$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: msg2rRZKcroGGHf9sbKwMSFutNms7aZY2j7h14xfuos= Subject key identifier: F8:C1:2C:04:4E:5C:E6:8C:27:84:C1:60:DE:13:60:A2:9F:83:52:65 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 07C3 Signing time: Thu 24 Apr 2025 20:57:15 +0000 Manifest this update: Thu 24 Apr 2025 20:57:15 +0000 Manifest next update: Thu 01 May 2025 20:57:15 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: JxkhNj6xUcUHz7o0HkTww6nS+bp+Maqv7Xl0O1dpmHg=) 2: D7A207C2F33611EAA449F44CC4F9AE02.roa (hash: mHz2DdFQ0RZ5vfKso12AKZq1LAYQSiKV2aIOicI25cQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Apr 24 20:57:15 2025 GMT Not After : May 1 20:57:15 2025 GMT Subject: CN=680aa5ab-fc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:d4:c8:07:68:48:c8:23:56:44:10:fd:10: 87:60:a4:43:f0:04:69:95:7d:59:3d:6a:d9:86:59: 42:f2:cb:e3:25:ca:20:9a:a3:c3:71:3a:94:76:02: 75:2d:d8:4b:e2:ae:7d:f9:da:2d:6a:8a:3d:46:33: f1:ea:bc:46:f6:7f:c7:42:04:68:cc:a1:6e:c6:d6: 4a:f3:86:5c:a9:2c:11:a8:a5:f9:4d:ac:95:89:52: 8b:bf:e1:a7:d4:2a:56:08:1f:ed:aa:98:52:1e:09: 54:c5:28:95:a3:9a:47:2e:49:84:ad:fd:55:6e:58: ae:e0:68:00:91:67:78:d2:95:ae:be:32:79:5c:a6: 66:7b:b0:05:24:d2:4a:be:4e:6b:80:74:3c:03:f3: b0:2d:79:66:fe:54:b6:4e:48:14:c0:72:42:5d:20: 35:fb:87:06:56:e1:28:44:83:e3:84:c7:a0:12:97: 6f:80:3a:86:4c:0a:1f:2e:cc:d6:92:9e:25:b9:44: 9f:b2:27:89:42:85:09:72:9e:69:a6:60:92:b6:02: 04:f0:71:9a:53:d7:65:95:9c:70:7b:e3:5b:b2:48: ab:6b:e9:4c:57:7c:95:ad:9b:bd:fa:ed:21:db:19: 93:f2:fc:94:79:55:a5:5c:48:ed:7d:12:48:05:30: 93:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C1:2C:04:4E:5C:E6:8C:27:84:C1:60:DE:13:60:A2:9F:83:52:65 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:be:4d:22:25:cf:a0:cd:7e:49:9d:d2:47:b2:a0:90:40:75: 00:d7:51:30:81:59:ca:7d:eb:4e:8c:a1:8d:d0:f0:20:cd:9d: 30:a7:24:c2:b9:5a:f2:4f:37:10:ae:0b:9b:8b:66:70:5a:3e: 3f:ec:7c:dc:a6:78:73:dc:1f:9e:ae:38:a7:eb:48:27:49:34: 0b:45:1a:24:98:5b:92:22:d5:75:7f:15:51:26:17:9d:45:2f: 33:a7:bc:30:0b:19:ac:63:43:fe:93:bd:20:30:b1:2a:5f:d6: 07:1d:7e:03:4e:10:66:af:35:97:d4:34:51:73:6e:02:ec:88: 01:ce:91:b6:40:7e:10:45:5f:91:e5:42:37:3b:e5:f8:19:3f: bb:c4:ec:2c:a9:d9:7b:43:f1:56:85:15:e3:00:f7:2b:69:23: bd:f4:c5:8e:e3:fb:20:66:2c:06:d9:3e:f2:ec:e0:5a:2c:63: 6c:12:ef:85:34:6b:53:34:ee:36:bd:85:d3:c4:e8:07:ad:c3: f5:52:b6:74:06:a3:88:24:99:c2:a6:c8:a3:1c:97:d5:08:79: 3b:7d:e4:42:7c:ed:53:6f:90:60:c3:f4:73:b9:8f:c8:bb:da: 63:ba:61:71:c3:51:80:22:ad:c7:3c:c5:3e:91:cb:52:2d:9c: 4f:4b:98:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUwNDI0MjA1NzE1WhcNMjUwNTAxMjA1NzE1WjAYMRYwFAYD VQQDEw02ODBhYTVhYi1mYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/7UyAdoSMgjVkQQ/RCHYKRD8ARplX1ZPWrZhllC8svjJcogmqPDcTqUdgJ1 LdhL4q59+dotaoo9RjPx6rxG9n/HQgRozKFuxtZK84ZcqSwRqKX5TayViVKLv+Gn 1CpWCB/tqphSHglUxSiVo5pHLkmErf1Vbliu4GgAkWd40pWuvjJ5XKZme7AFJNJK vk5rgHQ8A/OwLXlm/lS2TkgUwHJCXSA1+4cGVuEoRIPjhMegEpdvgDqGTAofLszW kp4luUSfsieJQoUJcp5ppmCStgIE8HGaU9dllZxwe+Nbskira+lMV3yVrZu9+u0h 2xmT8vyUeVWlXEjtfRJIBTCTfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjBLARO XOaMJ4TBYN4TYKKfg1JlMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOvk0iJc+gzX5JndJHsqCQQHUA11EwgVnKfetOjKGN0PAgzZ0wpyTC uVryTzcQrgubi2ZwWj4/7Hzcpnhz3B+erjin60gnSTQLRRokmFuSItV1fxVRJhed RS8zp7wwCxmsY0P+k70gMLEqX9YHHX4DThBmrzWX1DRRc24C7IgBzpG2QH4QRV+R 5UI3O+X4GT+7xOwsqdl7Q/FWhRXjAPcraSO99MWO4/sgZiwG2T7y7OBaLGNsEu+F NGtTNO42vYXTxOgHrcP1UrZ0BqOIJJnCpsijHJfVCHk7feRCfO1Tb5Bgw/RzuY/I u9pjumFxw1GAIq3HPMU+kctSLZxPS5hN -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:50 2025 by rpki-client