$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft File: M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json) Hash identifier: bA+TMvn/y8d0ZmfPtIGPvVI92GBpJldNHZlu98itGA0= Subject key identifier: 53:DE:73:B5:D3:AD:CA:1A:E1:2A:09:59:DE:C4:76:87:63:B3:54:59 Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Certificate serial: 0BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft Manifest number: 0BA9 Signing time: Thu 24 Apr 2025 18:51:34 +0000 Manifest this update: Thu 24 Apr 2025 18:51:33 +0000 Manifest next update: Thu 01 May 2025 18:51:33 +0000 Files and hashes: 1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: t/DRjkq5ta8w7xOftk4L70GhahUzjfY32cjIofkXo7E=) 2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: RTDiXmwESTpSqKQ7Yx+y0Fq2bjlmzbj+gxNPdVcbubY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Validity Not Before: Apr 24 18:51:33 2025 GMT Not After : May 1 18:51:33 2025 GMT Subject: CN=680a8836-edd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:a4:a4:f4:de:79:8a:83:64:ae:24:b9:8f: 8f:ed:ac:5b:b2:d5:5f:09:00:7d:a6:14:e9:c1:94: 1c:87:26:e9:0a:87:1a:36:72:1e:b9:2d:ac:d3:85: cf:a4:c0:5f:58:9b:33:2c:36:c9:4f:c9:44:25:bb: 40:fa:8d:dc:2e:0c:ca:82:ae:25:08:ee:0c:46:64: a8:42:81:63:68:f0:e2:57:07:ec:41:a8:77:03:60: 9f:a7:01:da:ac:ee:ab:53:12:07:23:63:a4:4b:a1: df:03:a5:1a:35:a0:41:68:dc:d6:60:46:eb:0c:e9: 52:4a:37:90:68:24:63:52:13:58:50:a0:43:f5:8e: fc:7b:0a:73:33:4d:db:47:75:ab:06:34:74:ea:85: 61:03:67:67:c5:7c:83:78:e0:be:5b:4f:46:13:94: 89:5b:1d:74:8e:c1:f2:3b:eb:15:d4:ad:88:da:7e: 7e:84:3c:6c:44:cb:d0:87:20:90:3a:0b:2e:41:94: 58:e6:74:7a:d6:5e:c4:31:fb:3f:97:41:2c:ce:e0: 7e:e4:11:85:7d:94:6d:09:85:02:ee:c6:c5:d8:e0: 81:cf:93:58:93:e0:ba:5f:27:5b:60:76:a3:2c:8e: 88:45:37:16:f3:f7:e6:41:db:37:75:b5:db:8f:26: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DE:73:B5:D3:AD:CA:1A:E1:2A:09:59:DE:C4:76:87:63:B3:54:59 X509v3 Authority Key Identifier: keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:89:88:63:e6:f9:4f:14:ae:5f:eb:26:19:39:f2:76:94:bf: b6:ed:30:ea:83:da:f6:3a:29:9b:99:58:bb:80:bd:38:e2:24: 61:f5:96:42:ce:9b:45:40:51:3a:fe:f2:d3:1b:0f:1e:38:f3: a3:e0:ef:a7:50:92:c3:08:bc:1f:d8:53:03:c6:74:28:f7:49: a2:48:b3:bd:33:d1:05:da:2b:e9:18:10:ed:86:06:bc:36:3f: 66:f7:49:92:c8:cd:a5:b7:61:6a:c6:3c:7f:03:cf:96:f7:62: d4:5d:a6:87:a2:a5:54:88:5b:b8:02:cf:7c:7b:de:6b:79:bd: 5c:92:cd:05:f6:58:13:51:aa:08:ec:e5:aa:a2:0d:c4:65:30: d9:2f:f0:e4:0e:97:ed:f0:50:f0:ab:ea:04:c1:e6:07:5e:d8: bd:2e:60:65:22:99:d6:c4:62:ae:67:cc:ff:a4:20:4f:4d:ea: bc:b4:47:9a:9d:98:67:cf:df:f8:66:58:a3:c4:f1:cc:91:21: 98:a6:3c:b9:d2:b4:10:5b:49:18:1f:f9:5c:58:8f:11:d9:87: c6:22:ab:86:b6:99:20:97:e8:16:86:40:29:b8:26:54:9f:aa: ba:33:dc:41:44:bb:59:8d:d8:a3:55:29:b2:7a:e6:a7:c1:33: 23:03:45:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0 MDg5MTg3NDIwHhcNMjUwNDI0MTg1MTMzWhcNMjUwNTAxMTg1MTMzWjAYMRYwFAYD VQQDEw02ODBhODgzNi1lZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO2kpPTeeYqDZK4kuY+P7axbstVfCQB9phTpwZQchybpCocaNnIeuS2s04XP pMBfWJszLDbJT8lEJbtA+o3cLgzKgq4lCO4MRmSoQoFjaPDiVwfsQah3A2CfpwHa rO6rUxIHI2OkS6HfA6UaNaBBaNzWYEbrDOlSSjeQaCRjUhNYUKBD9Y78ewpzM03b R3WrBjR06oVhA2dnxXyDeOC+W09GE5SJWx10jsHyO+sV1K2I2n5+hDxsRMvQhyCQ OgsuQZRY5nR61l7EMfs/l0EszuB+5BGFfZRtCYUC7sbF2OCBz5NYk+C6XydbYHaj LI6IRTcW8/fmQds3dbXbjyYgzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPec7XT rcoa4SoJWd7Edodjs1RZMB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFRi9GOTAzMDI2MDFGQUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VS ZXpMbjVGaHF5cFJBaVJoMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPiYhj5vlPFK5f6yYZOfJ2lL+27TDqg9r2OimbmVi7gL044iRh9ZZC zptFQFE6/vLTGw8eOPOj4O+nUJLDCLwf2FMDxnQo90miSLO9M9EF2ivpGBDthga8 Nj9m90mSyM2lt2Fqxjx/A8+W92LUXaaHoqVUiFu4As98e95reb1cks0F9lgTUaoI 7OWqog3EZTDZL/DkDpft8FDwq+oEweYHXti9LmBlIpnWxGKuZ8z/pCBPTeq8tEea nZhnz9/4ZlijxPHMkSGYpjy50rQQW0kYH/lcWI8R2YfGIquGtpkgl+gWhkApuCZU n6q6M9xBRLtZjdijVSmyeuanwTMjA0Xp -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:52 2025 by rpki-client