$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json) Hash identifier: bD8i+ERJDVE6UPcx0LvPt733XP+kVCQXSRCd3NA1D20= Subject key identifier: D5:E7:63:58:87:B2:97:28:55:12:FE:55:70:33:3E:E1:9D:FD:10:67 Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft Manifest number: 0398 Signing time: Fri 25 Apr 2025 00:32:08 +0000 Manifest this update: Fri 25 Apr 2025 00:32:07 +0000 Manifest next update: Fri 02 May 2025 00:32:07 +0000 Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: 6qMXENxJMqZqMn6Y+sW4hnkgngKPigX810Ti+9aMHeE=) 2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: 82bmKccqbBzTdNqrTXoGpBcJx8ypp4VeLlhE4Yo0df8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Validity Not Before: Apr 25 00:32:07 2025 GMT Not After : May 2 00:32:07 2025 GMT Subject: CN=680ad808-576b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:52:2f:77:65:29:14:b3:dd:e4:04:93:80: c2:2a:78:f0:21:e6:40:76:4a:cc:ed:f0:4b:6e:ef: 82:0e:b5:c8:0d:3f:8b:71:48:7b:7e:1e:1a:62:5e: 03:13:f3:3a:84:b6:de:60:17:b4:98:07:58:fc:ef: e4:93:b1:53:7e:79:d1:01:97:cb:63:4a:85:81:ab: 7f:12:96:f2:da:ae:99:3b:48:77:40:c8:85:76:a0: af:ef:11:ac:91:9b:1b:af:f3:74:ad:4b:7c:4a:0f: ec:29:a6:50:60:98:05:ac:61:59:81:87:6a:fe:47: ff:cd:1a:b5:af:cf:79:d3:70:b6:7a:e0:94:75:d3: 9c:0a:02:67:9d:00:5a:7a:da:76:27:47:f9:57:93: 6c:eb:49:13:5b:49:52:26:89:46:84:21:20:35:ab: 1f:d6:2e:c0:01:3b:27:3d:39:34:35:85:19:56:94: d5:88:1d:18:c1:34:43:e5:fd:8b:46:fb:79:03:f3: 77:25:6c:b7:8d:8e:01:de:be:17:1d:18:4d:d4:4f: ed:a0:5f:48:ca:f8:ad:53:d8:6f:83:c5:23:c3:aa: 11:d3:b7:b8:22:de:1c:ca:45:19:a6:e8:d7:d8:5d: 87:88:c7:06:4a:10:6f:35:73:90:74:96:42:c8:0c: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E7:63:58:87:B2:97:28:55:12:FE:55:70:33:3E:E1:9D:FD:10:67 X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:54:e7:ca:67:a4:7f:2d:46:aa:10:9c:11:58:20:fa:75:dd: f8:72:c9:6d:65:0a:fc:c6:77:12:3e:d5:0b:e7:ad:fc:50:ee: 8b:a2:ff:15:21:00:24:b1:2c:a3:9c:f7:c9:86:00:5f:2b:2d: 3d:09:85:de:6c:89:d8:5b:d6:73:2d:ba:52:71:bf:be:4c:97: 33:e5:f8:2d:61:f1:7a:69:d9:77:8b:81:a0:7f:22:33:25:b2: 66:5e:7a:d9:a9:7e:0b:1b:e7:80:72:36:a1:d7:6e:0d:85:a9: 3c:c8:7a:e9:f3:73:83:26:ef:fa:ac:58:60:45:b7:fa:c4:eb: e8:8a:15:ce:a2:de:aa:db:b1:af:84:84:58:85:fb:ea:ca:e2: f6:ad:95:54:f2:84:45:59:a5:a9:2f:28:d4:be:8e:af:20:b9: 32:8b:ee:8c:e0:e4:57:c2:66:0d:4f:e3:47:a0:50:b6:10:7a: 3c:0e:2c:63:c2:72:68:e2:22:b3:51:40:f4:6e:24:98:4d:32: ef:66:a5:4a:04:16:cc:45:b0:f4:1c:8b:07:dc:32:34:af:97: 35:f9:3a:7c:47:0c:a9:be:50:21:0e:ee:d2:0e:6a:1d:d0:a1: 50:12:eb:02:64:7a:9b:e6:f5:3f:55:10:f3:fe:6a:0d:ba:59: 56:d7:4d:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjUwNDI1MDAzMjA3WhcNMjUwNTAyMDAzMjA3WjAYMRYwFAYD VQQDEw02ODBhZDgwOC01NzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEhSL3dlKRSz3eQEk4DCKnjwIeZAdkrM7fBLbu+CDrXIDT+LcUh7fh4aYl4D E/M6hLbeYBe0mAdY/O/kk7FTfnnRAZfLY0qFgat/Epby2q6ZO0h3QMiFdqCv7xGs kZsbr/N0rUt8Sg/sKaZQYJgFrGFZgYdq/kf/zRq1r89503C2euCUddOcCgJnnQBa etp2J0f5V5Ns60kTW0lSJolGhCEgNasf1i7AATsnPTk0NYUZVpTViB0YwTRD5f2L Rvt5A/N3JWy3jY4B3r4XHRhN1E/toF9IyvitU9hvg8Ujw6oR07e4It4cykUZpujX 2F2HiMcGShBvNXOQdJZCyAzPsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXnY1iH spcoVRL+VXAzPuGd/RBnMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRBMS82OENFQzA5NDk1NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5 NDZ2MDllMFFob3IyMHpXX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZVOfKZ6R/LUaqEJwRWCD6dd34csltZQr8xncSPtUL5638UO6Lov8V IQAksSyjnPfJhgBfKy09CYXebInYW9ZzLbpScb++TJcz5fgtYfF6adl3i4GgfyIz JbJmXnrZqX4LG+eAcjah124Nhak8yHrp83ODJu/6rFhgRbf6xOvoihXOot6q27Gv hIRYhfvqyuL2rZVU8oRFWaWpLyjUvo6vILkyi+6M4ORXwmYNT+NHoFC2EHo8Dixj wnJo4iKzUUD0biSYTTLvZqVKBBbMRbD0HIsH3DI0r5c1+Tp8RwypvlAhDu7SDmod 0KFQEusCZHqb5vU/VRDz/moNullW101A -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:50 2025 by rpki-client