$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: /VnTp4e3w8RJKw63lj1Bry4rMEZpSvXxRkGhz1XwA0k= Subject key identifier: AB:E9:5D:2A:2C:A8:AF:22:B0:7C:9C:E0:C2:16:76:4D:66:EF:A1:FE Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0BDD Signing time: Thu 24 Apr 2025 18:43:15 +0000 Manifest this update: Thu 24 Apr 2025 18:43:15 +0000 Manifest next update: Thu 01 May 2025 18:43:15 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: W9Vggv2uiluBcNJRxHTT/vp5KxoPPGKBt4lSvjo+IUw=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: CgIHdazzVOF6QA1a4XIGPV0wyY67xaJD1pxnbNXHCvI=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: Apr 24 18:43:15 2025 GMT Not After : May 1 18:43:15 2025 GMT Subject: CN=680a8643-f079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:61:13:f3:e0:2e:44:d4:e2:93:bd:4a:37: a5:88:68:15:b2:d6:53:be:2e:d0:d4:22:03:b9:b8: 7e:75:e7:66:f3:86:93:c8:d5:ef:c4:0e:fd:9f:5a: e7:9a:aa:cf:91:c1:cd:10:b4:71:92:86:3c:61:6b: 79:36:6d:97:1c:5e:24:25:47:81:37:a4:5b:aa:34: b1:04:93:44:44:c3:09:eb:16:4f:6e:40:db:a5:84: 70:cb:50:2e:4e:48:f6:81:dd:2e:1b:6b:d0:df:38: 3e:bb:e3:1e:9f:bc:7a:ca:dd:13:b2:65:86:dc:60: 4d:d4:fc:85:fb:2e:53:96:b9:a2:61:f7:70:f5:9f: f2:53:f5:3e:1e:0d:c0:91:01:79:20:23:35:35:7b: bb:64:fb:0a:88:50:11:78:2f:36:ea:c0:38:36:ac: ff:ca:ba:90:21:3e:c9:1e:fb:d9:2f:31:e0:b7:aa: b2:0e:c0:73:de:1e:c4:cc:e2:7d:2f:f3:f8:f5:dd: 74:b5:52:42:39:36:33:93:48:3a:0f:7c:23:29:24: df:07:cd:89:34:07:3b:0e:9e:6a:e8:c3:06:37:2d: ca:a3:2a:e2:38:aa:c7:ff:35:87:ce:82:8d:7c:ed: 02:c7:27:9b:f2:b3:1b:a6:51:b1:41:ec:87:ce:34: 82:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E9:5D:2A:2C:A8:AF:22:B0:7C:9C:E0:C2:16:76:4D:66:EF:A1:FE X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b4:a9:9b:ba:e3:a9:0f:02:ce:32:05:fc:10:c2:3c:62:10: 54:c4:96:ce:a9:45:92:ff:ad:89:bb:f2:de:c9:6b:98:13:23: 67:50:15:37:51:f4:f3:c3:73:a4:0b:08:c7:c2:24:2a:2f:f8: 20:e7:a3:b1:01:95:9b:b8:5e:15:3f:87:45:1c:be:60:4f:7c: 4f:7f:4b:fa:0e:ac:fc:2b:7b:5c:4e:60:42:d2:f9:23:b7:fc: f9:e6:47:3f:5f:d6:62:02:b3:5a:d7:6a:fc:07:e3:00:ca:ca: fe:fb:59:3a:cc:99:bb:10:cf:28:7d:70:b5:a4:5b:0e:9f:0d: 9b:80:1a:9e:0a:7e:d7:a8:54:9d:5a:fb:7e:1d:8a:38:3e:ce: f1:c8:fe:a0:52:64:3e:dc:3c:32:4d:4d:31:e2:18:e7:ef:8c: 40:cd:3f:e4:64:83:7e:bf:c7:24:b6:75:e4:0e:6e:6e:78:ca: 0b:78:1d:d8:4f:7b:f5:a9:df:38:04:34:64:6a:65:39:13:6a: 9f:4d:61:71:72:38:f0:b8:f2:73:61:c2:b1:da:ce:3d:54:77: df:f7:0b:05:76:a6:07:ee:c5:82:27:66:86:27:81:23:0f:1a: cc:7b:68:c5:d2:f2:94:56:0c:9e:ec:5b:b9:be:cf:f1:30:df: 06:9d:89:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjUwNDI0MTg0MzE1WhcNMjUwNTAxMTg0MzE1WjAYMRYwFAYD VQQDEw02ODBhODY0My1mMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+hhE/PgLkTU4pO9SjeliGgVstZTvi7Q1CIDubh+dedm84aTyNXvxA79n1rn mqrPkcHNELRxkoY8YWt5Nm2XHF4kJUeBN6RbqjSxBJNERMMJ6xZPbkDbpYRwy1Au Tkj2gd0uG2vQ3zg+u+Men7x6yt0TsmWG3GBN1PyF+y5TlrmiYfdw9Z/yU/U+Hg3A kQF5ICM1NXu7ZPsKiFAReC826sA4Nqz/yrqQIT7JHvvZLzHgt6qyDsBz3h7EzOJ9 L/P49d10tVJCOTYzk0g6D3wjKSTfB82JNAc7Dp5q6MMGNy3KoyriOKrH/zWHzoKN fO0Cxyeb8rMbplGxQeyHzjSCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvpXSos qK8isHyc4MIWdk1m76H+MB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1tKmbuuOpDwLOMgX8EMI8YhBUxJbOqUWS/62Ju/LeyWuYEyNnUBU3 UfTzw3OkCwjHwiQqL/gg56OxAZWbuF4VP4dFHL5gT3xPf0v6Dqz8K3tcTmBC0vkj t/z55kc/X9ZiArNa12r8B+MAysr++1k6zJm7EM8ofXC1pFsOnw2bgBqeCn7XqFSd Wvt+HYo4Ps7xyP6gUmQ+3DwyTU0x4hjn74xAzT/kZIN+v8cktnXkDm5ueMoLeB3Y T3v1qd84BDRkamU5E2qfTWFxcjjwuPJzYcKx2s49VHff9wsFdqYH7sWCJ2aGJ4Ej DxrMe2jF0vKUVgye7Fu5vs/xMN8GnYme -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:56 2025 by rpki-client