$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json) Hash identifier: 9/O+fJr3apBPa0AF61XgOXWtv2znjZg5LHooaFedMQE= Subject key identifier: 21:9C:87:08:78:1E:F7:A5:7E:2E:10:CE:BA:B4:74:C4:17:42:B0:1A Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Certificate serial: 101D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft Manifest number: 0FFB Signing time: Thu 24 Apr 2025 17:46:20 +0000 Manifest this update: Thu 24 Apr 2025 17:46:19 +0000 Manifest next update: Thu 01 May 2025 17:46:19 +0000 Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: Z0ef2ciRrWkkmOOmoSJyX4fpYPtcD0WeOBBbw7YoV5g=) 2: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: bytWuNzrLQw9v+QMqc5rrIvyHwJBakcmOmXht2Npskg=) 3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: wikUFUY0h7gGqht6lrAAGNzDvHHVKOxeJ+8mIhyaOLg=) 4: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: rjaSyAzG4Vkfbg5uZuSjD+n9EriKOHglMvv9YunPzH4=) 5: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: ZbaNyd2npVQ7n+Gz6EMJlX5yHpd7tPiQHaPoJPJgyBc=) 6: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: ZsKWGtKVq3aoWptNQmv7xVjVnY/4jXxJBvjnB+HtK+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4125 (0x101d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Validity Not Before: Apr 24 17:46:19 2025 GMT Not After : May 1 17:46:19 2025 GMT Subject: CN=680a78eb-a936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:6f:a2:ec:31:6e:b5:65:2e:2b:45:d6:56: ed:d2:a8:73:74:a6:d3:dd:13:89:f4:f1:c4:69:1b: f6:4d:f5:3c:5d:12:cd:6b:89:5a:e6:d0:96:4f:78: 25:37:f3:36:a2:b5:bf:9c:b5:ce:47:e5:cd:13:5a: 4b:5c:84:49:45:ac:5a:13:e4:d6:b2:d8:9d:7b:64: 9b:8d:ab:a3:8a:79:17:ec:83:0a:f8:81:c5:88:99: a9:ab:11:2b:f4:e9:fa:e9:26:36:13:ff:b0:7b:a0: 08:61:8d:6d:f1:97:21:3f:1d:0a:23:48:5e:53:48: a0:be:28:1d:2d:d5:b9:5b:f4:aa:90:96:6d:76:d6: 9a:a5:64:ed:9b:dd:00:62:9f:35:11:d6:8c:c8:39: 70:3f:08:fc:9f:73:c2:e1:e2:0c:4e:6a:07:69:65: b5:df:28:59:7d:f2:3b:e9:d0:3f:0b:f4:c0:56:3d: a9:da:e3:54:36:28:f1:99:a2:38:66:79:c5:58:b4: 8f:67:99:af:23:43:6a:26:43:f7:e0:da:a3:8f:c3: 6f:4f:bd:d3:04:9f:2e:44:a9:95:e2:b7:c3:b6:a1: 23:70:d9:80:1d:74:c7:4a:20:70:90:85:9d:1b:37: 4c:c9:3d:66:cc:30:b6:dc:7d:d4:e0:c9:48:6c:91: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9C:87:08:78:1E:F7:A5:7E:2E:10:CE:BA:B4:74:C4:17:42:B0:1A X509v3 Authority Key Identifier: keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:34:95:6d:3a:22:0b:be:4a:ec:3b:7e:07:5c:1a:11:22:ef: 70:85:51:44:16:01:8c:91:c3:00:50:2d:ac:3e:21:15:14:c9: 1b:91:97:06:5b:39:9f:0b:2f:ce:f2:25:f2:53:6f:c3:3a:99: 8b:40:d0:86:09:9a:be:5c:b9:90:88:f8:4b:98:65:af:83:f8: c4:5e:da:4a:73:ec:da:94:ba:6e:b8:f9:5f:6c:0b:0a:c5:f6: b9:74:bb:18:d5:de:d0:31:6c:ee:20:f8:f3:45:f5:cd:fc:c6: 0d:a9:2f:c9:a0:55:e1:f6:61:61:58:50:58:04:dd:05:19:5f: 96:11:a7:c2:c6:ba:cb:69:e5:c4:1b:86:06:5f:9a:b6:44:cf: 0a:a9:0e:ad:86:5b:a2:0a:b3:f2:6f:4b:28:c4:91:49:55:13: 3a:73:39:f6:6a:6c:44:3e:f6:fe:28:b2:f0:8a:58:23:06:14: 05:24:f9:11:8b:73:0f:32:59:e4:e6:18:5d:d4:6d:28:67:a7: 85:5f:86:d1:64:31:e6:46:bb:47:30:e5:66:62:f0:dd:7b:a4: 1f:e5:81:6a:d6:78:ef:f7:8f:8b:e3:d7:e8:d1:c2:43:b4:d8: 07:86:6f:8c:20:d4:9e:ab:42:bc:4d:8d:cf:1a:a7:3d:2e:a0: 17:eb:f1:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG QjA2MDk4OUIwHhcNMjUwNDI0MTc0NjE5WhcNMjUwNTAxMTc0NjE5WjAYMRYwFAYD VQQDEw02ODBhNzhlYi1hOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0FvouwxbrVlLitF1lbt0qhzdKbT3ROJ9PHEaRv2TfU8XRLNa4la5tCWT3gl N/M2orW/nLXOR+XNE1pLXIRJRaxaE+TWstide2SbjaujinkX7IMK+IHFiJmpqxEr 9On66SY2E/+we6AIYY1t8ZchPx0KI0heU0igvigdLdW5W/SqkJZtdtaapWTtm90A Yp81EdaMyDlwPwj8n3PC4eIMTmoHaWW13yhZffI76dA/C/TAVj2p2uNUNijxmaI4 ZnnFWLSPZ5mvI0NqJkP34Nqjj8NvT73TBJ8uRKmV4rfDtqEjcNmAHXTHSiBwkIWd GzdMyT1mzDC23H3U4MlIbJGc+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGchwh4 Hvelfi4Qzrq0dMQXQrAaMB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2 b1MxOGhTdHZfR243QmdtSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMNJVtOiILvkrsO34HXBoRIu9whVFEFgGMkcMAUC2sPiEVFMkbkZcG WzmfCy/O8iXyU2/DOpmLQNCGCZq+XLmQiPhLmGWvg/jEXtpKc+zalLpuuPlfbAsK xfa5dLsY1d7QMWzuIPjzRfXN/MYNqS/JoFXh9mFhWFBYBN0FGV+WEafCxrrLaeXE G4YGX5q2RM8KqQ6thluiCrPyb0soxJFJVRM6czn2amxEPvb+KLLwilgjBhQFJPkR i3MPMlnk5hhd1G0oZ6eFX4bRZDHmRrtHMOVmYvDde6Qf5YFq1njv94+L49fo0cJD tNgHhm+MINSeq0K8TY3PGqc9LqAX6/HH -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:27 2025 by rpki-client