$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: G1UVhIU9DilNxuyccpyenKvzRSRkuUQjCMvj4W3189k= Subject key identifier: E5:1C:D9:F3:83:04:EF:93:65:D5:C9:CD:C2:18:A2:D1:12:97:F4:60 Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 3B Signing time: Thu 24 Apr 2025 23:18:49 +0000 Manifest this update: Thu 24 Apr 2025 23:18:49 +0000 Manifest next update: Thu 01 May 2025 23:18:49 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: v1y2wbgUWUbhoFesbZt46VcoWDL0gfadGzUb+kFsuZM=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Apr 24 23:18:49 2025 GMT Not After : May 1 23:18:49 2025 GMT Subject: CN=680ac6d9-7539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:19:d6:09:80:14:3e:c6:ed:82:b1:2a:c0:7b: 06:4a:37:2c:cd:02:5e:98:46:aa:24:8b:94:a5:4a: 09:b7:70:60:ad:8d:60:69:3c:7f:d2:ff:7c:31:17: 23:00:12:29:5d:5c:58:5b:6a:48:77:25:3b:d2:40: 74:b9:6b:02:f1:2f:e5:ef:0c:ba:60:47:af:4f:94: 38:94:b8:ee:31:bf:62:28:7e:01:f7:75:cd:c8:4c: c2:8e:12:cf:b5:7f:df:30:e9:49:9d:01:71:86:ba: 2d:6d:e1:2c:3b:0b:7a:46:23:66:04:5e:89:97:c8: a7:e8:10:0b:3e:fa:c3:e7:b7:1d:36:53:19:1b:cf: ea:74:23:6e:4f:45:1f:f2:7a:6c:2a:48:90:a3:e1: 12:56:33:72:56:c6:7f:78:8a:bd:3f:0b:72:cd:60: a4:7a:51:b0:25:5b:42:79:a5:e0:4a:72:20:1a:3a: 66:30:f3:de:d0:99:c3:8c:34:b2:8a:e6:4e:79:16: 56:dd:4f:1a:16:42:b1:f8:a1:4a:8a:63:52:d6:45: 84:f1:d6:14:86:cc:2f:38:8b:c0:e7:4a:97:cb:80: 99:0f:77:7f:81:5b:83:fc:59:cc:1a:8e:4e:d2:98: b9:ca:3c:71:ae:85:57:eb:4d:08:eb:c2:47:c6:36: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1C:D9:F3:83:04:EF:93:65:D5:C9:CD:C2:18:A2:D1:12:97:F4:60 X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:48:ff:2c:4f:90:e7:e7:62:55:72:aa:60:5d:2f:64:a6:cd: 9c:01:2b:7b:e0:49:e1:23:75:58:db:93:c2:1e:79:1f:56:51: cc:d0:46:fd:dd:2e:e9:73:6d:fb:22:9e:a5:96:8b:e3:57:f1: b9:a8:cf:b2:73:56:ed:31:e0:1b:30:59:25:75:a2:11:44:87: 1b:9b:db:a5:59:e6:f7:cf:c0:a9:1a:1d:eb:07:bc:7d:25:20: 69:c2:7f:1d:f9:c7:b6:40:61:22:80:b3:80:59:5e:10:b6:b7: 22:59:6c:e5:ca:00:b9:6a:23:c4:45:f2:07:c5:c6:f1:9b:32: c5:f8:6a:41:b5:7e:d4:f3:93:ad:6a:7a:19:be:8f:d7:43:ef: d0:62:17:3f:cc:bc:1c:0a:07:67:eb:57:d2:02:33:60:ac:53: 9e:43:67:0e:b7:cd:c4:74:29:8c:f8:f6:bc:5d:34:ee:01:4d: cb:78:d6:d0:59:79:2e:cc:e4:2c:72:c7:6f:d6:d9:90:1a:2e: 20:72:43:48:18:e3:e2:ff:fc:8f:b0:4c:92:4b:a6:4c:79:07: 78:9f:b0:27:58:82:5f:76:77:68:4b:15:df:e9:ce:0a:b6:9b: 0f:7e:f5:25:6c:c1:9c:5e:34:ef:8a:58:ff:97:52:5f:c2:99: 34:03:e0:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTA0MjQyMzE4NDlaFw0yNTA1MDEyMzE4NDlaMBgxFjAUBgNV BAMTDTY4MGFjNmQ5LTc1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjGdYJgBQ+xu2CsSrAewZKNyzNAl6YRqoki5SlSgm3cGCtjWBpPH/S/3wxFyMA EildXFhbakh3JTvSQHS5awLxL+XvDLpgR69PlDiUuO4xv2IofgH3dc3ITMKOEs+1 f98w6UmdAXGGui1t4Sw7C3pGI2YEXomXyKfoEAs++sPntx02Uxkbz+p0I25PRR/y emwqSJCj4RJWM3JWxn94ir0/C3LNYKR6UbAlW0J5peBKciAaOmYw897QmcOMNLKK 5k55FlbdTxoWQrH4oUqKY1LWRYTx1hSGzC84i8DnSpfLgJkPd3+BW4P8Wcwajk7S mLnKPHGuhVfrTQjrwkfGNi+1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5RzZ84ME 75Nl1cnNwhii0RKX9GAwHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB QzgzLzIwQTYxMzdFQ0M5OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0 Sk04Q1NlZC1YbU5mZXRwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJI/yxPkOfnYlVyqmBdL2SmzZwBK3vgSeEjdVjbk8IeeR9WUczQRv3d LulzbfsinqWWi+NX8bmoz7JzVu0x4BswWSV1ohFEhxub26VZ5vfPwKkaHesHvH0l IGnCfx35x7ZAYSKAs4BZXhC2tyJZbOXKALlqI8RF8gfFxvGbMsX4akG1ftTzk61q ehm+j9dD79BiFz/MvBwKB2frV9ICM2CsU55DZw63zcR0KYz49rxdNO4BTct41tBZ eS7M5Cxyx2/W2ZAaLiByQ0gY4+L//I+wTJJLpkx5B3ifsCdYgl92d2hLFd/pzgq2 mw9+9SVswZxeNO+KWP+XUl/CmTQD4Gw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:27 2025 by rpki-client