$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: ++/aTY6bG+6m+mw0Y8wT9Dsv4DqxCs7y88MprtRZPDs= Subject key identifier: 7C:C6:09:E4:3A:1D:C6:E5:2A:FD:AF:0C:91:EE:19:64:17:A4:8B:8E Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 98 Signing time: Fri 25 Apr 2025 05:18:15 +0000 Manifest this update: Fri 25 Apr 2025 05:18:15 +0000 Manifest next update: Fri 02 May 2025 05:18:15 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: /SEBK15hz3aL9DYy8bhrid8Vshaguo4EFCUmR/9MtsM=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: AFifu1YP8FleMFw0L6x+s4qXy39ubAWolO6tvcH8Ipg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Apr 25 05:18:15 2025 GMT Not After : May 2 05:18:15 2025 GMT Subject: CN=680b1b17-9581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:be:9b:87:93:51:9a:1c:f1:6b:67:b3:97: 48:a9:50:b6:77:1e:43:a0:1b:f2:7d:4e:32:22:8c: f1:72:a6:ec:fd:ec:e1:cf:44:e7:57:89:19:b7:80: 96:d8:53:bf:f3:3a:d2:87:07:96:7c:82:b4:44:8e: a1:dc:2a:0f:a3:3b:c5:db:9f:cb:a2:3a:e6:fc:c7: 4d:c3:a2:b8:6f:02:44:a5:2b:28:70:13:3a:af:6f: 4a:d0:fe:d8:94:ef:c8:93:b5:cd:33:24:73:4c:e1: 74:f6:17:34:54:a7:af:fb:47:24:55:cc:00:74:da: 89:dd:82:fa:44:b3:f1:dc:32:e2:47:c7:ee:eb:01: 35:d5:81:38:ee:e9:65:4d:61:e2:0f:ac:ef:23:1d: e3:2c:a1:b4:ad:25:e2:e9:ad:35:9c:d4:10:53:b3: 93:6f:e1:4b:4b:8c:27:23:ea:dc:f4:87:b6:4e:95: cd:eb:4a:77:8e:43:0d:66:c6:a0:d7:ab:c5:40:00: 35:06:1d:86:a4:f6:27:5b:88:d5:da:c5:fc:6e:18: 74:56:eb:f4:f7:5c:51:d3:fe:2d:ca:a2:85:75:df: 96:ff:8b:d4:90:63:92:a5:df:d1:19:94:2c:fb:6b: 81:3f:e4:01:c5:64:45:7c:21:be:46:d9:91:1d:15: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C6:09:E4:3A:1D:C6:E5:2A:FD:AF:0C:91:EE:19:64:17:A4:8B:8E X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:e6:99:01:19:8c:13:ba:98:9d:dc:ac:f8:69:fe:50:c0:33: 5a:b4:b1:fb:36:a1:1a:75:14:f8:ae:8b:59:9f:1c:30:bf:27: 1f:92:e8:83:4c:82:b9:e9:e7:30:e1:f3:28:b8:c2:a9:44:46: 67:c3:b9:0a:9e:ef:09:1a:02:ba:3b:bf:35:69:35:27:bb:13: 78:7a:af:fa:73:49:22:16:e7:0e:b6:1e:71:8b:32:88:c3:26: c1:85:05:58:0a:39:32:e1:73:c0:f7:ed:be:11:de:32:69:29: ad:b3:8d:28:0c:0e:f2:2b:c5:16:23:38:5b:64:f3:7c:70:2e: 52:c3:e1:d0:b0:16:9c:21:4b:af:a4:59:99:2d:a3:42:bf:54: 3e:5c:6f:7d:5b:f7:23:9e:e1:96:42:a1:87:81:c0:f8:16:08: fa:c3:18:ac:ae:9d:3a:9b:76:5d:ab:86:d3:c5:29:23:6e:18: 3f:00:fb:3c:d6:af:9b:25:5d:a9:51:52:00:ab:66:ed:71:ff: 7d:68:3e:58:43:e7:83:ba:e7:92:4d:fd:37:28:d7:56:cd:ca: ef:82:35:53:80:4c:9a:0f:33:e7:6e:52:22:f6:46:6f:e2:6a: a5:1b:69:e8:ee:e6:3a:3c:ec:2f:f7:2c:4a:cc:dd:07:9e:21: 90:3a:5b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUwNDI1MDUxODE1WhcNMjUwNTAyMDUxODE1WjAYMRYwFAYD VQQDEw02ODBiMWIxNy05NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iS+m4eTUZoc8Wtns5dIqVC2dx5DoBvyfU4yIozxcqbs/ezhz0TnV4kZt4CW 2FO/8zrShweWfIK0RI6h3CoPozvF25/Lojrm/MdNw6K4bwJEpSsocBM6r29K0P7Y lO/Ik7XNMyRzTOF09hc0VKev+0ckVcwAdNqJ3YL6RLPx3DLiR8fu6wE11YE47ull TWHiD6zvIx3jLKG0rSXi6a01nNQQU7OTb+FLS4wnI+rc9Ie2TpXN60p3jkMNZsag 16vFQAA1Bh2GpPYnW4jV2sX8bhh0Vuv091xR0/4tyqKFdd+W/4vUkGOSpd/RGZQs +2uBP+QBxWRFfCG+RtmRHRXjOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzGCeQ6 HcblKv2vDJHuGWQXpIuOMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDh5pkBGYwTupid3Kz4af5QwDNatLH7NqEadRT4rotZnxwwvycfkuiD TIK56ecw4fMouMKpREZnw7kKnu8JGgK6O781aTUnuxN4eq/6c0kiFucOth5xizKI wybBhQVYCjky4XPA9+2+Ed4yaSmts40oDA7yK8UWIzhbZPN8cC5Sw+HQsBacIUuv pFmZLaNCv1Q+XG99W/cjnuGWQqGHgcD4Fgj6wxisrp06m3Zdq4bTxSkjbhg/APs8 1q+bJV2pUVIAq2btcf99aD5YQ+eDuueSTf03KNdWzcrvgjVTgEyaDzPnblIi9kZv 4mqlG2no7uY6POwv9yxKzN0HniGQOlts -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:47 2025 by rpki-client