$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: wg2mfMT4Wp5iwXj+SYLOvQEJMfIEhcnb+QBw1FqA4G8= Subject key identifier: A1:18:EB:3D:E1:16:03:C5:79:48:69:0F:A4:70:5E:1A:D1:9A:15:DE Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 074C Signing time: Thu 24 Apr 2025 21:29:27 +0000 Manifest this update: Thu 24 Apr 2025 21:29:26 +0000 Manifest next update: Thu 01 May 2025 21:29:26 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: wFKEcxeTZPejvpZ0mVO51S9ZDuIv5Iuccx/8UVa5rfc=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: Apr 24 21:29:26 2025 GMT Not After : May 1 21:29:26 2025 GMT Subject: CN=680aad37-241d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:69:7d:be:a0:93:2c:1f:c7:d9:02:28:0e: ff:0f:77:89:e8:9f:2b:90:8e:34:c3:2d:fc:ab:c6: 90:c6:bb:ef:f7:ed:60:cc:b5:fb:3b:1c:3c:27:b2: ff:cc:f8:23:14:14:47:96:55:a7:4c:df:d1:0e:94: e1:6f:93:ac:d9:75:00:07:43:e5:cf:7f:a2:83:e0: 9e:6a:07:af:4d:21:44:29:aa:bb:bc:a6:42:cf:cb: 52:1c:99:ff:40:65:46:7c:f0:f8:46:82:7e:c5:38: 55:d0:21:fe:25:5d:f3:19:78:22:f3:0a:f7:d0:7f: 05:5a:25:ad:a8:44:fa:1a:7f:d2:c1:a4:dd:f1:f3: be:dd:ad:a4:95:eb:c3:35:a4:8b:98:5a:bb:40:d1: cc:e0:ff:82:6e:57:c0:fc:d7:a7:cb:a5:49:20:ff: ae:da:b4:d3:05:62:f9:43:d9:6a:0a:46:3a:19:75: 8f:95:29:5e:0c:80:a5:70:41:8b:4b:32:10:6b:9f: 21:d7:d8:a5:71:9b:e9:38:d6:41:c9:09:aa:8e:7a: 25:10:37:09:fa:8a:f1:15:3f:12:e1:b1:03:87:c5: ce:37:29:92:62:59:31:39:50:8c:b1:0d:56:11:fc: f6:80:e5:51:5b:fe:09:1b:6d:ee:7b:b6:52:bd:5b: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:18:EB:3D:E1:16:03:C5:79:48:69:0F:A4:70:5E:1A:D1:9A:15:DE X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:70:16:83:18:e6:18:36:c1:95:96:0b:45:18:e3:96:03:87: 2f:30:df:d5:c7:70:aa:1b:6f:cf:1d:65:6f:12:24:6d:1e:f3: c4:55:82:9f:a5:9d:c4:70:af:77:79:37:f7:bb:32:ea:1b:de: ca:26:63:59:7c:e1:41:e5:24:d6:36:5b:55:54:e4:6b:0b:fb: ff:6d:7a:65:ff:1b:02:3a:84:d3:5e:85:7f:0e:e6:a7:5d:53: 72:ea:dd:43:1a:18:37:50:d7:d5:5a:64:6d:c7:c0:c6:47:9a: 22:4c:bc:2e:e5:7f:47:3a:41:51:45:4d:11:ab:3c:15:dc:4b: 63:0c:c0:c6:05:fa:86:0c:73:5d:4f:94:66:bf:59:4a:98:ce: f7:ea:52:ef:21:90:91:f6:f5:95:7e:f0:99:8b:12:50:41:15: fd:be:6f:a3:10:57:f4:df:dd:c0:83:ab:58:53:a8:d9:ac:65: f2:9a:74:30:97:c7:1d:ba:1a:67:4f:62:a0:1b:e2:48:01:0f: 43:2d:06:e2:1a:5a:37:74:0f:53:5d:43:88:b7:93:70:18:5e: 6e:2f:4c:14:4d:3c:96:e2:60:46:92:ca:16:63:48:53:c7:b2: cf:a0:5d:3e:a1:6a:21:f7:5e:21:57:95:bc:d2:93:38:30:2a: d4:71:ec:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjUwNDI0MjEyOTI2WhcNMjUwNTAxMjEyOTI2WjAYMRYwFAYD VQQDEw02ODBhYWQzNy0yNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs21pfb6gkywfx9kCKA7/D3eJ6J8rkI40wy38q8aQxrvv9+1gzLX7Oxw8J7L/ zPgjFBRHllWnTN/RDpThb5Os2XUAB0Plz3+ig+CeagevTSFEKaq7vKZCz8tSHJn/ QGVGfPD4RoJ+xThV0CH+JV3zGXgi8wr30H8FWiWtqET6Gn/SwaTd8fO+3a2klevD NaSLmFq7QNHM4P+CblfA/Neny6VJIP+u2rTTBWL5Q9lqCkY6GXWPlSleDIClcEGL SzIQa58h19ilcZvpONZByQmqjnolEDcJ+orxFT8S4bEDh8XONymSYlkxOVCMsQ1W Efz2gOVRW/4JG23ue7ZSvVu68wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEY6z3h FgPFeUhpD6RwXhrRmhXeMB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAicBaDGOYYNsGVlgtFGOOWA4cvMN/Vx3CqG2/PHWVvEiRtHvPEVYKf pZ3EcK93eTf3uzLqG97KJmNZfOFB5STWNltVVORrC/v/bXpl/xsCOoTTXoV/Duan XVNy6t1DGhg3UNfVWmRtx8DGR5oiTLwu5X9HOkFRRU0RqzwV3EtjDMDGBfqGDHNd T5Rmv1lKmM736lLvIZCR9vWVfvCZixJQQRX9vm+jEFf0393Ag6tYU6jZrGXymnQw l8cduhpnT2KgG+JIAQ9DLQbiGlo3dA9TXUOIt5NwGF5uL0wUTTyW4mBGksoWY0hT x7LPoF0+oWoh914hV5W80pM4MCrUcexe -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:36 2025 by rpki-client