$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json) Hash identifier: Rtb0moLC53LIh4Y4XTTuqXGGTzpKhbUC+iFRNqqrhBw= Subject key identifier: 9E:0E:4F:56:1F:6B:59:08:55:38:71:DE:05:25:E0:A8:E2:11:35:7E Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft Manifest number: 0421 Signing time: Fri 25 Apr 2025 00:09:40 +0000 Manifest this update: Fri 25 Apr 2025 00:09:39 +0000 Manifest next update: Fri 02 May 2025 00:09:39 +0000 Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: /sEgU+bMCmMuw+5CTzqBJ6SbRathVCMwwVDvsxDUQY0=) 2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: +D56I4b7nWl9oFXCZLe1V1DGfoh8L2BH9bwrOgGWI6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD Validity Not Before: Apr 25 00:09:39 2025 GMT Not After : May 2 00:09:39 2025 GMT Subject: CN=680ad2c3-b23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:b1:3d:0d:d6:1b:47:1b:cc:a0:26:20:8e: a6:59:8b:9d:57:e7:24:3d:f2:55:09:cc:e5:12:8f: f5:14:5c:40:f8:b5:0b:be:09:72:69:cc:3c:33:2b: f5:af:5b:54:9f:b7:51:71:13:89:44:5c:47:0a:a8: 2f:9b:d2:ef:cd:4c:a6:00:0f:b5:8b:55:f2:f4:75: fa:3c:90:a4:9d:ed:17:73:66:e5:40:f1:c1:b4:0b: a0:36:17:5d:0a:25:bb:7f:a7:1f:fd:7e:1d:ea:59: fb:69:07:51:bd:db:34:73:d2:d7:3d:9a:af:08:7e: f9:a6:d8:c6:9d:d1:52:23:39:a6:68:d2:8d:ac:8d: fc:b4:88:3a:d0:5f:2e:b9:4f:b1:47:2e:c1:03:44: 13:ed:ca:31:e3:09:43:8c:5d:7b:7b:b9:0e:d3:be: aa:8f:03:80:a6:f8:c5:26:e6:66:db:54:bb:7b:cf: 7b:7f:7f:73:48:67:1c:89:b9:9f:9c:a2:26:5d:51: 4c:9f:33:05:41:4e:77:5c:21:52:b6:69:28:1b:56: a8:55:33:f6:dd:22:59:95:9c:45:77:4a:a3:62:d6: 05:21:0d:ec:ea:99:40:fc:7d:bd:ca:a1:08:a3:3c: 97:83:38:5e:a7:57:13:28:07:cb:17:e0:d7:3e:08: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0E:4F:56:1F:6B:59:08:55:38:71:DE:05:25:E0:A8:E2:11:35:7E X509v3 Authority Key Identifier: keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:b8:c0:28:87:41:2a:35:87:fb:a3:05:1f:ab:35:5e:e7:cb: ae:03:78:30:8c:4c:5e:4b:59:56:f1:94:7f:7e:1d:1e:2d:1f: 29:9f:88:47:f2:45:be:64:e1:42:70:51:07:68:e5:fb:fb:ac: d5:42:e1:30:70:b9:bb:a2:87:cd:6d:d5:3a:56:76:84:d1:58: 3b:df:5c:cc:bd:24:84:b7:97:16:e3:90:d9:96:35:ad:d1:b6: 49:ba:47:07:73:01:dc:3c:17:b5:e0:87:20:1d:01:94:e0:fb: 2c:81:b0:9c:c7:1d:86:67:c9:c0:bc:1e:94:39:52:70:ba:0d: f6:12:39:d8:5c:07:04:b3:05:c3:95:14:be:31:ba:65:ba:be: 0f:0d:5f:30:b8:e6:7f:9d:11:84:83:f7:0e:7d:2c:f4:b6:82: 46:a8:7b:0c:8b:7a:6a:82:6b:be:ee:74:5d:0a:5b:dc:7c:14: 59:ec:8b:2b:c2:c6:73:17:b9:eb:37:9b:d7:27:c5:38:34:29: 32:14:31:56:cd:23:81:50:f4:46:13:26:05:b8:a7:6d:5b:63: 5c:b8:b9:f1:c5:f5:87:af:df:f5:3f:0d:fa:11:1d:e6:08:a1: 69:0b:b5:66:68:ad:4f:82:b6:79:17:53:96:d5:4f:de:ab:ef: e1:e1:f7:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMTcxMTAvBgNVBAUTKDM5QkFGOTAzRkIyMzBEQjY1QUVCNDJGNjdDOUYzRjM2 MDMwQzdERkQwHhcNMjUwNDI1MDAwOTM5WhcNMjUwNTAyMDAwOTM5WjAYMRYwFAYD VQQDEw02ODBhZDJjMy1iMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg2xPQ3WG0cbzKAmII6mWYudV+ckPfJVCczlEo/1FFxA+LULvglyacw8Myv1 r1tUn7dRcROJRFxHCqgvm9LvzUymAA+1i1Xy9HX6PJCkne0Xc2blQPHBtAugNhdd CiW7f6cf/X4d6ln7aQdRvds0c9LXPZqvCH75ptjGndFSIzmmaNKNrI38tIg60F8u uU+xRy7BA0QT7cox4wlDjF17e7kO076qjwOApvjFJuZm21S7e897f39zSGccibmf nKImXVFMnzMFQU53XCFStmkoG1aoVTP23SJZlZxFd0qjYtYFIQ3s6plA/H29yqEI ozyXgzhep1cTKAfLF+DXPgieYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4OT1Yf a1kIVThx3gUl4KjiETV+MB8GA1UdIwQYMBaAFDm6+QP7Iw22WutC9nyfPzYDDH39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExNy9BQzZGNjg0MjVG NkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRiWmE2MEwyZko4X05nTU1m ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09icjVBX3NqRGJaYTYwTDJmSjhfTmdNTWZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExNy9BQzZGNjg0MjVGNkUxMUVDQjYxNTkzNzlDNEY5QUUwMi9PYnI1QV9zakRi WmE2MEwyZko4X05nTU1mZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsuMAoh0EqNYf7owUfqzVe58uuA3gwjExeS1lW8ZR/fh0eLR8pn4hH 8kW+ZOFCcFEHaOX7+6zVQuEwcLm7oofNbdU6VnaE0Vg731zMvSSEt5cW45DZljWt 0bZJukcHcwHcPBe14IcgHQGU4PssgbCcxx2GZ8nAvB6UOVJwug32EjnYXAcEswXD lRS+Mbplur4PDV8wuOZ/nRGEg/cOfSz0toJGqHsMi3pqgmu+7nRdClvcfBRZ7Isr wsZzF7nrN5vXJ8U4NCkyFDFWzSOBUPRGEyYFuKdtW2NcuLnxxfWHr9/1Pw36ER3m CKFpC7VmaK1PgrZ5F1OW1U/eq+/h4ff4 -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:01 2025 by rpki-client