$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft File: 05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json) Hash identifier: SYkcL3s3RoR7eVmtVf2/11v7eXKyaEbQ85l2RjjFhX8= Subject key identifier: 3F:E2:E8:1E:54:ED:93:E8:92:FC:32:4A:B7:8A:08:B4:0C:B0:BF:B3 Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft Manifest number: 0130 Signing time: Fri 25 Apr 2025 03:37:02 +0000 Manifest this update: Fri 25 Apr 2025 03:37:01 +0000 Manifest next update: Fri 02 May 2025 03:37:01 +0000 Files and hashes: 1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: yNyM9Q6sQevBO8kg7dFrFOnXscvLtbrhA9QjYtUD2mk=) 2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: qeJWAX6cW8g+xhKRaW5Fw41h91VMY7XDGYvJyjy3HwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Validity Not Before: Apr 25 03:37:01 2025 GMT Not After : May 2 03:37:01 2025 GMT Subject: CN=680b035d-6c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:1a:dc:7a:67:9d:3c:ef:4a:50:ac:14:48: cf:f2:dc:cb:f2:59:4c:c3:1a:9b:67:c9:ee:40:bb: 7c:55:27:9c:99:68:96:7f:62:4d:eb:bb:ca:ee:14: c6:79:03:15:91:7f:68:87:e2:a1:11:91:77:3b:13: 7a:ba:d1:62:9e:23:b6:53:eb:b9:9e:f6:21:63:ae: c8:7a:1b:be:94:16:5c:51:8d:90:e2:32:a3:af:ee: 39:30:0b:46:5a:87:a3:87:86:7f:71:4f:17:4e:9f: 7b:26:c2:d7:4e:db:af:76:78:2e:3f:35:0c:64:a0: b5:31:f1:61:3b:77:19:92:6d:69:a6:78:f0:bb:a8: 95:57:9d:3e:b5:fe:68:e7:09:7b:96:cc:a7:a8:93: df:42:9a:9a:84:1e:c4:3f:3d:f7:c9:a9:44:0c:25: 5a:22:ab:99:bd:de:1e:31:93:5b:07:f7:52:e2:33: e9:08:5c:6e:2d:f5:35:aa:f3:d4:d8:b5:1b:61:ee: 51:36:93:7c:09:ca:89:f2:9b:08:cc:82:31:43:b1: 26:66:f9:e7:d7:2f:18:30:96:fb:d7:0b:26:a9:b1: 03:e8:02:be:78:53:6a:05:7c:2b:f5:23:db:d0:41: e8:fd:db:72:15:c4:b6:33:ff:3c:4e:49:88:6f:7d: 13:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:E8:1E:54:ED:93:E8:92:FC:32:4A:B7:8A:08:B4:0C:B0:BF:B3 X509v3 Authority Key Identifier: keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:6c:2a:e3:a8:6a:f5:bc:bc:c7:4f:42:2d:15:98:7f:bc:72: 55:2c:e9:43:fc:b7:66:c2:3a:92:50:d8:16:5a:af:fa:82:f0: 89:2a:57:18:b6:c7:24:1e:e5:0d:5e:74:f8:54:62:b2:d2:6d: 56:e0:24:54:07:c3:8d:b2:23:bf:49:83:be:47:1c:2a:83:e1: a7:62:94:14:8d:05:8c:96:1e:bd:fd:3f:d7:53:d3:88:2e:9c: 96:e6:bd:6e:6a:0c:7d:24:77:31:7e:29:d4:01:a4:b6:90:69: 44:ce:df:b3:42:88:21:a0:47:77:89:19:2a:77:98:89:2b:c4: 8f:bf:c5:a6:f7:35:7e:0a:8e:88:b3:f9:d0:b8:2d:1c:e4:9f: 5a:e0:40:a2:a7:9a:80:f4:7d:72:48:b6:76:02:ba:8c:d8:63: 03:d0:16:f9:d1:ac:4b:da:1d:2d:c0:16:fc:a1:e6:9a:ac:66: 6a:5d:00:95:4c:0e:be:a2:c3:a9:d8:4e:4d:ec:1e:f0:13:55: 63:5e:5e:25:f7:e3:3a:b1:73:7a:91:c1:25:38:56:a4:ae:eb: 77:a6:7c:08:49:c8:6a:87:ac:7f:e0:39:fd:3d:33:b7:3b:a0: 8e:ee:76:52:09:88:ea:6d:95:71:38:6b:5b:a0:3d:91:e0:3d: 9d:81:2d:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCRTIxMTAvBgNVBAUTKEQzOUExMEU2MUE4Q0E5NTA0RURCMTU0ODY5MzZCMzc3 NDNBMjREQ0UwHhcNMjUwNDI1MDMzNzAxWhcNMjUwNTAyMDMzNzAxWjAYMRYwFAYD VQQDEw02ODBiMDM1ZC02YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVQa3HpnnTzvSlCsFEjP8tzL8llMwxqbZ8nuQLt8VSecmWiWf2JN67vK7hTG eQMVkX9oh+KhEZF3OxN6utFiniO2U+u5nvYhY67Iehu+lBZcUY2Q4jKjr+45MAtG Woejh4Z/cU8XTp97JsLXTtuvdnguPzUMZKC1MfFhO3cZkm1ppnjwu6iVV50+tf5o 5wl7lsynqJPfQpqahB7EPz33yalEDCVaIquZvd4eMZNbB/dS4jPpCFxuLfU1qvPU 2LUbYe5RNpN8CcqJ8psIzIIxQ7EmZvnn1y8YMJb71wsmqbED6AK+eFNqBXwr9SPb 0EHo/dtyFcS2M/88TkmIb30TlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/i6B5U 7ZPokvwySreKCLQMsL+zMB8GA1UdIwQYMBaAFNOaEOYajKlQTtsVSGk2s3dDok3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJFMi82Q0I5QTk2NjUx OTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFWQk8yeFZJYVRhemQwT2lU YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1b1E1aHFNcVZCTzJ4VklhVGF6ZDBPaVRjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJFMi82Q0I5QTk2NjUxOTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFW Qk8yeFZJYVRhemQwT2lUYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSbCrjqGr1vLzHT0ItFZh/vHJVLOlD/LdmwjqSUNgWWq/6gvCJKlcY tsckHuUNXnT4VGKy0m1W4CRUB8ONsiO/SYO+Rxwqg+GnYpQUjQWMlh69/T/XU9OI LpyW5r1uagx9JHcxfinUAaS2kGlEzt+zQoghoEd3iRkqd5iJK8SPv8Wm9zV+Co6I s/nQuC0c5J9a4ECip5qA9H1ySLZ2ArqM2GMD0Bb50axL2h0twBb8oeaarGZqXQCV TA6+osOp2E5N7B7wE1VjXl4l9+M6sXN6kcElOFakrut3pnwISchqh6x/4Dn9PTO3 O6CO7nZSCYjqbZVxOGtboD2R4D2dgS2g -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:02 2025 by rpki-client