$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft File: rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json) Hash identifier: qgmS7MxzcOpvkXqGrOzpoMSX7mSMzQEf+EqaMXMw+2M= Subject key identifier: D4:37:1F:DA:93:77:AE:B5:2B:46:87:27:06:E2:B4:61:2A:D3:4C:CE Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft Manifest number: DF Signing time: Fri 25 Apr 2025 04:36:02 +0000 Manifest this update: Fri 25 Apr 2025 04:36:01 +0000 Manifest next update: Fri 02 May 2025 04:36:01 +0000 Files and hashes: 1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: ANHvNLnx6iMfoYeGomvzaWXWOYcqJ5kwTHSWYGU4xYs=) 2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: roB5hg8LbgyHBq3NzG2BxN4ORRxykj532WnJpDlGnj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Validity Not Before: Apr 25 04:36:01 2025 GMT Not After : May 2 04:36:01 2025 GMT Subject: CN=680b1131-0250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:d3:80:99:d6:8a:a0:98:c2:39:09:f9:86: 99:1f:8b:55:64:a5:25:8e:86:75:43:ef:4d:e9:58: 0a:62:b8:aa:2d:5a:d6:d1:67:93:b2:38:74:1b:c1: 18:e1:30:65:ee:59:d8:c0:04:c0:e1:0a:c9:6c:e8: 31:c5:b6:95:53:1c:09:99:c4:ef:09:ea:89:6f:f7: 2a:97:b5:87:d0:aa:59:87:e0:9e:d4:c0:7f:a1:80: 41:69:62:30:bb:89:82:e9:64:76:81:81:4c:a4:3f: 85:9d:57:d2:b9:df:d3:3b:2c:21:82:0e:a3:f1:17: 3e:d1:d3:df:d2:fb:80:c3:5f:71:ce:86:93:d8:1d: e4:e3:48:98:00:ef:f2:74:35:59:00:00:de:91:a2: 33:14:74:11:4a:0e:c1:06:21:20:7c:26:03:cd:f9: 10:8a:b4:70:86:16:0f:d6:30:29:44:4e:07:3d:25: 02:9f:c1:6a:4e:52:56:1f:ca:7b:3c:ca:31:27:39: 12:82:76:44:70:ce:e8:30:58:98:a4:ee:1d:53:02: 18:21:e5:0c:0a:bc:b7:ad:f2:63:e7:00:8f:d8:6d: 78:7c:d9:7f:fc:7d:36:3e:d0:6b:99:1c:31:00:2e: 1f:d7:df:bf:f9:d1:0f:c2:f9:e2:8f:e8:4e:86:bf: 34:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:37:1F:DA:93:77:AE:B5:2B:46:87:27:06:E2:B4:61:2A:D3:4C:CE X509v3 Authority Key Identifier: keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:df:e8:09:7d:0e:67:64:95:c0:dc:2d:4b:79:cc:c7:f8:a7: d9:23:a1:6c:66:5f:e2:c1:9b:d1:78:79:65:26:ab:80:f5:17: c6:15:7f:31:f9:6f:7b:1a:f7:ed:02:53:36:9e:94:69:64:e3: 82:83:f8:f1:41:c7:55:7c:40:d4:63:71:3a:83:6e:e6:2d:3b: 7d:03:75:df:e9:66:49:e5:9a:ee:34:ca:fb:7a:1d:24:22:2a: 35:05:dd:1a:06:b2:e0:52:af:68:2b:9d:a0:a3:25:f4:60:d0: 18:15:9f:99:f8:0d:d2:bf:e5:46:97:ad:3b:c2:49:39:c6:23: 99:e5:43:87:f6:03:a5:6d:df:2c:7c:6e:a1:9e:a5:80:e6:00: aa:e7:96:8b:ae:1c:5b:f3:40:7a:d5:09:5b:8a:65:b6:0b:dd: 67:6f:d2:f4:46:19:ea:44:29:e8:34:dc:09:39:57:1e:0c:79: bd:dd:73:8c:40:29:fe:77:52:c2:65:41:98:a7:e7:7f:5b:fa: 48:0f:57:c8:5f:e1:a4:17:b4:a1:67:a2:1d:4f:c3:93:d2:06: 99:42:2f:09:b9:4f:0a:89:20:fa:8e:05:b4:25:97:4f:17:cf: 09:84:81:18:21:b4:d9:86:9b:1e:14:af:b1:3c:c2:54:4f:29: eb:4c:ae:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKEFDRTI4REFCRTUzNjQ5NjM3RkE2RTRFMzIxREUxQjYz NDYzQjgzQ0YwHhcNMjUwNDI1MDQzNjAxWhcNMjUwNTAyMDQzNjAxWjAYMRYwFAYD VQQDEw02ODBiMTEzMS0wMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qvTgJnWiqCYwjkJ+YaZH4tVZKUljoZ1Q+9N6VgKYriqLVrW0WeTsjh0G8EY 4TBl7lnYwATA4QrJbOgxxbaVUxwJmcTvCeqJb/cql7WH0KpZh+Ce1MB/oYBBaWIw u4mC6WR2gYFMpD+FnVfSud/TOywhgg6j8Rc+0dPf0vuAw19xzoaT2B3k40iYAO/y dDVZAADekaIzFHQRSg7BBiEgfCYDzfkQirRwhhYP1jApRE4HPSUCn8FqTlJWH8p7 PMoxJzkSgnZEcM7oMFiYpO4dUwIYIeUMCry3rfJj5wCP2G14fNl//H02PtBrmRwx AC4f19+/+dEPwvnij+hOhr80cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ3H9qT d661K0aHJwbitGEq00zOMB8GA1UdIwQYMBaAFKzijavlNkljf6bk4yHeG2NGO4PP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS9BMUYyMzQzQ0Qx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNXTl9wdVRqSWQ0YlkwWTdn ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS9BMUYyMzQzQ0QxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNX Tl9wdVRqSWQ0YlkwWTdnODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB3+gJfQ5nZJXA3C1LeczH+KfZI6FsZl/iwZvReHllJquA9RfGFX8x +W97GvftAlM2npRpZOOCg/jxQcdVfEDUY3E6g27mLTt9A3Xf6WZJ5ZruNMr7eh0k Iio1Bd0aBrLgUq9oK52goyX0YNAYFZ+Z+A3Sv+VGl607wkk5xiOZ5UOH9gOlbd8s fG6hnqWA5gCq55aLrhxb80B61QlbimW2C91nb9L0RhnqRCnoNNwJOVceDHm93XOM QCn+d1LCZUGYp+d/W/pID1fIX+GkF7ShZ6IdT8OT0gaZQi8JuU8KiSD6jgW0JZdP F88JhIEYIbTZhpseFK+xPMJUTynrTK53 -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:46 2025 by rpki-client