd:8b:02:7e:88:fe:fd:dd:02:8b:08:34:f7:55: e7:41:07:92:9c:7f:3d:ac:e7:f5:4b:6a:86:94:4d:db:6b:3b: 49:a9:b2:13:82:d9:7d:ed:0c:ba:90:7f:82:0a:c2:c2:6d:c1: 4b:49:00:de:46:4d:6a:af:3a:df:fd:d5:21:f6:a2:f4:75:9e: 78:38:da:fc:88:e8:31:4f:09:a5:e2:56:ab:71:30:96:b7:d8: da:06:3d:b6:0c:32:b7:1b:7c:79:87:45:76:7f:4a:f0:f3:5b: 66:b4:7a:0c:9a:9a:4a:91:f6:f5:b9:6c:03:58:b1:26:37:9f: f0:ae:d2:6b:83:a3:6a:9e:02:ce:e6:b6:a9:cd:b4:18:ef:1c: ea:f9:40:17:28:23:33:29:13:af:76:96:db:f2:04:19:02:e3: e7:30:46:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4RkMxMTAvBgNVBAUTKDZBREFGQkEyOTk2ODMwQzUxRDY4MUMzMjEyRDA0QjVD NzI0QzEzMUQwHhcNMjUwNDI1MDQyNjEyWhcNMjUwNTAyMDQyNjEyWjAYMRYwFAYD VQQDEw02ODBiMGVlNC1iOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EoB8+BtvWfX8gwdHGk+Wl0eiU0QIDzTPLmkgLkMypoV6hCk0LbuzmXlfTdE Y00gKlJ17LKByRPKWVuzFw5NQC5hVNQMng5IRzJonUMpfcOwUkI3vzt5pNQ6qhPo Y9Euf/w8IkyKlNn+ljAuZUjoW1NDdKtDmbb9baBaH+A+DGT23+lQZEFtPrHpe0hu uecrAEmhddDme82ZeymRKrqq1LMgWmPphh71Ib49Ta79jUavMawTZm/g8zMHUC+3 m3i9fRTPTMNQYaXjCE/STeTKsX/X9/qWmiT1M0G9zI5g7DIvdyoqExx8rNpRgzOD HD81agWq8nzNnUzCkQo5DAkTyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf1eeYj fInig74GGCLGeRQYWeLSMB8GA1UdIwQYMBaAFGra+6KZaDDFHWgcMhLQS1xyTBMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhGQy9GNzM5QTRGOEJE MTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01NVWRhQnd5RXRCTFhISk1F eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0cjdvcGxvTU1VZGFCd3lFdEJMWEhKTUV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhGQy9GNzM5QTRGOEJEMTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01N VWRhQnd5RXRCTFhISk1FeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2w0+zs2jgGSl3Rwbcukc3/bHY2szkXUWu38h7K5x5dwZtIvODZJAw BneI2j06a2cs6tuyrwpFlzc2EKhaYOHxSDa056AAy6XMjR649CabTz35wnnLH/6C JCYPRZ9B3YsCfoj+/d0Ciwg091XnQQeSnH89rOf1S2qGlE3baztJqbITgtl97Qy6 kH+CCsLCbcFLSQDeRk1qrzrf/dUh9qL0dZ54ONr8iOgxTwml4larcTCWt9jaBj22 DDK3G3x5h0V2f0rw81tmtHoMmppKkfb1uWwDWLEmN5/wrtJrg6NqngLO5rapzbQY 7xzq+UAXKCMzKROvdpbb8gQZAuPnMEZ7 -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:15 2025 by rpki-client