$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: j7JsgmHFhjJiUfCqXhVsbY6nUdj0GuZbuQQJo63NrAc= Subject key identifier: B5:11:6E:74:D4:7B:C4:91:2A:AB:34:C6:BD:31:2A:B2:8C:E6:0C:71 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 0187 Signing time: Fri 25 Apr 2025 02:47:01 +0000 Manifest this update: Fri 25 Apr 2025 02:47:00 +0000 Manifest next update: Fri 02 May 2025 02:47:00 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: lnK3NT6k166Ai471F3/csT9p1iKFu8m6KBGfy6ygvVw=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Apr 25 02:47:00 2025 GMT Not After : May 2 02:47:00 2025 GMT Subject: CN=680af7a4-0e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:a8:e3:c1:48:c4:19:ba:f7:07:1f:62:50: 24:04:f7:88:81:dc:37:b6:7b:23:16:cc:dd:fd:0b: 65:a5:b1:78:e3:1f:4a:35:97:35:91:5b:45:30:68: 25:0a:a9:4f:80:0a:0b:17:d5:a9:a6:6a:92:b6:b1: 3d:29:c4:9f:83:b9:1e:48:0d:39:19:52:fc:85:9e: 77:49:d0:a3:5f:e0:02:b9:cb:30:7f:e6:f6:66:67: a0:88:3b:e3:f0:24:ea:52:75:ca:f2:89:46:ab:e6: 16:10:9b:94:6c:a1:fe:08:f3:55:67:32:0f:59:da: a5:e2:cf:1e:93:96:97:38:b3:b6:b8:08:26:2b:00: 50:53:1a:d4:a6:ba:f6:6c:0f:4b:2c:d6:87:13:22: cd:3f:99:a3:99:13:d4:38:4d:ef:2d:5c:b5:c5:b2: 00:38:2c:5b:c3:37:a5:3f:56:a3:44:bd:2b:03:92: b0:3a:36:94:f8:d7:1c:cf:1a:fa:2a:e8:7e:ae:89: 33:21:b7:aa:b1:97:e0:ab:60:fa:1b:67:74:e3:89: f6:61:e7:0c:2f:d1:ab:b9:73:cc:f9:1e:82:7e:73: f7:48:07:6b:4b:74:8c:57:23:4e:5a:43:bb:67:5a: e2:03:60:2b:04:d8:7d:26:3a:e3:17:d0:db:84:7e: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:11:6E:74:D4:7B:C4:91:2A:AB:34:C6:BD:31:2A:B2:8C:E6:0C:71 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:4d:7f:30:3c:9e:bd:80:ed:e3:aa:6d:de:80:f0:25:3e:a2: 80:63:21:12:ed:fe:59:08:08:cc:a2:30:a2:98:da:e0:5c:e6: 33:51:13:cb:d7:b0:f7:02:cc:03:b5:b5:b4:76:3b:d4:c6:ce: 2d:b4:ba:17:15:5f:2f:23:dc:d1:9c:74:80:38:d5:bf:c1:d0: 1f:5e:74:b1:67:0c:e5:e5:3f:78:5f:9c:9e:63:27:25:e5:68: cc:4f:ea:0e:e6:cf:b8:79:99:20:32:e2:5a:3d:7f:46:e4:19: aa:86:bf:4d:7d:ea:ad:ba:14:78:8d:c8:cf:24:48:9c:99:a7: 17:76:10:cc:74:3a:27:8e:c9:9f:72:8f:ac:65:fc:6f:79:9d: 23:7f:8c:f9:cb:b5:55:c5:16:e0:05:a1:ab:30:37:1a:3f:f0: 57:4e:e6:ee:84:34:56:b6:3b:32:e3:88:bb:f0:e9:be:a5:0e: 81:f0:5e:04:72:f9:f6:24:70:b1:e6:52:a9:62:b9:71:95:3e: 4d:44:20:5e:70:66:37:4a:ca:3f:06:a1:39:89:7f:a8:28:49: 9e:2d:02:1b:60:56:33:30:3e:4b:ec:80:63:77:bd:97:7b:d6: 16:9f:8c:f8:24:5f:04:99:3f:c2:33:88:3c:f5:68:ae:29:8e: d3:45:bb:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUwNDI1MDI0NzAwWhcNMjUwNTAyMDI0NzAwWjAYMRYwFAYD VQQDEw02ODBhZjdhNC0wZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYyo48FIxBm69wcfYlAkBPeIgdw3tnsjFszd/QtlpbF44x9KNZc1kVtFMGgl CqlPgAoLF9WppmqStrE9KcSfg7keSA05GVL8hZ53SdCjX+ACucswf+b2ZmegiDvj 8CTqUnXK8olGq+YWEJuUbKH+CPNVZzIPWdql4s8ek5aXOLO2uAgmKwBQUxrUprr2 bA9LLNaHEyLNP5mjmRPUOE3vLVy1xbIAOCxbwzelP1ajRL0rA5KwOjaU+Ncczxr6 Kuh+rokzIbeqsZfgq2D6G2d044n2YecML9GruXPM+R6CfnP3SAdrS3SMVyNOWkO7 Z1riA2ArBNh9JjrjF9DbhH6+vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLURbnTU e8SRKqs0xr0xKrKM5gxxMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3TX8wPJ69gO3jqm3egPAlPqKAYyES7f5ZCAjMojCimNrgXOYzURPL 17D3AswDtbW0djvUxs4ttLoXFV8vI9zRnHSAONW/wdAfXnSxZwzl5T94X5yeYycl 5WjMT+oO5s+4eZkgMuJaPX9G5Bmqhr9NfeqtuhR4jcjPJEicmacXdhDMdDonjsmf co+sZfxveZ0jf4z5y7VVxRbgBaGrMDcaP/BXTubuhDRWtjsy44i78Om+pQ6B8F4E cvn2JHCx5lKpYrlxlT5NRCBecGY3Sso/BqE5iX+oKEmeLQIbYFYzMD5L7IBjd72X e9YWn4z4JF8EmT/CM4g89WiuKY7TRbtr -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:15 2025 by rpki-client