$ rpki-client -vvf rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft File: oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft (raw, json) Hash identifier: Ah77Y8s09yC5DoIN8bGqXRgrxTh+Vzo3M5PV/E18dfg= Subject key identifier: 84:6B:97:90:F9:B5:83:BE:80:4C:A4:17:0F:32:07:05:09:3F:25:27 Authority key identifier: A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 Certificate issuer: /CN=A918AAA1/serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft Manifest number: 0134 Signing time: Fri 25 Apr 2025 03:33:32 +0000 Manifest this update: Fri 25 Apr 2025 03:33:31 +0000 Manifest next update: Fri 02 May 2025 03:33:31 +0000 Files and hashes: 1: oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl (hash: 6cKioN7QcasKSdjZSjGxtE4NwA5QvfPNZIvjYI+yf8Y=) 2: E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa (hash: P1qwhAicU6zPENCwTGFasnrb3+NFivcUL5Wq4dABBCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AAA1, serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Validity Not Before: Apr 25 03:33:31 2025 GMT Not After : May 2 03:33:31 2025 GMT Subject: CN=680b028c-5233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:30:a7:dc:51:54:da:15:47:64:52:c1:52: 50:12:4e:5b:c6:7d:4f:1e:b9:7b:f7:4b:cc:82:23: 6d:80:b9:6b:a8:0f:96:80:7a:54:b8:0d:a0:3d:45: 45:8b:0a:5b:a3:bf:52:c5:6c:b1:c0:e8:57:c6:22: b1:88:a6:cc:5e:b1:bf:06:72:0d:e8:73:1f:ec:4b: 65:85:16:16:aa:56:e2:6d:e7:b5:1b:2d:33:98:ba: fe:7e:3a:b2:13:b2:36:28:d8:00:05:61:78:70:16: 08:78:fc:61:fd:e5:b4:ec:8c:c3:e0:12:7c:8c:bd: 51:f2:8f:fa:9c:5f:6e:bd:32:8e:09:b4:a9:a1:83: 33:b3:e6:d3:66:95:d1:65:74:0f:b7:0c:11:49:7c: 27:74:e5:92:17:d5:1c:f8:76:b2:f0:cd:f1:b0:73: 8a:9a:50:18:c7:e2:e7:ea:16:ab:37:92:b7:7c:fc: 4d:07:8c:68:66:31:32:69:a1:f8:f6:40:b0:ca:3c: 72:25:e5:41:ed:64:cf:fd:82:a1:3c:a7:3d:11:7b: 39:5c:65:1f:a3:f0:50:85:38:9a:4f:75:53:24:86: ee:fe:e6:8f:69:a0:a7:bc:41:7c:ce:01:43:9c:82: b4:1c:2f:1e:86:45:c6:7c:dd:cf:ba:9d:57:8a:d7: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6B:97:90:F9:B5:83:BE:80:4C:A4:17:0F:32:07:05:09:3F:25:27 X509v3 Authority Key Identifier: keyid:A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:12:c6:fc:33:d3:cb:1f:2a:df:85:d6:2f:00:42:52:90:d1: d3:5a:72:6f:b4:35:84:ee:85:c1:17:b8:9e:46:33:bc:fc:8d: 6b:76:64:b5:c6:b6:6f:0a:cf:f4:f0:39:01:b3:19:8a:4f:5c: 65:78:e4:a7:a4:47:c9:93:a9:55:c6:a6:16:df:26:3b:03:98: f7:03:54:b1:d2:8f:2a:94:e5:3e:a9:be:24:b6:21:6e:ea:f6: 55:82:1c:13:9c:25:75:72:84:29:68:97:60:55:91:0a:3d:9f: ed:15:74:c0:31:04:26:00:4e:71:eb:b6:61:76:f5:39:6f:26: 5f:93:9e:cb:1f:7d:7a:02:32:3d:5c:e6:00:af:e3:f0:b0:36: e9:c4:b4:db:88:a4:15:26:08:85:35:ca:29:03:83:78:88:e8: 67:58:c7:20:e0:3d:42:5a:84:2c:fb:f6:41:f5:14:9b:72:31: ed:91:66:ed:1d:5e:83:73:46:37:d6:18:bd:44:64:d5:55:2d: d5:9f:12:db:77:88:95:a5:10:52:47:31:da:4b:ed:68:83:c1: c6:c1:63:4f:e2:90:92:5d:7e:1c:06:1f:78:0c:90:1e:c5:31: ef:24:f4:b8:3a:e0:c1:c3:70:93:28:73:56:6b:3e:fc:31:28: 8f:e4:3a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBQTExMTAvBgNVBAUTKEEyREEzNjM3RDMyNTNGODk5N0Q4OEQwQkQ4REE5NTk4 Rjc4M0Y5OTEwHhcNMjUwNDI1MDMzMzMxWhcNMjUwNTAyMDMzMzMxWjAYMRYwFAYD VQQDEw02ODBiMDI4Yy01MjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvcwp9xRVNoVR2RSwVJQEk5bxn1PHrl790vMgiNtgLlrqA+WgHpUuA2gPUVF iwpbo79SxWyxwOhXxiKxiKbMXrG/BnIN6HMf7EtlhRYWqlbibee1Gy0zmLr+fjqy E7I2KNgABWF4cBYIePxh/eW07IzD4BJ8jL1R8o/6nF9uvTKOCbSpoYMzs+bTZpXR ZXQPtwwRSXwndOWSF9Uc+Hay8M3xsHOKmlAYx+Ln6harN5K3fPxNB4xoZjEyaaH4 9kCwyjxyJeVB7WTP/YKhPKc9EXs5XGUfo/BQhTiaT3VTJIbu/uaPaaCnvEF8zgFD nIK0HC8ehkXGfN3Pup1XitfjnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRrl5D5 tYO+gEykFw8yBwUJPyUnMB8GA1UdIwQYMBaAFKLaNjfTJT+Jl9iNC9jalZj3g/mR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUFBMS84MTE0Qzc5QzQ4 NkUxMUVFQTk2MDk0MkNDNEY5QUUwMi9vdG8yTjlNbFA0bVgySTBMMk5xVm1QZUQt WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290bzJOOU1sUDRtWDJJMEwyTnFWbVBlRC1aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUFBMS84MTE0Qzc5QzQ4NkUxMUVFQTk2MDk0MkNDNEY5QUUwMi9vdG8yTjlNbFA0 bVgySTBMMk5xVm1QZUQtWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnEsb8M9PLHyrfhdYvAEJSkNHTWnJvtDWE7oXBF7ieRjO8/I1rdmS1 xrZvCs/08DkBsxmKT1xleOSnpEfJk6lVxqYW3yY7A5j3A1Sx0o8qlOU+qb4ktiFu 6vZVghwTnCV1coQpaJdgVZEKPZ/tFXTAMQQmAE5x67ZhdvU5byZfk57LH316AjI9 XOYAr+PwsDbpxLTbiKQVJgiFNcopA4N4iOhnWMcg4D1CWoQs+/ZB9RSbcjHtkWbt HV6Dc0Y31hi9RGTVVS3VnxLbd4iVpRBSRzHaS+1og8HGwWNP4pCSXX4cBh94DJAe xTHvJPS4OuDBw3CTKHNWaz78MSiP5DpP -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:43 2025 by rpki-client