$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json) Hash identifier: lO6kYb/BdWsbGi00ftKKn6MqZ0l9C0cirMSSoHP4iLE= Subject key identifier: BD:69:00:AC:34:23:3C:CC:5B:8B:B4:49:1F:AD:F3:A6:C3:F0:08:2A Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 352E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft Manifest number: 34CA Signing time: Thu 24 Apr 2025 14:25:22 +0000 Manifest this update: Thu 24 Apr 2025 14:25:22 +0000 Manifest next update: Thu 01 May 2025 14:25:22 +0000 Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: 1wcQHn7PxNX5vnCjo1ew5qWkpr4nfp5WJTKZO0bvrTw=) 2: 92BBD4741F2F11F082D2AB82C4F9AE02.roa (hash: YV/B6jqKt8I2g2TebPLm9+0AgyH5G6psFP7Pfncdwmw=) 3: 8A7456C47CBE11EFB9BF7074C4F9AE02.roa (hash: HcKEOonzAu+z0GPSseUC7go/+PDERZEFfa5gQQU6r04=) 4: 203B2B7A1C9811EE995E057EC4F9AE02.roa (hash: 4zPuCRb6jQp/WONx/+B920AnQZg5YD/rNNquB0manEQ=) 5: E52789DCE39E11EAAAE0622CC4F9AE02.roa (hash: QHmNlvHkZ1UVpicdTwIncttCEG27hNKbZKwKjK3XZ7Y=) 6: 53594CBC1F2F11F09C3D4582C4F9AE02.roa (hash: 11c0RSip9HmRdb+yAiVYr0mJn+7VBpqYNBSW86dakQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13614 (0x352e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Apr 24 14:25:22 2025 GMT Not After : May 1 14:25:22 2025 GMT Subject: CN=680a49d2-71f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:b1:d3:50:1b:72:a3:c2:34:af:01:75:5f: 79:d7:47:d0:a7:73:f5:fa:ff:6c:d4:4f:e3:02:78: a9:ff:83:4b:88:9f:3c:b1:a0:f0:cc:82:74:b9:be: 42:a9:de:7d:1f:2a:44:98:6d:96:ad:07:97:ed:4c: 51:a7:2f:e7:c3:49:0a:13:2e:df:eb:8d:89:34:df: 99:2d:82:86:57:9b:f7:83:6e:07:15:1c:02:4d:49: e4:a3:70:b0:45:6c:96:bc:d2:5f:05:b4:b7:f9:ed: c2:af:6a:05:3a:13:a2:95:73:da:ce:6b:c9:2c:b5: 8e:99:3c:92:2e:06:28:d1:a2:3d:81:2c:ea:55:c3: 37:c2:98:0f:dc:35:57:3d:35:4a:bf:33:db:7d:aa: fc:54:97:1f:01:ef:d6:c8:5f:74:66:78:5f:ca:6b: 48:32:88:04:4e:70:99:d4:94:3e:40:95:6d:b6:49: dd:fd:c3:89:a8:91:e8:e0:0f:58:ed:5c:3a:9b:fd: d9:ff:2f:31:8d:b7:1b:ab:e1:72:90:e2:61:ad:01: ff:ca:fa:68:cc:75:f2:a4:e7:63:f9:d8:ae:f8:7e: c5:b3:84:ea:e0:73:d7:a6:ed:90:c9:fb:4a:5f:3d: 1b:41:03:05:ed:e0:7d:74:fd:d1:ed:02:46:a1:7a: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:69:00:AC:34:23:3C:CC:5B:8B:B4:49:1F:AD:F3:A6:C3:F0:08:2A X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:61:c9:74:27:98:7b:78:44:c1:89:74:39:b5:ea:28:ed:6c: 57:fb:f0:3f:5a:8a:1f:e4:2e:85:66:43:5f:25:9a:c1:4a:71: 4e:97:6c:bd:94:62:c2:4e:81:fe:ed:14:c1:59:7d:81:f4:03: 67:22:d9:02:83:19:c7:9b:03:db:a1:18:c5:3d:31:11:a9:68: 6a:19:aa:a7:b4:b7:c1:b1:16:59:db:ed:2c:9f:6e:f0:67:3d: 78:12:8f:45:51:58:87:72:a9:c4:67:be:6d:a3:a5:cc:cb:15: ca:61:64:a6:74:80:5a:67:40:77:d9:27:84:a0:c1:05:e8:47: a4:f7:fc:87:a7:28:ba:24:f5:b3:b3:47:d2:1d:d6:2b:f1:c6: 70:f2:c7:2a:85:9d:e5:1a:10:21:c3:e6:c1:5e:5d:f6:88:aa: fb:fd:8d:ea:ad:1e:77:19:82:b0:79:dc:78:3c:df:df:85:f0: 1c:2c:d8:a9:e1:ea:ca:b1:ca:af:fc:4d:63:d6:35:eb:e1:4b: d8:8a:c4:b7:18:89:00:b6:7a:d0:73:61:8f:29:ab:4c:48:10: 8b:09:ae:d6:53:9c:bd:9c:f5:37:44:3a:9e:84:05:13:fa:3a: 9c:cf:0f:b3:13:ae:fb:87:72:81:3b:89:f9:3e:e0:61:0f:92: ef:ed:9b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjUwNDI0MTQyNTIyWhcNMjUwNTAxMTQyNTIyWjAYMRYwFAYD VQQDEw02ODBhNDlkMi03MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRGx01AbcqPCNK8BdV9510fQp3P1+v9s1E/jAnip/4NLiJ88saDwzIJ0ub5C qd59HypEmG2WrQeX7UxRpy/nw0kKEy7f642JNN+ZLYKGV5v3g24HFRwCTUnko3Cw RWyWvNJfBbS3+e3Cr2oFOhOilXPazmvJLLWOmTySLgYo0aI9gSzqVcM3wpgP3DVX PTVKvzPbfar8VJcfAe/WyF90ZnhfymtIMogETnCZ1JQ+QJVttknd/cOJqJHo4A9Y 7Vw6m/3Z/y8xjbcbq+FykOJhrQH/yvpozHXypOdj+diu+H7Fs4Tq4HPXpu2QyftK Xz0bQQMF7eB9dP3R7QJGoXpfXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1pAKw0 IzzMW4u0SR+t86bD8AgqMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB WmZCUVk0aEdEa3J5OFg4XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Ycl0J5h7eETBiXQ5teoo7WxX+/A/Woof5C6FZkNfJZrBSnFOl2y9 lGLCToH+7RTBWX2B9ANnItkCgxnHmwPboRjFPTERqWhqGaqntLfBsRZZ2+0sn27w Zz14Eo9FUViHcqnEZ75to6XMyxXKYWSmdIBaZ0B32SeEoMEF6Eek9/yHpyi6JPWz s0fSHdYr8cZw8scqhZ3lGhAhw+bBXl32iKr7/Y3qrR53GYKwedx4PN/fhfAcLNip 4erKscqv/E1j1jXr4UvYisS3GIkAtnrQc2GPKatMSBCLCa7WU5y9nPU3RDqehAUT +jqczw+zE677h3KBO4n5PuBhD5Lv7ZsR -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:24 2025 by rpki-client