$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: 312nQs8h/3x6HW+ceeeNq3qL9GYqd70ops5cfzrFacE= Subject key identifier: F2:C7:71:7B:72:D3:D3:DC:06:C6:BB:C4:15:66:5C:EE:5D:B7:AC:A4 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0AC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0ABC Signing time: Thu 24 Apr 2025 19:22:56 +0000 Manifest this update: Thu 24 Apr 2025 19:22:56 +0000 Manifest next update: Thu 01 May 2025 19:22:56 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: cC8YqSCx5YygpXwnu1TbXiWMhSUt9RJkgn9pSp8adC4=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2760 (0xac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Apr 24 19:22:56 2025 GMT Not After : May 1 19:22:56 2025 GMT Subject: CN=680a8f90-91a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:aa:28:cb:a7:2c:33:1b:c5:4c:bc:57:a4: be:09:bd:b8:6f:65:0f:87:c4:9f:17:b6:d3:5d:61: c6:14:27:76:52:61:e9:01:7c:b5:f3:c8:74:b0:90: 9a:87:38:9d:7c:77:6e:b5:7c:1d:82:ee:b1:9d:df: ee:10:2b:e7:52:d9:85:3c:68:a1:b8:03:95:0d:a5: 04:c1:fa:e9:41:4d:91:4d:d5:a7:d0:c3:28:e6:98: 0b:47:76:5d:5a:16:46:70:ea:d7:67:0f:58:23:42: 5d:60:0a:b0:d5:02:27:82:1d:cd:66:9b:76:09:51: d1:b0:8b:bc:f2:cb:67:c5:26:30:f2:fa:c9:9e:99: 12:d2:5f:cd:8e:58:c1:94:c7:18:ca:fa:35:03:ba: ba:31:29:ec:04:6d:d4:39:c1:3c:fb:94:f9:bb:1e: 78:6e:1d:15:47:21:fe:bf:3b:d4:95:d8:4a:5d:78: 59:c7:23:a4:25:e6:6b:c1:e8:ad:d9:43:2d:c4:bd: 46:42:02:33:66:db:cc:a4:ba:3d:ba:d5:54:48:a1: 56:98:04:25:77:e1:f0:66:45:78:f9:26:e1:ff:44: 5b:8b:e9:d7:e0:1d:67:20:e2:63:4a:46:35:38:e3: 8e:96:2a:3c:b6:f8:69:08:d9:6a:27:f6:a5:a3:1d: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:71:7B:72:D3:D3:DC:06:C6:BB:C4:15:66:5C:EE:5D:B7:AC:A4 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4e:95:20:9b:cc:6f:85:ea:42:bd:f8:a0:24:fb:a1:79:0d: a8:69:52:6d:ef:ed:41:09:5c:f8:97:71:d0:99:7d:3a:c6:ff: aa:36:1b:2d:4d:37:b3:a8:22:ab:e2:2d:1b:3c:f6:2a:16:fa: 2a:45:eb:a6:71:47:ad:67:4b:2b:a0:0d:b9:3b:01:67:b4:10: 5d:55:03:2a:65:b1:33:ca:2b:2c:1e:2c:a6:a2:c4:50:f0:7a: b1:8e:86:67:6e:dc:8b:9c:90:7f:c8:f2:fd:27:b5:20:0a:e2: 42:d1:cd:df:18:87:b0:1c:a7:7b:e6:b7:e2:b3:32:3b:06:5f: ef:8e:70:dd:ea:78:22:0a:f5:30:96:d8:7d:b8:5b:61:b0:de: f5:b9:a7:88:6b:fe:dc:46:dd:1c:a2:01:14:16:9b:5f:1b:f4: d9:85:8c:93:e4:17:d3:b6:2b:a8:93:00:d9:40:9b:78:fe:1e: 0e:64:30:62:25:56:43:ba:33:cc:bd:63:e6:f2:36:72:d9:77: bb:94:aa:93:fc:d7:2c:f8:9c:46:ae:72:84:7d:c7:a6:ad:a3: 38:3b:03:69:65:21:ca:13:44:d8:5a:c8:2a:16:ad:03:1c:61: 19:ad:3a:9f:ea:ae:58:5d:8c:08:64:a8:62:aa:e0:a1:a7:ec: 50:be:a4:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwNDI0MTkyMjU2WhcNMjUwNTAxMTkyMjU2WjAYMRYwFAYD VQQDEw02ODBhOGY5MC05MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/mqKMunLDMbxUy8V6S+Cb24b2UPh8SfF7bTXWHGFCd2UmHpAXy188h0sJCa hzidfHdutXwdgu6xnd/uECvnUtmFPGihuAOVDaUEwfrpQU2RTdWn0MMo5pgLR3Zd WhZGcOrXZw9YI0JdYAqw1QIngh3NZpt2CVHRsIu88stnxSYw8vrJnpkS0l/NjljB lMcYyvo1A7q6MSnsBG3UOcE8+5T5ux54bh0VRyH+vzvUldhKXXhZxyOkJeZrweit 2UMtxL1GQgIzZtvMpLo9utVUSKFWmAQld+HwZkV4+Sbh/0Rbi+nX4B1nIOJjSkY1 OOOOlio8tvhpCNlqJ/alox1DNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLHcXty 09PcBsa7xBVmXO5dt6ykMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABTpUgm8xvhepCvfigJPuheQ2oaVJt7+1BCVz4l3HQmX06xv+qNhst TTezqCKr4i0bPPYqFvoqReumcUetZ0sroA25OwFntBBdVQMqZbEzyissHiymosRQ 8HqxjoZnbtyLnJB/yPL9J7UgCuJC0c3fGIewHKd75rfiszI7Bl/vjnDd6ngiCvUw lth9uFthsN71uaeIa/7cRt0cogEUFptfG/TZhYyT5BfTtiuokwDZQJt4/h4OZDBi JVZDujPMvWPm8jZy2Xe7lKqT/Ncs+JxGrnKEfcemraM4OwNpZSHKE0TYWsgqFq0D HGEZrTqf6q5YXYwIZKhiquChp+xQvqT5 -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:21 2025 by rpki-client