$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: 7qVfMrHYfk1ZJ86+Pr9zS7S0cD/gw5vv1FUxe9ZGCSw= Subject key identifier: 7E:DC:40:4E:87:81:36:4E:F2:0D:A7:EA:ED:F2:B4:5C:D9:6E:79:E4 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 0187 Signing time: Fri 25 Apr 2025 02:45:59 +0000 Manifest this update: Fri 25 Apr 2025 02:45:59 +0000 Manifest next update: Fri 02 May 2025 02:45:59 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: eLHYlF8sYzu2l12g1UpuqiqQdRTnjuys9SPt3pWyzp0=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: no5JHEwzoUf5nvkFpy4aPPlAbOxQ45tBYTX5GqKN34s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Apr 25 02:45:59 2025 GMT Not After : May 2 02:45:59 2025 GMT Subject: CN=680af767-223b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:71:e8:1e:80:fc:73:43:aa:18:9f:1d:82: 27:23:1f:e8:45:af:db:28:3d:ce:0f:b9:f3:20:80: 2d:aa:ca:e1:34:68:c7:f3:1c:b8:3a:cf:9e:26:76: b4:c9:19:e7:c5:1c:01:58:d2:c0:71:25:09:b6:8d: d7:31:b2:03:a4:a7:fd:c6:24:aa:fd:fd:95:28:d8: 9a:5c:1f:4e:bd:48:63:cd:37:9c:e5:9e:96:dd:09: 68:07:04:6f:16:3e:29:8f:a9:d8:c4:e5:7a:d6:ac: 88:a6:bf:46:31:3d:89:88:69:da:92:8a:a9:44:20: 75:08:00:bc:a4:5a:fa:b4:81:23:fe:16:b4:4c:f0: 28:3f:00:4e:d1:a6:a8:26:40:32:a5:3b:3d:e2:22: d8:23:cf:c1:79:62:d3:45:1f:89:79:d2:c1:1a:54: 73:84:e0:ba:0d:20:0f:ef:31:4f:ba:a2:5e:84:65: f6:2b:a0:4b:2f:29:79:2d:3c:bc:58:79:09:e9:4c: 86:17:f9:6d:f0:4f:3c:a2:d6:4d:b0:c7:e1:40:23: ad:d7:15:51:87:80:a8:dc:d9:07:00:fa:50:07:b1: 9a:7c:19:1a:80:fe:6c:c2:e0:d6:b7:ee:21:1f:73: 69:15:73:29:8c:de:69:48:eb:aa:46:84:a0:6f:5e: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DC:40:4E:87:81:36:4E:F2:0D:A7:EA:ED:F2:B4:5C:D9:6E:79:E4 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ea:85:e8:40:9c:e0:41:07:a4:ae:d8:67:ed:14:01:37:48: c8:31:ff:86:df:a7:64:30:15:52:e9:0d:c0:25:7f:02:31:fe: c9:08:9d:4d:8d:be:77:a2:a5:b7:f6:a0:db:12:4e:f9:6c:f5: 1e:27:1d:0e:75:f9:14:d3:fe:52:49:c1:58:c9:f1:2d:67:f5: 88:be:89:e8:d2:15:c1:7b:29:14:f5:bb:e9:3c:3c:ec:d4:50: db:6b:05:87:57:19:25:8e:be:4c:ee:fc:6d:67:a6:fa:db:0c: cd:65:88:0a:47:6c:3d:0f:15:96:ac:ee:b4:e0:73:90:5e:31: 9e:83:bb:ab:e3:0d:5e:33:bb:46:0f:4f:97:b0:be:56:f6:31: 2b:44:a7:33:27:02:54:27:68:8f:c6:af:bb:45:44:a5:99:51: ee:58:64:8e:ed:6b:c0:14:99:a1:30:90:90:ff:6a:cd:b9:b9: 5f:09:42:a4:0c:18:45:a0:1c:1d:31:6c:28:05:57:9b:66:c2: 50:14:25:dc:b6:6f:af:24:a0:94:b4:b5:6f:ef:82:43:2a:45: b4:25:58:fc:7b:98:70:87:79:ab:0f:4f:13:b5:a2:39:b0:4a: 6c:6f:5b:b5:8c:f5:82:63:66:07:27:c7:4c:f0:b0:e7:c1:16: cd:61:ba:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUwNDI1MDI0NTU5WhcNMjUwNTAyMDI0NTU5WjAYMRYwFAYD VQQDEw02ODBhZjc2Ny0yMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB9x6B6A/HNDqhifHYInIx/oRa/bKD3OD7nzIIAtqsrhNGjH8xy4Os+eJna0 yRnnxRwBWNLAcSUJto3XMbIDpKf9xiSq/f2VKNiaXB9OvUhjzTec5Z6W3QloBwRv Fj4pj6nYxOV61qyIpr9GMT2JiGnakoqpRCB1CAC8pFr6tIEj/ha0TPAoPwBO0aao JkAypTs94iLYI8/BeWLTRR+JedLBGlRzhOC6DSAP7zFPuqJehGX2K6BLLyl5LTy8 WHkJ6UyGF/lt8E88otZNsMfhQCOt1xVRh4Co3NkHAPpQB7GafBkagP5swuDWt+4h H3NpFXMpjN5pSOuqRoSgb14vsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7cQE6H gTZO8g2n6u3ytFzZbnnkMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk6oXoQJzgQQekrthn7RQBN0jIMf+G36dkMBVS6Q3AJX8CMf7JCJ1N jb53oqW39qDbEk75bPUeJx0OdfkU0/5SScFYyfEtZ/WIvono0hXBeykU9bvpPDzs 1FDbawWHVxkljr5M7vxtZ6b62wzNZYgKR2w9DxWWrO604HOQXjGeg7ur4w1eM7tG D0+XsL5W9jErRKczJwJUJ2iPxq+7RUSlmVHuWGSO7WvAFJmhMJCQ/2rNublfCUKk DBhFoBwdMWwoBVebZsJQFCXctm+vJKCUtLVv74JDKkW0JVj8e5hwh3mrD08TtaI5 sEpsb1u1jPWCY2YHJ8dM8LDnwRbNYbq8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:34 2025 by rpki-client