$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: /OITy1SKOxEa1j7VSOn4qE7DW7OhOlEKBzkBnVHI56o= Subject key identifier: 6E:31:A1:FF:0D:35:B1:26:F6:85:93:F0:74:04:99:E5:23:3C:08:EE Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 0868 Signing time: Thu 24 Apr 2025 20:32:26 +0000 Manifest this update: Thu 24 Apr 2025 20:32:26 +0000 Manifest next update: Thu 01 May 2025 20:32:26 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: xGSgrryvMlrlahjJlfeycF3lTaWIJaOc4sZMuxMQ/Kg=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: d1mOeGTfFGoxO3FpLGtyELB1KUYkFiEXG3WDXupnmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Apr 24 20:32:26 2025 GMT Not After : May 1 20:32:26 2025 GMT Subject: CN=680a9fda-901f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:93:ab:52:e2:ee:f5:8a:b0:46:6f:34:e3: aa:f8:b1:f8:fb:79:3a:6d:e9:81:5e:a1:fb:1b:54: fd:4a:60:ea:97:8a:03:ec:f3:b5:f8:55:5d:f0:8b: 4e:bf:a1:46:83:e8:37:f8:93:5c:d5:c1:ac:1f:4a: b1:b8:2d:83:f3:4b:61:a5:04:35:f6:14:15:f1:5c: 4d:25:73:05:9e:33:b1:25:39:d9:7e:72:2c:29:1a: f6:6d:50:6b:97:b4:80:cf:b4:46:3d:b5:3f:f0:b6: d2:b2:61:d6:2d:6c:91:c6:b5:f0:4c:35:bc:39:5e: 7c:d5:bd:79:14:1f:54:f1:21:03:22:c7:d0:77:41: fc:f9:b8:9f:ce:d9:0c:af:3b:19:7d:0d:a2:b9:c9: f2:a0:69:99:1d:73:fc:4b:2f:a8:dd:ea:bd:76:b1: 91:3d:a4:d9:ee:32:88:2e:9d:4d:1a:e7:22:a3:47: 2c:31:17:42:82:73:bf:39:85:89:79:06:c4:50:19: 73:c0:cb:70:16:b6:a2:e4:e6:f2:48:a9:f6:b7:cf: 2b:1f:ac:d1:1f:a0:ab:3a:74:07:24:74:03:f4:6a: 44:6f:1a:18:b7:1c:eb:ce:c2:5f:0d:be:e0:2e:c6: dc:b0:98:21:45:d0:d5:1c:bd:a1:00:20:f5:7f:e1: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:A1:FF:0D:35:B1:26:F6:85:93:F0:74:04:99:E5:23:3C:08:EE X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b6:18:17:38:ba:71:ef:90:c5:f0:81:37:a5:96:56:aa:ef: f5:c0:36:e7:a7:f4:da:12:f0:e6:15:6d:07:58:8d:42:d8:15: e7:e4:91:0b:8b:9e:d7:fb:ae:9c:ab:5e:a7:fc:fc:70:1b:de: 05:98:22:08:35:fd:75:ad:09:a0:37:00:7b:bd:26:bb:c7:5c: 9f:8d:50:0c:ee:c3:ae:e0:5a:c6:02:94:2c:a9:e3:e2:8f:52: 7e:de:a2:d7:e0:ce:9a:e8:95:98:49:ae:9b:c9:15:0c:4e:4a: c0:d4:e3:7d:6c:55:06:4e:8a:64:b3:ea:9e:4f:48:89:10:16: 6f:44:37:90:96:dd:14:83:91:c4:24:e6:08:62:2e:83:a1:4f: 72:9c:4f:ff:5f:3c:c0:e9:60:9c:ca:30:db:07:83:88:46:44: 88:0a:0d:3e:6d:e6:be:01:03:67:e7:77:a8:eb:41:b5:ec:4a: 97:c6:27:e2:d4:ce:1d:a4:d9:f8:27:dc:70:67:0a:23:a7:e3: a2:de:27:55:02:4c:c8:28:3a:21:65:c9:f6:7c:db:63:fc:01: e9:89:f6:5d:09:a0:f0:27:c6:5a:59:13:c8:83:d1:60:43:10: 37:25:71:52:37:40:0a:88:4f:ee:53:2a:b2:17:e8:3f:b5:96: 32:9c:97:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwNDI0MjAzMjI2WhcNMjUwNTAxMjAzMjI2WjAYMRYwFAYD VQQDEw02ODBhOWZkYS05MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCOTq1Li7vWKsEZvNOOq+LH4+3k6bemBXqH7G1T9SmDql4oD7PO1+FVd8ItO v6FGg+g3+JNc1cGsH0qxuC2D80thpQQ19hQV8VxNJXMFnjOxJTnZfnIsKRr2bVBr l7SAz7RGPbU/8LbSsmHWLWyRxrXwTDW8OV581b15FB9U8SEDIsfQd0H8+bifztkM rzsZfQ2iucnyoGmZHXP8Sy+o3eq9drGRPaTZ7jKILp1NGucio0csMRdCgnO/OYWJ eQbEUBlzwMtwFrai5ObySKn2t88rH6zRH6CrOnQHJHQD9GpEbxoYtxzrzsJfDb7g LsbcsJghRdDVHL2hACD1f+FozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4xof8N NbEm9oWT8HQEmeUjPAjuMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLthgXOLpx75DF8IE3pZZWqu/1wDbnp/TaEvDmFW0HWI1C2BXn5JEL i57X+66cq16n/PxwG94FmCIINf11rQmgNwB7vSa7x1yfjVAM7sOu4FrGApQsqePi j1J+3qLX4M6a6JWYSa6byRUMTkrA1ON9bFUGTopks+qeT0iJEBZvRDeQlt0Ug5HE JOYIYi6DoU9ynE//XzzA6WCcyjDbB4OIRkSICg0+bea+AQNn53eo60G17EqXxifi 1M4dpNn4J9xwZwojp+Oi3idVAkzIKDohZcn2fNtj/AHpifZdCaDwJ8ZaWRPIg9Fg QxA3JXFSN0AKiE/uUyqyF+g/tZYynJeg -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:14 2025 by rpki-client