$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: gpJ8kRzsof94YGb3PZeElm88S1zLzyYgYde81Z4clN4= Subject key identifier: 08:A6:7E:F4:08:C0:98:E1:D3:3E:12:70:45:3E:51:BD:0F:50:B3:33 Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B3B Signing time: Thu 24 Apr 2025 19:04:15 +0000 Manifest this update: Thu 24 Apr 2025 19:04:15 +0000 Manifest next update: Thu 01 May 2025 19:04:15 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: NkZsbC5HXjkQHl+hj9YFRwNl/oZQuNsT7iX8MD2nU2Y=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2886 (0xb46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: Apr 24 19:04:15 2025 GMT Not After : May 1 19:04:15 2025 GMT Subject: CN=680a8b2f-3ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:37:b8:96:30:9b:9c:c0:d4:86:3d:0f:0a: 9d:c1:14:1e:a6:39:3d:b9:33:e6:fd:ad:aa:83:76: 8f:02:01:db:ec:54:30:25:3e:6d:ee:c4:ba:f2:91: d3:45:45:b8:49:cc:4f:2b:65:9f:6d:02:45:eb:08: 80:10:34:1f:b8:fc:1e:31:46:17:29:61:49:c2:bf: 66:e2:4f:eb:13:a8:99:7c:ad:c2:60:b9:8a:ab:fd: 8b:1f:a7:cf:b8:01:d2:fc:52:99:25:5b:da:11:7e: 8a:3b:28:bb:c5:2a:a3:d5:7d:08:f5:19:0d:2c:2d: 8e:2a:70:b9:33:14:f6:e0:88:65:9c:f5:00:06:f3: c3:ba:a3:cf:0c:55:58:88:7f:ac:cc:ad:97:ad:8a: 06:ab:af:53:5d:30:e0:92:6b:25:34:60:30:a3:f2: e2:8e:74:31:af:e3:8f:ee:29:c9:28:1f:f5:e0:93: e2:06:01:ee:f0:9b:67:a6:28:f4:bb:5e:17:48:1f: 53:13:03:d6:7f:51:3e:34:1a:aa:13:2c:40:c1:7f: c1:94:71:6c:cd:89:a7:0d:48:74:e6:ca:57:e2:61: 29:1a:11:e3:5c:fd:0b:d0:54:13:30:8a:cc:6e:f2: fe:75:21:9f:df:04:b4:7b:4d:aa:cf:d1:64:17:bf: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A6:7E:F4:08:C0:98:E1:D3:3E:12:70:45:3E:51:BD:0F:50:B3:33 X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:37:71:bb:9a:9e:ac:e8:85:2c:86:aa:7d:84:61:9d:56:59: b5:e3:cf:aa:da:0c:d1:37:7c:08:c3:1e:27:99:06:89:96:e9: 44:a7:c9:e0:3a:a9:bf:d6:e1:26:38:44:97:91:f8:49:99:e2: 1e:60:7c:fa:00:6d:73:1b:8d:a6:e4:c4:f2:f1:21:15:a9:f7: 9c:b7:1c:e7:b3:e6:5d:2d:e5:69:ed:63:04:46:5e:ca:b7:75: 3c:51:66:bc:65:28:c4:92:4e:f3:4a:4e:aa:8f:b4:e1:23:ff: bf:f3:50:6b:d0:4f:62:aa:aa:86:8b:56:b5:13:8d:33:12:47: ef:75:9c:81:96:6d:e4:57:3a:1e:3e:ab:3f:f9:cb:76:b3:de: ee:ca:3c:72:63:57:df:c5:bc:2f:4c:b3:4e:70:0e:b5:0f:4d: b3:f4:58:52:fd:1e:1c:77:f7:82:4c:73:81:51:98:48:a8:39: d9:f1:cb:05:ad:aa:11:43:bf:52:a8:be:1a:81:1a:66:d4:7d: 4d:fa:ef:78:cf:64:97:d6:cd:c0:12:b9:60:f2:7d:62:5f:d9: 7c:6b:f4:a7:35:cb:35:d6:ad:cc:43:7f:d7:98:73:ca:38:8e: 8c:f1:05:bc:7e:de:47:91:dc:c1:31:67:bb:0f:cd:39:0c:26: dd:58:db:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUwNDI0MTkwNDE1WhcNMjUwNTAxMTkwNDE1WjAYMRYwFAYD VQQDEw02ODBhOGIyZi0zZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQo3uJYwm5zA1IY9DwqdwRQepjk9uTPm/a2qg3aPAgHb7FQwJT5t7sS68pHT RUW4ScxPK2WfbQJF6wiAEDQfuPweMUYXKWFJwr9m4k/rE6iZfK3CYLmKq/2LH6fP uAHS/FKZJVvaEX6KOyi7xSqj1X0I9RkNLC2OKnC5MxT24IhlnPUABvPDuqPPDFVY iH+szK2XrYoGq69TXTDgkmslNGAwo/LijnQxr+OP7inJKB/14JPiBgHu8Jtnpij0 u14XSB9TEwPWf1E+NBqqEyxAwX/BlHFszYmnDUh05spX4mEpGhHjXP0L0FQTMIrM bvL+dSGf3wS0e02qz9FkF7/SWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAimfvQI wJjh0z4ScEU+Ub0PULMzMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQN3G7mp6s6IUshqp9hGGdVlm148+q2gzRN3wIwx4nmQaJlulEp8ng Oqm/1uEmOESXkfhJmeIeYHz6AG1zG42m5MTy8SEVqfectxzns+ZdLeVp7WMERl7K t3U8UWa8ZSjEkk7zSk6qj7ThI/+/81Br0E9iqqqGi1a1E40zEkfvdZyBlm3kVzoe Pqs/+ct2s97uyjxyY1ffxbwvTLNOcA61D02z9FhS/R4cd/eCTHOBUZhIqDnZ8csF raoRQ79SqL4agRpm1H1N+u94z2SX1s3AErlg8n1iX9l8a/SnNcs11q3MQ3/XmHPK OI6M8QW8ft5HkdzBMWe7D805DCbdWNsC -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:17 2025 by rpki-client