$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: bLu+91jEQoMNJ2Cez4dqSYyHaAoOp66eGI94NxwQxJY= Subject key identifier: 40:BC:DE:E1:86:C0:BA:A6:40:3F:ED:3E:2C:17:7C:07:8E:25:8B:62 Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: 9C Signing time: Thu 24 Apr 2025 21:46:57 +0000 Manifest this update: Thu 24 Apr 2025 21:46:57 +0000 Manifest next update: Thu 01 May 2025 21:46:57 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: ND4N2WCmr/uiVWnv0Mhzp2AUKceO/OlsiE/5sNZlLK0=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Apr 24 21:46:57 2025 GMT Not After : May 1 21:46:57 2025 GMT Subject: CN=680ab151-19a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e7:71:b7:c3:17:64:67:ef:7f:10:1a:96:3d: 9b:84:71:de:e0:57:a4:bf:48:23:80:55:05:7a:ee: 47:a9:6a:be:16:6d:6c:9c:20:95:20:cb:6e:39:d0: 47:27:42:01:a1:7a:d4:a5:f0:8b:db:a9:9b:42:f7: 39:6a:88:ba:bc:56:7c:40:ea:38:a6:cc:51:e9:6e: 19:df:42:4c:81:08:46:62:f7:81:e9:08:0f:fb:a8: 35:cf:f7:b7:d4:6f:b0:d8:b9:65:95:98:4b:b3:79: fe:d8:cb:fd:f8:8d:39:08:f3:51:82:d1:46:10:23: 38:94:75:2f:7d:57:58:13:4d:62:1d:78:6f:69:1a: d7:ba:fd:02:d1:0e:6d:e9:cd:aa:be:e2:c0:43:be: ed:f7:da:c0:63:2f:ad:ba:29:97:d7:d1:bb:e0:90: 40:3c:56:c0:2f:b9:58:03:ee:0f:bd:f6:79:65:b4: 32:56:44:9d:71:4b:27:31:43:6e:bd:1f:a0:38:a1: 9b:42:68:c3:62:41:a8:0d:ac:01:73:bd:e3:82:58: 5c:4e:f6:8b:84:ba:19:51:4f:1c:7b:05:64:d6:c9: b8:05:1e:17:b6:a5:66:c7:a4:ba:c6:1e:58:84:17: 7f:13:66:29:cf:e2:2a:61:e7:fb:60:0b:25:af:9a: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BC:DE:E1:86:C0:BA:A6:40:3F:ED:3E:2C:17:7C:07:8E:25:8B:62 X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b7:2d:fb:03:33:49:29:a2:55:2f:a3:6b:06:34:29:8c:39: 08:eb:9b:68:d4:52:f4:c6:78:9b:29:61:34:c2:a6:06:e8:72: 6b:42:e7:06:27:52:c1:34:f9:63:cf:22:9a:e2:b3:d5:1d:3d: c6:82:ce:7d:0f:b7:5a:e3:5c:cb:76:96:5d:06:5b:56:31:2e: 01:52:78:3b:9b:da:3a:66:53:91:e1:00:a5:37:cb:d9:f4:4c: a0:35:f7:dc:1e:b8:b5:86:c3:97:de:54:29:17:dc:dc:54:02: 90:7a:ed:ed:9b:65:7d:9e:57:a6:68:eb:e5:54:f7:59:57:e9: 6b:5d:de:03:b5:6c:0d:bc:bf:90:31:14:26:a6:4d:77:c0:5b: 45:3a:17:b0:ba:f2:a9:14:1f:de:c3:61:49:e6:4c:71:59:63: 62:6e:fb:b5:b0:8f:2d:d7:e1:66:a1:23:55:20:57:78:2b:72: bf:18:cb:93:26:37:65:31:7a:5d:fd:87:a9:6a:7b:a8:24:5a: 71:12:d5:ff:8f:f7:a0:bf:0a:80:cb:76:62:af:14:4a:22:bd: 57:24:37:fa:2e:ab:2b:bb:e6:97:6d:4c:bf:36:aa:1f:c2:ca: d9:23:2f:50:06:a9:2e:1f:38:c9:da:58:ea:f2:24:bc:46:fb: 0f:60:a5:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjUwNDI0MjE0NjU3WhcNMjUwNTAxMjE0NjU3WjAYMRYwFAYD VQQDEw02ODBhYjE1MS0xOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnedxt8MXZGfvfxAalj2bhHHe4Fekv0gjgFUFeu5HqWq+Fm1snCCVIMtuOdBH J0IBoXrUpfCL26mbQvc5aoi6vFZ8QOo4psxR6W4Z30JMgQhGYveB6QgP+6g1z/e3 1G+w2LlllZhLs3n+2Mv9+I05CPNRgtFGECM4lHUvfVdYE01iHXhvaRrXuv0C0Q5t 6c2qvuLAQ77t99rAYy+tuimX19G74JBAPFbAL7lYA+4PvfZ5ZbQyVkSdcUsnMUNu vR+gOKGbQmjDYkGoDawBc73jglhcTvaLhLoZUU8cewVk1sm4BR4XtqVmx6S6xh5Y hBd/E2Ypz+IqYef7YAslr5pFRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC83uGG wLqmQD/tPiwXfAeOJYtiMB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgty37AzNJKaJVL6NrBjQpjDkI65to1FL0xnibKWE0wqYG6HJrQucG J1LBNPljzyKa4rPVHT3Ggs59D7da41zLdpZdBltWMS4BUng7m9o6ZlOR4QClN8vZ 9EygNffcHri1hsOX3lQpF9zcVAKQeu3tm2V9nlemaOvlVPdZV+lrXd4DtWwNvL+Q MRQmpk13wFtFOhewuvKpFB/ew2FJ5kxxWWNibvu1sI8t1+FmoSNVIFd4K3K/GMuT JjdlMXpd/YepanuoJFpxEtX/j/egvwqAy3ZirxRKIr1XJDf6Lqsru+aXbUy/Nqof wsrZIy9QBqkuHzjJ2ljq8iS8RvsPYKUd -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:08 2025 by rpki-client