$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: bhf4kd4QHHEZO8y6D3F7WHPbMMmAGRl4lAdgXyI5AaY= Subject key identifier: D8:05:EF:F5:6E:53:FC:24:4F:D1:55:B7:64:49:98:7A:4E:2E:3D:6B Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 1499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 148F Signing time: Thu 24 Apr 2025 16:53:40 +0000 Manifest this update: Thu 24 Apr 2025 16:53:40 +0000 Manifest next update: Thu 01 May 2025 16:53:40 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: niCZadSM9sySVIusn1eOD24UTNBelTBATmuipuZjoN0=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5273 (0x1499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: Apr 24 16:53:40 2025 GMT Not After : May 1 16:53:40 2025 GMT Subject: CN=680a6c94-6357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:74:e3:8a:d0:57:ba:89:4a:6c:bd:c0:b0: d2:4d:16:21:a7:47:01:41:ac:a6:d1:e0:72:81:41: 24:b8:1d:e2:54:e1:c2:89:e9:ef:ac:b9:98:d8:97: 02:ad:38:94:2f:d6:a5:27:bb:41:e6:15:d2:6a:51: 55:6d:4d:9f:2a:7e:e1:53:fa:d3:ba:a8:9a:f6:5e: 2c:5f:60:8f:a8:16:65:16:4e:5f:4e:92:50:00:38: 7a:3b:70:9a:6e:dd:27:10:9c:de:da:f9:de:50:e3: 39:5c:f0:9c:5f:81:5d:5c:70:eb:a5:eb:9c:6e:23: 29:bc:40:c8:17:72:a5:88:35:de:e5:91:e1:b4:53: 18:44:a1:eb:f3:5d:84:4e:67:de:e5:44:af:63:f9: f5:a3:64:db:35:61:aa:f0:6f:fb:61:98:14:6b:1b: cd:82:c7:46:84:3a:ea:d5:8b:87:fd:c1:59:b4:d1: 42:e3:cf:4f:53:e1:b9:39:03:f8:d2:f4:5b:5a:dc: 4a:bb:23:a7:b1:e4:df:db:b0:95:a8:57:6b:0c:1b: 88:c1:08:27:fb:28:eb:ec:67:2a:fd:99:e9:84:92: 1a:8c:75:11:2c:08:28:29:3f:24:26:d1:dd:1e:fa: bd:b4:cb:32:ee:8d:fb:d7:2f:b3:ef:0a:3e:91:ac: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:EF:F5:6E:53:FC:24:4F:D1:55:B7:64:49:98:7A:4E:2E:3D:6B X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:7e:9a:5c:3e:6c:9d:0b:f2:d0:99:5b:49:05:14:31:6c:d3: 63:35:ca:fa:a1:81:6f:ed:b8:8a:28:37:a7:a1:e1:9b:37:b1: 09:ab:f9:4c:ff:87:8f:59:0a:bc:df:07:8c:b1:a5:42:9c:ab: 8e:a6:f0:3e:b2:b2:b9:1c:4d:e3:52:83:ae:f1:3c:79:38:de: 0f:88:ae:54:73:96:4a:02:09:1f:8c:04:2b:03:87:bc:71:e7: 72:8e:7e:6d:46:a5:07:2e:06:0c:52:0d:18:cd:61:22:ab:2b: 27:f9:56:cf:04:62:6a:d4:a4:e1:37:fa:77:82:ad:a9:68:b3: 8e:1f:9b:2c:73:a2:09:73:40:1f:b4:de:48:14:78:f7:d0:90: 7d:f9:8e:e3:98:86:f2:b3:ca:51:09:01:d2:18:76:3b:d7:ef: ae:33:fe:03:39:7f:ad:da:62:f5:da:1b:d2:b4:78:55:84:b8: 22:0c:70:ef:a3:50:bf:07:1a:dd:73:5a:d5:e6:0d:b4:c7:da: f9:20:55:f5:7a:ee:54:65:bd:42:d2:83:53:53:66:22:cb:9c: d3:b7:ba:95:df:7f:a0:97:80:27:8e:fc:f5:48:9a:cd:11:79: 16:e0:a1:f3:53:f8:40:40:f0:c6:e0:83:d7:03:c3:af:8c:50: 68:ae:13:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjUwNDI0MTY1MzQwWhcNMjUwNTAxMTY1MzQwWjAYMRYwFAYD VQQDEw02ODBhNmM5NC02MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutR044rQV7qJSmy9wLDSTRYhp0cBQaym0eBygUEkuB3iVOHCienvrLmY2JcC rTiUL9alJ7tB5hXSalFVbU2fKn7hU/rTuqia9l4sX2CPqBZlFk5fTpJQADh6O3Ca bt0nEJze2vneUOM5XPCcX4FdXHDrpeucbiMpvEDIF3KliDXe5ZHhtFMYRKHr812E Tmfe5USvY/n1o2TbNWGq8G/7YZgUaxvNgsdGhDrq1YuH/cFZtNFC489PU+G5OQP4 0vRbWtxKuyOnseTf27CVqFdrDBuIwQgn+yjr7Gcq/ZnphJIajHURLAgoKT8kJtHd Hvq9tMsy7o371y+z7wo+kayzjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgF7/Vu U/wkT9FVt2RJmHpOLj1rMB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBifppcPmydC/LQmVtJBRQxbNNjNcr6oYFv7biKKDenoeGbN7EJq/lM /4ePWQq83weMsaVCnKuOpvA+srK5HE3jUoOu8Tx5ON4PiK5Uc5ZKAgkfjAQrA4e8 cedyjn5tRqUHLgYMUg0YzWEiqysn+VbPBGJq1KThN/p3gq2paLOOH5ssc6IJc0Af tN5IFHj30JB9+Y7jmIbys8pRCQHSGHY71++uM/4DOX+t2mL12hvStHhVhLgiDHDv o1C/Bxrdc1rV5g20x9r5IFX1eu5UZb1C0oNTU2Yiy5zTt7qV33+gl4Anjvz1SJrN EXkW4KHzU/hAQPDG4IPXA8OvjFBorhPp -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:28 2025 by rpki-client