$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft File: mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json) Hash identifier: NS2SrPqASRQe2ZB9RzTZSfSlLF8wcWkJv+vzqVEhjIc= Subject key identifier: C8:BF:B6:01:CB:D4:B4:24:23:AD:A0:8B:B7:81:76:AD:34:4E:A5:E9 Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 Certificate issuer: /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:35:08 +0000 Manifest this update: Fri 25 Apr 2025 05:35:08 +0000 Manifest next update: Fri 02 May 2025 05:35:08 +0000 Files and hashes: 1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: iQ2f0ePlCMinl2rwEt/8mcA5GYICRjw8YDq87eKfE2s=) 2: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (hash: PcUbeq2GL9ETBRd6OiM02vny8hMoCCAWI9K7b/wI5lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Validity Not Before: Apr 25 05:35:08 2025 GMT Not After : May 2 05:35:08 2025 GMT Subject: CN=680b1f0c-667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:cb:85:8a:19:9b:b9:a7:f2:c1:b4:a1:84: 94:50:d2:2e:34:db:1f:4f:7b:9c:6a:d4:bf:30:fd: 07:e1:9b:47:15:c5:3b:34:dd:a1:98:51:a0:1d:f3: a2:50:4c:81:be:fc:17:7f:3a:b5:5f:b9:23:95:21: d0:e8:25:d5:c4:54:53:3d:17:41:d1:f9:09:67:92: 43:1d:60:e4:f7:e8:f9:62:e1:a8:e6:83:8a:05:ce: 13:98:9f:77:3b:fa:94:7f:38:78:54:e3:a5:f5:19: 02:f0:ae:d5:64:c2:6b:f9:44:5c:11:2e:f6:7c:59: 1c:11:59:13:ee:51:6a:96:43:9c:eb:b6:3b:9b:0c: 6c:78:e0:e2:99:0d:22:10:6d:34:bc:76:f6:98:b6: b0:a2:de:04:e6:eb:b8:ca:df:9b:4b:82:78:07:0e: 14:a4:ac:4e:0c:a9:c8:5c:2d:c1:b4:18:72:90:fd: 16:25:3b:c3:ba:49:ab:9c:84:af:50:64:47:6a:4e: 5c:4c:c8:f3:6a:e9:b8:99:c9:d7:ce:b9:6a:77:23: ee:20:3c:ad:1e:bf:bd:de:e0:96:d2:c2:e3:5b:ab: 89:6b:a4:46:cf:90:ee:ae:4f:83:f5:43:8e:28:d4: 85:ae:2d:8a:54:4a:fb:b1:ba:7e:7c:98:0e:dc:b4: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BF:B6:01:CB:D4:B4:24:23:AD:A0:8B:B7:81:76:AD:34:4E:A5:E9 X509v3 Authority Key Identifier: keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:4a:06:0e:64:04:6a:c8:41:5d:a4:a4:36:02:42:76:f1:e8: 49:cb:99:3d:99:b1:3b:8b:e4:97:4d:84:38:47:79:d1:6f:db: e4:8b:c6:a0:05:51:48:b7:6e:e3:94:ac:74:4e:a5:7e:4b:9e: 6a:a0:e1:41:e5:a2:bf:db:13:63:eb:a6:17:71:41:21:27:45: 8b:af:f4:4a:df:81:db:a0:33:99:9d:f0:c7:49:54:c4:1d:f4: 8f:68:36:a5:df:99:3f:1e:26:59:dd:73:cf:6c:8b:00:82:4b: 60:13:eb:77:51:a7:28:fe:41:74:f1:02:59:67:15:58:5f:56: 92:9e:69:82:95:2a:6a:43:d8:8c:af:89:db:bc:a3:73:a2:a0: 50:5c:b7:79:89:01:2a:2f:de:08:a9:66:2c:62:67:d8:e5:2b: 99:ec:a9:8a:59:11:c6:3b:88:eb:44:c3:7b:0d:4d:c5:3a:c6: 84:14:e9:51:36:f6:7e:00:5f:e2:1d:9b:4a:e6:73:50:1a:79: cf:be:1f:c4:73:ab:46:c2:7d:1f:46:52:33:32:62:f0:ec:29: de:19:ae:f6:d8:82:45:4e:f5:9d:d5:f9:eb:c6:cf:dd:8b:a7: fc:97:af:89:55:fd:0a:b1:bb:6f:f4:60:23:05:97:0c:2f:50: 33:1d:07:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3NzIxMTAvBgNVBAUTKDk4RTFFOUIwNDNFNjhEMzc2OUU5QTY4REIxQzI2RDcx NTEwOEY3ODcwHhcNMjUwNDI1MDUzNTA4WhcNMjUwNTAyMDUzNTA4WjAYMRYwFAYD VQQDEw02ODBiMWYwYy02NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9XLhYoZm7mn8sG0oYSUUNIuNNsfT3ucatS/MP0H4ZtHFcU7NN2hmFGgHfOi UEyBvvwXfzq1X7kjlSHQ6CXVxFRTPRdB0fkJZ5JDHWDk9+j5YuGo5oOKBc4TmJ93 O/qUfzh4VOOl9RkC8K7VZMJr+URcES72fFkcEVkT7lFqlkOc67Y7mwxseODimQ0i EG00vHb2mLawot4E5uu4yt+bS4J4Bw4UpKxODKnIXC3BtBhykP0WJTvDukmrnISv UGRHak5cTMjzaum4mcnXzrlqdyPuIDytHr+93uCW0sLjW6uJa6RGz5Durk+D9UOO KNSFri2KVEr7sbp+fJgO3LTZ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi/tgHL 1LQkI62gi7eBdq00TqXpMB8GA1UdIwQYMBaAFJjh6bBD5o03aemmjbHCbXFRCPeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzc3Mi85MUZGMEQ5MjVC OUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpUZHA2YWFOc2NKdGNWRUk5 NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHBzRVBtalRkcDZhYU5zY0p0Y1ZFSTk0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Nzc3Mi85MUZGMEQ5MjVCOUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpU ZHA2YWFOc2NKdGNWRUk5NGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBSgYOZARqyEFdpKQ2AkJ28ehJy5k9mbE7i+SXTYQ4R3nRb9vki8ag BVFIt27jlKx0TqV+S55qoOFB5aK/2xNj66YXcUEhJ0WLr/RK34HboDOZnfDHSVTE HfSPaDal35k/HiZZ3XPPbIsAgktgE+t3Uaco/kF08QJZZxVYX1aSnmmClSpqQ9iM r4nbvKNzoqBQXLd5iQEqL94IqWYsYmfY5SuZ7KmKWRHGO4jrRMN7DU3FOsaEFOlR NvZ+AF/iHZtK5nNQGnnPvh/Ec6tGwn0fRlIzMmLw7CneGa722IJFTvWd1fnrxs/d i6f8l6+JVf0Ksbtv9GAjBZcML1AzHQfj -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:52 2025 by rpki-client