$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json) Hash identifier: dxFy29CQk8uvJRjcCpPgVDxvqb1KnYYpkO8crypxk0s= Subject key identifier: 1D:78:16:60:3D:DC:49:9E:48:ED:C8:F9:38:F4:6A:35:01:47:DC:20 Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft Manifest number: 01EA Signing time: Fri 25 Apr 2025 01:56:09 +0000 Manifest this update: Fri 25 Apr 2025 01:56:08 +0000 Manifest next update: Fri 02 May 2025 01:56:08 +0000 Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: sbIGEAAl7jG1V3mr+VI8gDpG53U38D22d0R5gRJpBeI=) 2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: tqa1Ixra7BMwCWoNM3olfzFpbEkXEWmJXa4eDjgnFBc=) 3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: oSZdhfGWwwKdH63s+SExbmyRtKVUZJS009bBjLK65o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Apr 25 01:56:08 2025 GMT Not After : May 2 01:56:08 2025 GMT Subject: CN=680aebb9-3f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:ea:24:5a:77:ac:81:ca:7d:26:ab:1c:52: 37:90:45:11:8d:9e:9c:06:e3:a4:82:0b:8c:db:7c: 9f:36:2b:8a:fd:db:73:b0:f8:27:e9:c5:47:54:79: c7:5e:14:60:c5:67:da:28:9e:e0:53:9e:8d:b8:a7: b0:66:bf:58:3d:b6:71:c9:40:ec:91:19:8a:cf:65: 2e:2b:b2:fd:9a:c7:52:13:91:ce:3f:85:91:4a:49: 0f:c5:15:49:18:88:c2:0f:49:12:75:07:65:14:0e: 42:e6:79:f6:a7:06:8c:d7:64:d8:4c:61:ef:2f:59: 9d:77:89:26:cd:b9:d7:5b:26:e3:3d:4a:da:99:33: 50:a1:8a:8c:02:80:10:7a:55:0d:ed:67:0c:00:3a: e0:e2:ef:24:ad:89:c0:24:bc:02:6b:1c:98:37:7f: 26:b1:e5:4f:ce:43:cb:90:a0:46:6c:39:00:2c:9c: fe:e6:d2:2a:42:00:f0:71:09:6f:85:4d:d2:78:0d: 4c:7b:58:5f:4e:b9:58:52:49:26:06:9e:8e:ca:5a: d7:df:2e:3a:8f:6c:20:0a:8a:04:f3:10:45:a6:83: 95:d1:6b:f2:62:bd:85:8e:af:12:b1:36:7e:39:ba: 2f:db:c3:04:45:77:78:8a:a2:c9:fd:c4:a4:08:2f: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:78:16:60:3D:DC:49:9E:48:ED:C8:F9:38:F4:6A:35:01:47:DC:20 X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:98:93:7d:b4:72:e6:4d:f7:52:91:c3:fe:2c:c6:5d:c9:fc: b3:3c:eb:4c:57:9f:27:d1:d2:75:f8:8a:3c:0c:21:eb:48:cb: 12:93:c5:23:e2:0c:9c:cb:1b:fc:05:25:8d:c1:c5:14:1a:09: 59:29:cf:19:21:d9:aa:aa:6c:0b:5b:f4:91:aa:48:5d:b7:9b: cf:d9:0e:7d:68:7c:5c:13:11:cf:65:fd:29:ba:d8:44:04:fb: 64:c3:ad:5b:8d:7c:a9:57:91:12:18:e5:32:28:49:33:a8:c4: e2:70:aa:7d:b1:1d:9a:6b:48:8a:14:79:6c:de:0d:98:da:95: 82:97:9a:03:c9:7f:35:13:87:16:8a:a8:42:09:25:c6:ac:71: db:f7:92:c1:2c:a8:ce:8e:3f:58:ca:ae:9d:74:59:5b:ae:60: 6c:1e:71:5a:87:a3:7f:ba:99:ad:4d:b3:e0:7c:f0:c7:c1:ef: 69:9f:31:15:76:a0:d5:dc:c1:c2:b7:73:33:fb:8f:a5:cd:5b: f6:48:87:72:ec:3d:86:8e:27:9a:2c:cc:8e:6b:11:42:f9:aa: e8:e8:b6:2f:1e:40:4a:ce:93:b1:17:ff:ef:e8:ad:d4:d2:fe: 0b:aa:6c:98:cb:20:8c:a0:0a:ae:8c:77:50:7a:24:81:e9:1e: bc:17:c4:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjUwNDI1MDE1NjA4WhcNMjUwNTAyMDE1NjA4WjAYMRYwFAYD VQQDEw02ODBhZWJiOS0zZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMTqJFp3rIHKfSarHFI3kEURjZ6cBuOkgguM23yfNiuK/dtzsPgn6cVHVHnH XhRgxWfaKJ7gU56NuKewZr9YPbZxyUDskRmKz2UuK7L9msdSE5HOP4WRSkkPxRVJ GIjCD0kSdQdlFA5C5nn2pwaM12TYTGHvL1mdd4kmzbnXWybjPUramTNQoYqMAoAQ elUN7WcMADrg4u8krYnAJLwCaxyYN38mseVPzkPLkKBGbDkALJz+5tIqQgDwcQlv hU3SeA1Me1hfTrlYUkkmBp6OylrX3y46j2wgCooE8xBFpoOV0WvyYr2Fjq8SsTZ+ Obov28MERXd4iqLJ/cSkCC8rAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB14FmA9 3EmeSO3I+Tj0ajUBR9wgMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjkwOS85QUJBQ0FDODREQ0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11 N1g0ZEVsZ19GcnRfdXlpUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrmJN9tHLmTfdSkcP+LMZdyfyzPOtMV58n0dJ1+Io8DCHrSMsSk8Uj 4gycyxv8BSWNwcUUGglZKc8ZIdmqqmwLW/SRqkhdt5vP2Q59aHxcExHPZf0puthE BPtkw61bjXypV5ESGOUyKEkzqMTicKp9sR2aa0iKFHls3g2Y2pWCl5oDyX81E4cW iqhCCSXGrHHb95LBLKjOjj9Yyq6ddFlbrmBsHnFah6N/upmtTbPgfPDHwe9pnzEV dqDV3MHCt3Mz+4+lzVv2SIdy7D2GjieaLMyOaxFC+aro6LYvHkBKzpOxF//v6K3U 0v4LqmyYyyCMoAqujHdQeiSB6R68F8Sw -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:15 2025 by rpki-client